Privacy Policy

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. For detailed information on data protection, please refer to our privacy policy below. This policy is compliant with the General Data Protection Regulation (GDPR / DSGVO).

The party responsible for data processing on this website is:

Oussama Allali
Ouceal — Digital Agency
Uhlandstr. 11
47877 Willich
Germany

Phone: +49 1521 6629522
Email: info@ouceal.com

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the "Controller" section of this privacy policy.

How do we collect your data?

Your data is collected partly by you providing it to us. This may be data that you enter in a contact form, for example. Other data is collected automatically or with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page view). The collection of this data takes place automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to demand the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to demand the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

This website is hosted by an external service provider (hoster). Personal data generated when you visit this website is processed on the hoster's servers. This mainly includes IP addresses, time and content of page requests and technical metadata (see "Server Log Files").

Our hoster:

Netlify, Inc.
512 2nd Street, Suite 200
San Francisco, CA 94107, USA

We use the hoster in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR is in place with Netlify as part of Netlify's terms of service.

Third-country transfer: Netlify is certified under the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023). The European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply in addition.

Our email mailboxes (e.g. info@ouceal.com) are operated by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. If you email us, your message is stored there.

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. This privacy policy explains what data we collect and what we use it for.

Storage Duration

Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device when you visit our website. They do no harm and serve to make our offer more user-friendly, effective, and secure.

Types of Cookies:

— Strictly necessary cookies: Required for basic website functions (e.g., storing your cookie preferences).
— Analytics and marketing cookies: Set only with your explicit consent and help us understand how the website is used and how our ads perform (see Google Analytics and Google Ads).

Consent Management

When you first visit our website, you will be informed about the use of cookies via a cookie banner and asked for your consent. Without your consent, only strictly necessary cookies are set. You can withdraw or change your consent at any time with effect for the future by clicking "Cookie settings" in the footer. Your choice is stored in your browser's local storage.

Strictly necessary information is stored on the basis of § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR (legitimate interest). For all other cookies and similar technologies, the legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR.

The provider of the pages automatically collects and stores information in so-called server log files that your browser automatically transmits to us. These include:

— Browser type and browser version
— Operating system used
— Referrer URL
— Hostname of the accessing computer
— Time of the server request
— IP address

This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of their website.

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze user behavior on our website. We receive various usage data, such as page views, dwell time, operating systems used, and the user's origin. This data is summarized in a user ID and assigned to the respective end device of the website visitor.

Legal Basis

The use of Google Analytics is based exclusively on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TDDDG. You give your consent via our cookie banner. You can withdraw your consent at any time with effect for the future via "Cookie settings" in the footer.

IP addresses

We use Google Analytics 4. According to Google, IP addresses are not logged or stored; location is derived on servers in the EU before the data is processed further.

Data Transfer to the USA

Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Further information can be found here: www.dataprivacyframework.gov

Storage Duration

Data stored by Google at the user and event level that is linked to cookies, user IDs, or advertising IDs is anonymized or deleted after 14 months.

Order Processing

We have concluded a data processing agreement with Google and only use Google Analytics after you have given your consent.

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://policies.google.com/privacy

If you contact us via the contact form, our inquiry form (/get-started), the website check, email or WhatsApp, we process the data you provide (e.g. name, company, email, phone number, website, project details, message) to handle your inquiry. We do not pass this data on to third parties without your consent, except to the service providers listed below who act on our behalf.

Customer management (CRM)

Inquiries from our forms are stored in our own customer management system (crm.ouceal.com) so we can track and answer them. The application is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA; the data is stored in a database operated by Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513. Data processing agreements under Art. 28 GDPR are in place with both providers. Any transfer to third countries is based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) or, where the provider is certified, the EU-U.S. Data Privacy Framework.

Make.com (inquiry form and website check)

Information from the inquiry form and the website check is also processed via the automation service Make (Celonis group) to notify us of new inquiries. Processing takes place in a data center in the EU. A data processing agreement under Art. 28 GDPR is in place with Make.

EmailJS (contact form)

We use EmailJS to notify us of new contact form messages. Your form data is transmitted to EmailJS and forwarded from there to our email address. EmailJS is based outside the EU; any transfer to third countries is based on the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Legal basis

Processing is based on Art. 6(1)(b) GDPR where your inquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling inquiries effectively (Art. 6(1)(f) GDPR).

Storage period

If no contract is concluded, we delete your inquiry no later than 12 months after our last contact. If a contract is concluded, we store the data for the duration of the business relationship and beyond where statutory retention obligations apply (usually 6 or 8 years under the German Commercial Code and Fiscal Code).

We use Google Ads to promote our services and use Google's conversion tracking to measure whether an inquiry reaches us after an ad click (thank-you page view). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Conversion tracking is only loaded if you have consented in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Any transfer to the USA is based on the EU-U.S. Data Privacy Framework, under which Google LLC is certified. You can withdraw your consent at any time via "Cookie settings" in the footer.

We maintain online presences on social networks to communicate with customers and prospects. When accessing these networks, the terms and conditions and data protection guidelines of the respective operators apply.

— Instagram: @oucealagency
— LinkedIn: Ouceal
— Facebook: Ouceal
— X (Twitter): @ouceal

Links to social networks are simple links. When you click on such a link, you will be redirected to the respective platform, where the data protection provisions of the respective provider apply.

For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

You have the following rights regarding your personal data:

— Right of access (Art. 15 GDPR)
— Right to rectification (Art. 16 GDPR)
— Right to erasure (Art. 17 GDPR)
— Right to restriction of processing (Art. 18 GDPR)
— Right to data portability (Art. 20 GDPR)
— Right to object (Art. 21 GDPR)

You also have the right to file a complaint with a data protection supervisory authority regarding our processing of your personal data.

Competent Supervisory Authority:

State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf, Germany

For scheduling, we use WhatsApp Business (operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). When you contact us via WhatsApp, your messages and metadata (e.g. phone number, usage time) are transferred to WhatsApp/Meta. For more information, see WhatsApp's privacy policy: https://www.whatsapp.com/legal/privacy-policy

Legal basis

Art. 6(1)(a) GDPR (your consent via actively contacting us on WhatsApp) and Art. 6(1)(b) GDPR (performance of pre-contractual measures).

Third-country transfer

When using WhatsApp, personal data may be transferred to the United States to Meta Platforms, Inc. The transfer is based on the EU-US Data Privacy Framework (adequacy decision of the European Commission dated July 10, 2023) and supplemented by Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR.

Retention

Message content is stored as long as necessary for communication with you. You may request deletion of your messages at any time (contact: info@ouceal.com).