Privacy Policy
Last updated: 1/9/2026
1. Introduction
Welcome to Barrierefix! This service is operated by Serhat Cakmaktepe ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data in accordance with the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and the Barrierefix service (collectively, the "Service"), and informs you about your privacy rights.
2. Data Controller
The controller responsible for the processing of your personal data is:
Serhat Cakmaktepe Meuschelstr 60 90408 Nuremberg Germany
Email: info@barrierefix.de
3. Data We Collect
3.1 Data You Provide Directly
When you use our Service, we may collect the following types of personal data:
- Contact Information: Name, email address, phone number, company name, address
- Website Information: Your website URL, description of your accessibility requirements
- Communication Data: Messages and correspondence with us
- Payment Information: Billing address (payment details are securely processed through our payment service provider)
3.2 Automatically Collected Data
When you visit our website, we automatically collect certain information:
- Log Data: IP address, browser type, operating system, referrer URL, access dates and times
- Cookies and Tracking Technologies: See our Cookie Policy for details
- Usage Data: How you interact with our Service, pages visited, click patterns
4. How We Use Your Data
We use your personal data for the following purposes:
4.1 Service Provision
- Conducting website accessibility audits and analyses
- Providing WCAG 2.1 compliance services
- Creating accessibility reports and documentation
- Customer support and technical assistance
4.2 Communication
- Responding to your inquiries and providing information
- Sending service updates and important notices
- Marketing communications (only with your consent)
4.3 Business Purposes
- Processing payments and invoicing
- Improving our Service and website
- Complying with legal obligations
5. Legal Basis for Processing
We process your data based on the following legal grounds:
- Contract Performance (Art. 6(1)(b) GDPR): To provide our accessibility services
- Legitimate Interests (Art. 6(1)(f) GDPR): For website analytics, service improvement, and business communication
- Consent (Art. 6(1)(a) GDPR): For marketing emails and optional services
- Legal Obligation (Art. 6(1)(c) GDPR): To comply with tax and accounting regulations
6. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your experience and analyze our Service. You can manage your cookie settings in your browser.
For detailed information, see our separate Cookie Policy.
7. Data Sharing and Third Parties
We share your personal data in the following cases:
7.1 Service Providers
- Hosting Provider: For website hosting and data processing
- Payment Processor: For secure payment processing
- Email Services: For communication and marketing
- Analytics Tools: For website analysis and improvement
7.2 Legal Requirements
We may share your data when required by law or necessary to enforce our rights.
8. International Data Transfers
When we transfer your data to third-party providers outside the EU, we ensure appropriate safeguards such as Standard Contractual Clauses or adequacy decisions are in place.
9. Data Storage and Retention
We store your personal data only as long as necessary for the purposes described in this Privacy Policy or as required by law:
- Contract Data: For the duration of the contractual relationship plus legal retention periods
- Communication Data: Up to 3 years after last contact
- Website Analytics: Maximum 14 months
- Marketing Data: Until consent is withdrawn
10. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR): Information about processed data
- Right to Rectification (Art. 16 GDPR): Correction of inaccurate data
- Right to Erasure (Art. 17 GDPR): Deletion of your data under certain circumstances
- Right to Restriction (Art. 18 GDPR): Restriction of processing
- Data Portability (Art. 20 GDPR): Receive your data in a structured format
- Right to Object (Art. 21 GDPR): Object to processing based on legitimate interests
- Withdrawal of Consent: Possible at any time for consent-based processing
11. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These include:
- SSL/TLS encryption for data transfers
- Secure servers and databases
- Regular security updates
- Access controls and employee training
12. Children and Minors
Our Service is not directed at persons under 16 years of age. We do not knowingly collect personal data from children under 16. If we learn that we have collected such data, we will delete it promptly.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. In case of material changes, we will notify you by email or through our website. Your continued use of our Service after changes take effect constitutes acceptance of the updated terms.
14. Contact and Supervisory Authority
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Email: info@barrierefix.de Address: Serhat Cakmaktepe, Meuschelstr 60, 90408 Nuremberg, Germany
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach Phone: +49 (0) 981 180093-0 Email: poststelle@lda.bayern.de Website: https://www.lda.bayern.de
However, we would appreciate the opportunity to address your concerns before you contact the supervisory authority.