Privacy policy

The controller responsible for data processing on this website pursuant to Art. 4(7) GDPR is:

Vagabov Marketing Agency
Owner: Tymur Vagabov
Hauptstraße 6
56379 Sulzbach, Germany
Phone: +49 151 111 32 623
Email: tymur@vagabov.de
Website: https://vagabov.agency

When our website is accessed, the hosting provider automatically collects and stores information in so-called server log files, which the browser transmits automatically:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address (truncated / anonymized)

This data is not merged with other data sources. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technically error-free operation and the optimization of the website). Storage period: a maximum of 14 days.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel processes personal data (e.g. IP addresses, log data) on behalf of the operator on the basis of a data processing agreement (Art. 28 GDPR). Data transfer to the USA: based on EU standard contractual clauses.
Vercel privacy policy: vercel.com/legal/privacy-policy

We use cookies and similar storage technologies (e.g. localStorage). Before setting cookies that are not necessary, we obtain your explicit consent via the cookie banner in accordance with § 25(1) TDDDG and Art. 6(1)(a) GDPR. Consent can be withdrawn at any time via the “Change cookie settings” link in the footer.

Storage objects used:

• vagabov-consent-v1 (localStorage, necessary) – stores your cookie decision, storage period 180 days. Legal basis: Art. 6(1)(f) GDPR.
• theme (localStorage, necessary) – light/dark mode preference.
• _ga, _ga_*, _gid (cookies, statistics) – Google Analytics 4, only after consent. Storage period up to 2 years.
• _clck, _clsk (cookies, statistics) – Microsoft Clarity (behavioral analysis), only after consent. Storage period up to 1 year or until the end of the session, respectively.
• _gcl_* (cookies, marketing) – Google click ID tracking, only after consent.
• Vercel Web Analytics (localStorage, statistics) – an identifier to distinguish returning visits, not a cookie, only after consent. Details in section 8.

Only after you have given your consent do we use Google Tag Manager (GTM ID GTM-5VHNXZKM) and Google Analytics 4 (measurement ID G-TVXSJHWXNZ) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The IP address is transmitted in truncated form (anonymize_ip). Data may be transferred to the USA (Google LLC), based on EU standard contractual clauses and the EU-US Data Privacy Framework.

We use Google Consent Mode v2: no personal data is transmitted to Google before consent has been given. Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.

Google privacy policy: policies.google.com/privacy

Only after you have given your consent do we use Microsoft Clarity of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Clarity records anonymized interaction data (e.g. clicks, scroll depth, session recordings) to improve the usability of our website. Input fields in forms are masked before recording.

Clarity sets cookies (_clck, _clsk). Data may be transferred to the USA, based on EU standard contractual clauses. We have concluded a data processing agreement with Microsoft. Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.

Microsoft Clarity privacy policy: privacy.microsoft.com · clarity.microsoft.com/terms

We use two analytics services of our hosting provider Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA — see section 4). A data processing agreement is in place with Vercel; the transfer of data to the USA is based on EU standard contractual clauses. Both services set no cookies and create no cross-device profiles.

Vercel Web Analytics (only after consent)

Records aggregated audience data (pages viewed, referrer, country, device type, browser) as well as events defined by us for form submissions and appointment bookings. To distinguish returning visits, an identifier is stored in the local storage of your device. As this involves accessing information on your device, we load this service only after you have given your consent. Legal basis: Art. 6(1)(a) GDPR, § 25(1) TDDDG.

Vercel Speed Insights (without consent)

Measures the technical loading performance of our pages (Core Web Vitals such as loading time and layout stability). Only measurements that your browser itself calculated for the current page view are read — no information is stored on your device or read from it. § 25(1) TDDDG therefore does not apply. The processing serves to ensure and improve the technical functionality of our website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). You can object to this processing under Art. 21 GDPR.

Vercel privacy policy: vercel.com/legal/privacy-policy

Some subpages embed a booking widget of Cal.com, Inc. (USA) that you can use to book an initial call directly online. When you book, your name, email address, requested appointment and your entries in the booking form are transmitted to Cal.com and processed there. We have concluded a data processing agreement (Art. 28 GDPR) with Cal.com. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR.
Cal.com privacy policy: cal.com/privacy

All fonts used (Inter, Instrument Serif, DM Sans, Cormorant) are bundled on the server via next/font/google and delivered from our own server. No connection to Google servers or other font CDNs is established when the website is accessed, and no IP address is transmitted to third parties.

Blog and portfolio pages may embed images from external CDN providers (e.g. v3b.fal.media, vagabov.de). When they load, the IP address is transmitted to the respective provider. Legal basis: Art. 6(1)(f) GDPR.

If you contact us via the contact form, by email or via the WhatsApp link (wa.me/4915111132623), the data you transmit is stored to process your inquiry and for any follow-up questions. It is not passed on to third parties. For contact via WhatsApp, the privacy provisions of Meta Platforms Ireland Ltd. also apply.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contract) or Art. 6(1)(a) GDPR (consent). Storage period: until your request has been dealt with, thereafter in accordance with statutory retention obligations.

Our website contains links to profiles on Instagram and possibly other platforms. These are simple links, not embedded content — merely visiting the website does not transmit any data to the platforms. The privacy provisions of the respective provider only apply once you click a link.

You have the right at any time to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object (Art. 21 GDPR)
• withdraw any consent you have given (Art. 7(3) GDPR)

To exercise your rights, an informal message to the following address is sufficient: tymur@vagabov.de. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Without prejudice to any other remedies, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority. The authority competent for us is:

Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34, 55116 Mainz
Phone: +49 6131 208-2449
Email: poststelle@datenschutz.rlp.de
Web: datenschutz.rlp.de