English version · courtesy translationLast updated: October 2026
Courtesy translation
This English version is provided for your convenience. Only the German original is legally binding.
Read the German originalController
#The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:
Ibram & Dawwa GmbHJohanna-Kinkel-Straße 1+293049 RegensburgGermany- Phone
- +49 1575 1702770
We have not appointed a data protection officer because we are not legally required to do so (§ 38 BDSG). For any privacy question, reach us using the contact details above.
At a glance
#- No tracking. We use no analytics, advertising or social media trackers.
- No tracking cookies. Your browser only stores your chosen theme (details).
- Local fonts. All fonts ship with this website. There is no connection to Google Fonts or any other CDN.
- Purpose-bound. We use data from the contact form or from emails only for the purpose you provided it for.
- No automated decisions. We do not make automated decisions about you and do not build profiles.
Hosting and server log files
#This website is hosted by an external provider: Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus. Our server is located in a data centre in Frankfurt am Main, Germany. On our behalf, the provider processes the data that is technically generated when the website is accessed, as well as the enquiries stored on the server (contact form). As a processor, it is bound to our instructions by a data processing agreement that forms part of its terms of service (Art. 28 GDPR).
Each time a page is requested, the server automatically records information your browser transmits (server log files):
- IP address of the requesting device
- date and time of the request
- page or file requested (URL)
- referrer URL (the page visited before)
- browser and operating system (user agent)
- HTTP status code and amount of data transferred
We need this data to deliver the website, keep it stable and secure, and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and without errors. The data is not combined with other data sources.
- Data
- IP address, time, URL, referrer, user agent
- Purpose
- Delivery, stability, security
- Legal basis
- Art. 6(1)(f) GDPR
- Retention
- Deleted after 14 days at the latest; longer only to investigate a specific security incident
- Recipient
- Hosting provider (processor)
Encryption
#This website is delivered over an encrypted connection only (TLS). You can tell by “https://” and the lock icon in your browser’s address bar. Data you send us through the website, such as a contact form message, is protected from being read by third parties in transit.
Contact form
#When you send us a request through the contact form, we process the information you enter:
- name
- email address
- company (optional)
- phone number (optional)
- area of interest (optional, e.g. I&D Systems or I&D Studio)
- budget range (contact form only)
- your message
Through the quote form on our SEO page (SEO) you send us, instead of a budget range and area of interest, the address of your website (up to three domains) and the situations, services and focus areas you picked; optionally also scope details (size of the site, number of languages or markets, platform, whether you could later give us read-only access to Search Console or server logs, deadline). A message is optional there. Sending the form does not trigger an automated check of your website; we look at it to prepare a quote. The same purposes, legal bases, recipients and retention periods apply as for the contact form.
We use this data only to handle and answer your request. If your request concerns a possible contract with us, the legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). In all other cases, it is Art. 6(1)(f) GDPR; our legitimate interest lies in answering the enquiries addressed to us. The checkbox in the form only confirms that you have read this privacy policy. You can object to processing based on legitimate interests at any time (right to object).
So that no enquiry gets lost, we first store it on our server in Frankfurt am Main, Germany (hosting). Along with your entries, we store the time of sending and how long the form took to fill in, the language and page of the form, and your IP address and browser identifier (user agent), so that we can recognise and trace misuse of the form. We then forward your entries by email to our Google Workspace mailbox (contact by email), where we answer them; the IP address and user agent are not included in that email.
To protect the form from spam and abuse, it contains a field that is invisible to people (honeypot). We also check how long the form took to fill in and whether the same message from the same email address already reached us within the last 24 hours, and we limit the number of requests per IP address. Submissions flagged by the honeypot, timing or duplicate check are stored with a marker but not forwarded by email; they are deleted on the same schedule as other enquiries. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form from abuse. We do not use any third-party CAPTCHA service, so no data is passed on for spam protection.
- Data
- Name, email, budget range, message; optionally company, phone and area of interest; for the SEO quote form instead website address(es), your selection and optional scope details; time sent and time taken to fill in, language and page of the form, IP address and user agent
- Purpose
- Handling and answering your request
- Legal basis
- Art. 6(1)(b) GDPR for contract-related requests, otherwise Art. 6(1)(f) GDPR; spam protection, IP address and user agent: Art. 6(1)(f) GDPR
- Recipients
- Hostinger International Ltd. (server), Google Cloud EMEA Limited (Google Workspace, mailbox); both as processors
- Retention
- Until your request is fully handled, at the latest 12 months after our last contact; if it leads to an engagement, statutory retention periods apply (retention)
Contact by email or phone
#If you email or call us, we process your contact details and the content of your request to deal with it. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or its preparation, and Art. 6(1)(f) GDPR otherwise. Our mailbox runs on Google Workspace, a service of Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, which stores emails on our behalf as a processor (Art. 28 GDPR). Data may also be processed in the USA (transfers to third countries).
Storage in your browser
#We do not use cookies for analytics or advertising. We store a single setting in your browser’s local storage (localStorage):
ibd-theme- Your choice between the light and dark design.
This entry stays on your device and is not sent to us. It is strictly necessary to provide a function you explicitly requested, so no consent is required (§ 25(2) no. 2 TDDDG). Where personal data is involved, the legal basis is Art. 6(1)(f) GDPR.
You can delete this entry at any time in your browser settings.
No analytics or tracking
#We use no web analytics, no tracking pixels, no advertising cookies and no embedded third-party content such as videos or maps. Videos on this website are served by us and only load when you press play.
Should we add an analytics tool in the future, it will only load after you have given your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). We will update this policy before that happens.
Fonts
#The fonts on this website (Archivo, DM Sans, JetBrains Mono) are embedded locally and delivered together with the website. No connection is made to Google Fonts or any other external server (CDN) when you visit.
We link to our Instagram profile with a plain link. It is not an embedded plugin: visiting our website sends no data to Instagram. Only when you click the link are you taken to Instagram, a service of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. From then on, Instagram’s privacy policy (opens in a new tab) applies.
Websites on GitHub Pages
#Some of our content is not delivered by our own server but by the GitHub Pages service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA: the freely accessible knowledge base about the event "Search Central Live Deep Dive Europe 2026" (community edition, https://ibramdawwagmbh.github.io/search-central-live-2026-knowledge-base/ (opens in a new tab)) and our concept websites Zeroth (https://ibramdawwagmbh.github.io/zerothDemo/ (opens in a new tab)) and TRACE (https://ibramdawwagmbh.github.io/traceDemo/ (opens in a new tab)). The source code and files of the knowledge base are also available in the public GitHub repository (https://github.com/IbramDawwaGmbH/search-central-live-2026-knowledge-base (opens in a new tab)).
Server log files at GitHub. When you open these pages, GitHub processes the data that arise technically, in particular your IP address, date and time, the page requested and details of your browser. According to GitHub, it logs and stores the IP addresses of visitors to GitHub Pages websites for security purposes. We do not receive these data and cannot see them. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is publishing this content reliably, securely and free of charge. More information is in GitHub's privacy statement (opens in a new tab).
Transfer to the USA. GitHub, Inc. also processes data in the USA. This is based on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which GitHub states it is certified, and additionally on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
No tracking, no third-party content. These pages use no cookies, no web analytics and no tracking services. Fonts, images and videos are delivered with the pages by GitHub Pages; there is no connection to Google Fonts, video platforms or other external servers. References to other websites (for example Google's documentation, LinkedIn or GitHub) are plain links; data are only transferred when you click a link.
Storage in your browser. For some convenience features, these pages store entries in your browser's storage. Because all of them live at the same address (ibramdawwagmbh.github.io), they share this storage:
- kb-prelaunch-checklist (localStorage, knowledge base): your ticks in the developer kit's pre-launch checklist
- kb-reef-hint (localStorage, knowledge base): that you closed the hint on the "Reef map"
- kb-reef-trail (sessionStorage, knowledge base): the items you last visited on the "Reef map"
- trace:presenter-hud, trace:presenter-hud-dock, trace:presenter-hud-fold (sessionStorage, TRACE concept website): settings of the presenter view
These entries stay on your device and are not sent to us or to GitHub; sessionStorage entries are deleted when you close the tab. They are strictly necessary to provide a function you have expressly requested, so no consent is needed (§ 25(2) no. 2 TDDDG). Where personal data are processed, the legal basis is Art. 6(1)(f) GDPR. You can delete the entries at any time in your browser settings.
GitHub repository. When you visit a repository on github.com, you use a GitHub service; GitHub's privacy statement applies.
- Data
- IP address, time, page requested, browser details (when GitHub serves the page); entries in browser storage (on your device only)
- Purpose
- Delivering and securing the knowledge base and the concept websites; convenience features
- Legal basis
- Art. 6(1)(f) GDPR; § 25(2) no. 2 TDDDG
- Retention
- Server log files as set by GitHub (we do not receive them); localStorage entries until you delete them; sessionStorage entries until you close the tab
- Recipient
- GitHub, Inc., USA
Recipients and processors
#We only pass on personal data where this is necessary for the purposes described. Recipients are:
- Hosting: Hostinger International Ltd., server in Frankfurt am Main, Germany
- Email: Google Cloud EMEA Limited (Google Workspace), for our mailbox and for forwarding contact form messages
- Authorities and courts, where we are legally obliged to disclose data (Art. 6(1)(c) GDPR)
All service providers processing data on our behalf are bound by data processing agreements under Art. 28 GDPR and may use the data only on our instructions. For transfers to countries outside the EU/EEA, see transfers to third countries.
Transfers to third countries
#Our email provider Google Cloud EMEA Limited (Google Workspace) may also process emails, including contact form messages forwarded to us, through Google LLC in the USA. This transfer is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google LLC is certified. In addition, the provider’s data processing terms include the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
Retention
#We store personal data only for as long as the respective purpose requires. After that, we delete it or restrict its processing.
We delete enquiries, whether sent through the contact form or by email, once they have been fully handled and no further correspondence is expected, and at the latest 12 months after our last contact. If an enquiry leads to an engagement, the retention periods of German commercial and tax law apply instead: six years for business letters, eight years for invoices and other accounting vouchers, and ten years for books and annual financial statements (§ 257 HGB, § 147 AO).
The period for server log files is stated in the hosting section.
Your rights
#Regarding your personal data, you have the following rights:
- Art. 15 GDPR
- Access to the data we process about you
- Art. 16 GDPR
- Rectification of inaccurate or incomplete data
- Art. 17 GDPR
- Erasure of your data
- Art. 18 GDPR
- Restriction of processing
- Art. 20 GDPR
- Data portability: receiving your data in a common, machine-readable format
- Art. 21 GDPR
- Objection to processing (see below)
- Art. 7(3) GDPR
- Withdrawal of consent at any time, with effect for the future
- Art. 77 GDPR
- Complaint to a supervisory authority (see below)
An informal message to info@
Right to object
#Your right to object under Art. 21 GDPR
Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Where your data is processed for direct marketing, you may object at any time without giving reasons. We will then no longer process it for that purpose.
Right to lodge a complaint
#If you believe that the processing of your data infringes data protection law, you can lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Promenade 1891522 Ansbach, Germanywww.lda.bayern.de (opens in a new tab)You may also contact the supervisory authority in the place of your habitual residence, your place of work or the place of the alleged infringement.
Further information
#Providing data. You are under no legal or contractual obligation to provide us with personal data. Without your contact details, however, we cannot answer your request.
No automated decision-making. We do not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.
Changes. We update this privacy policy when the website or the legal situation changes. The version published here always applies.
Last updated: October 2026