Privacy Policy

The controller for data processing on this website is PM Web Agency (Marco Rizk, Paul Bassem). Full contact details are in the Imprint. For any privacy question, reach us directly at office@pmwebagency.com.

When you submit the form on this website, we process what you enter: name, email address, phone/WhatsApp number and — where provided — business name, existing website, social profiles, your message and any uploaded files.

This is used solely to handle your request and build your free demo. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps taken at your request).

Your request is stored in our database and additionally delivered to us by email and WhatsApp so it cannot be missed. We keep requests for as long as needed to handle them and to meet statutory retention obligations.

We do not sell your data and do not share it for advertising. To operate the website we use the following processors:

• Vercel Inc. — hosting and delivery of the website, and storage of uploaded files.
• Neon Inc. — the database storing requests and client accounts.
• Resend / Amazon SES — delivery of notification and system emails.
• Meta Platforms Ireland Ltd. — delivery of the WhatsApp notification via the WhatsApp Business API.
• CallMeBot — an additional WhatsApp notification path.
• Google Ireland Ltd. — Google Analytics and Google Ads, only after you consent.

This may involve a transfer to the United States, carried out on the basis of Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

When you visit the site, our host processes technically necessary access data (including IP address, timestamp, page requested and browser type).

We additionally store the IP address of each form submission and login attempt for a limited time to contain automated abuse. These entries are deleted automatically after 24 hours. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).

When you check a domain on the homepage, only the domain name you typed is sent to the registry responsible for that domain ending, via its official RDAP service, to look up availability. No personal data of yours is transmitted.

We set strictly necessary cookies to remember your language choice and, in the client area, to keep you signed in. These are required to operate the site and need no consent.

Google Analytics and Google Ads only load once you accept in the cookie notice. Until then, Google Consent Mode blocks all analytics and advertising cookies. Your choice is stored locally in your browser; you can change it at any time by clearing this site’s data in your browser.

We also use Vercel Analytics and Speed Insights to measure reach and performance. These operate without cookies and without collecting personal data.

Clients with a project have a password-protected account. Passwords are stored only as a cryptographic hash and cannot be read by us. The session is maintained through an encrypted, strictly necessary cookie. The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time with effect for the future.

Just write to office@pmwebagency.com — we handle it without formalities. You also have the right to lodge a complaint with the Austrian Data Protection Authority.