Privacy
in plain words.
Courtesy translation of the German original. The legally binding version is the German one (toggle DE).
Controller
Christoph Schiller, bravique
Alfershausen 15, 91177 Thalmässing, Germany
Email: c.schiller@bravique.de
Access data / server logs
When you visit this website, our hosting provider automatically collects data your browser transmits: IP address, request date and time, time zone offset, request content, access status, transferred data volume, referrer URL, browser, operating system and language settings. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in stable, secure delivery). Retention: max. 30 days.
Cookies & local storage
This website sets no cookies. Values are stored only inside the two restaurant design examples, in your browser's local storage under the key bravique-restaurant-demo-v1: the point balance, example orders and the name you give the example account. These values never leave your browser, are not evaluated and can be deleted in your browser settings at any time. The "pause motion" switch is not stored.
Project check and funding calculator
Answers in the project check and entries in the funding calculator are processed exclusively locally in your browser. No data is transmitted to our server or to third parties. Once you close the page, the entries are gone.
Contact form, website enquiry and email
The contact form and the website enquiry send your details to a script on this same server (kontakt.php). Transmitted are your name, email address and message, plus phone number and company if you provide them. The website enquiry adds what it is about, the features you want, an existing website, budget range, preferred start, whether a domain or hosting already exists and whether you would like a funding check. Only name and email address are required, and for the website enquiry also the company. Each enquiry receives a reference number, is stored in a log file on the server that is not reachable over the internet, and is then emailed to c.schiller@bravique.de. If you opened the page through a link with campaign details (utm parameters, for example from an ad), these details are stored with the enquiry so that we can see where enquiries come from; nothing is stored in your browser for this.
Your IP address is not stored. To prevent abuse, at most ten enquiries per hour are possible. For this, a check value is derived from the IP address that changes daily and cannot be reversed without a secret key. It is kept with the times of the enquiries in a temporary file on the server, together with a marker that detects double submissions; files older than 26 hours are deleted with the next enquiry.
There is no database and no third party; your details are not used for advertising or a newsletter and not passed on. The legal basis is Art. 6 (1) (b) GDPR for enquiries about a possible engagement, otherwise Art. 6 (1) (f) GDPR on the legitimate interest in answering; for the abuse limit and the campaign details also Art. 6 (1) (f) GDPR. Data is kept until the enquiry is settled and no statutory retention period applies. A plain email to the same address takes the same route, only without the form.
Contact via WhatsApp
The contact page and, on phones, the bar at the bottom of most pages carry a link to WhatsApp. It is an ordinary link: as long as you do not click it, nothing is loaded and nothing is transmitted, and no WhatsApp script or tracking pixel is embedded. If you click it, WhatsApp opens on your device with our number as the recipient. From that moment the terms and privacy notice of WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland apply. That provider processes your number, the message and connection data; we have no influence on this, and a transfer to third countries cannot be excluded. Privacy policy: whatsapp.com/legal/privacy-policy-eea. Messages that reach us through WhatsApp are processed to answer your enquiry (Art. 6 (1) (b) and (f) GDPR) and deleted once the enquiry is settled and no statutory retention period applies. If you would rather not use it, the form, email and phone reach us just as well.
Fonts
The typefaces Cormorant Garamond, DM Mono and Inter are stored on this server and delivered from here. No connection to Google Fonts or any other provider is established, and no IP address is transmitted to third parties. The fonts are licensed under the SIL Open Font License. The licence texts sit next to the font files: inter-OFL.txt, cormorantgaramond-OFL.txt and dmmono-OFL.txt.
Analytics and advertising
This website currently uses no analytics or advertising services, such as Google Analytics or Google Ads, and loads no third-party scripts. Should this change, the site will ask for your consent first, and this statement will be updated beforehand.
Hosting
This website is hosted by checkdomain GmbH, Eschenburgstraße 7, 23568 Lübeck, Germany. checkdomain GmbH processes personal data on our behalf based on a data processing agreement (DPA) under Art. 28 GDPR. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in efficient and secure hosting). Provider's privacy statement: checkdomain.de/datenschutz.
External links
This website links to other sites, for example funding banks, ministries and market overviews on the pricing and funding pages. Nothing is loaded from them unless you click a link. When you do, your browser only tells the provider which website you came from, not the exact page. From then on you are outside our area of responsibility, and the provider's privacy policy applies.
Website audit (bravique.de/website-audit/)
Ordering: When you order a website audit, through the order form or by email, we process your name, company, email address, billing details, the domain to be audited and, if you provide them, phone number, VAT ID, region, brand and notes, in order to carry out and invoice the order (Art. 6 (1) (b) and (c) GDPR). The form sends your details to a script on this same server (bestellung.php), which emails them to c.schiller@bravique.de and sends a confirmation to your address. Each order receives an order number and is stored in a log file on the server that cannot be accessed over the internet. The IP address is not stored; to prevent mass submissions, at most eight orders per hour are possible, counted with the same daily changing check value as for the contact form. Campaign details from the link are stored with the order in the same way. Billing records are kept for the statutory retention periods; other order data is deleted as soon as it is no longer needed.
Free Light audit: For the free Light audit we process your company, contact person, email address, the domain to be audited and any optional details in order to produce the report and send it to you (Art. 6 (1) (b) GDPR). We do not need billing details for it. So that the free Light audit is given once per website, we compare the domain with earlier requests in the log (Art. 6 (1) (f) GDPR, our legitimate interest in not handing out the offer several times). If no order follows, we delete the details no later than twelve months after the report.
Contact about the report: If you ticked in the form that we may call you and email you about the report, we do so on the basis of your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time, informally by email to c.schiller@bravique.de or by phone. The audit does not depend on it.
Credit for the Premium audit: So that we can credit the price of a Premium audit against a website or visibility project commissioned within 60 days of the report, we keep the order number, company and billing details at least until that period ends (Art. 6 (1) (b) GDPR). Billing records are kept for the statutory retention periods in any case.
Performing the audit: We retrieve the publicly accessible pages of the given domain and use Google PageSpeed Insights (Google Ireland Limited, Dublin, Ireland) for load-time measurements, DataForSEO OÜ (Tallinn, Estonia) for backlink and search engine data, and Anthropic, PBC (San Francisco, USA) for the AI visibility test, evaluating the answers and drafting and checking the report. To Anthropic we transmit the domain, publicly available website content, brand, industry and region details and the answers of the other services for evaluation, but no payment data. For the AI visibility test we also send general customer questions, derived from industry and region and phrased without the domain or brand name, to OpenAI Ireland Limited (Dublin, Ireland; ChatGPT) and Perplexity AI, Inc. (San Francisco, USA). For the brand fact check we additionally ask these two services and Anthropic questions that include the brand name and domain, for example about the location, services and owner or management of the company. Transfers to Anthropic and Perplexity in the US are based on EU Standard Contractual Clauses, as are any onward transfers by OpenAI to affiliates outside the EU. Legal basis: Art. 6 (1) (b) GDPR.
Your rights
You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21), and to withdraw consent (Art. 7 (3) GDPR) with effect for the future. A simple email to c.schiller@bravique.de is sufficient.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection authority. Competent for us is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
lda.bayern.de
Currency & changes
This privacy statement is dated October 2026. Continued development of the website or changes to legal requirements may make adjustments necessary. The most recent version applies.