Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is Multilingual Link Building Agency GmbH, Friedrichstraße 123, 10117 Berlin, Germany. You can contact us at fabi@site-media.co.uk.

2. Data We Collect

We collect personal data only when you voluntarily provide it through our contact forms, email correspondence, or discovery call scheduling. This may include:

• Full name and job title
• Company name and business email address
• Target markets and project goals you describe
• Technical data such as IP address, browser type, and pages visited (via analytics cookies, with your consent)

3. Purpose and Legal Basis

We process your data for the following purposes under GDPR Article 6:

• Contractual necessity (Art. 6(1)(b)): Responding to inquiries and delivering link building services you request.
• Legitimate interest (Art. 6(1)(f)): Improving our website, analyzing visitor behavior, and sending relevant industry insights to existing clients.
• Consent (Art. 6(1)(a)): Placing non-essential cookies and sending marketing communications.

4. Data Retention

Contact form submissions are retained for 24 months unless a business relationship is established, in which case data is retained for the duration of the engagement plus six years per German commercial law (HGB). Analytics data is anonymized after 14 months.

5. Third-Party Processors

We use the following third-party services that may process your data:

• Formspree – contact form processing (United States, EU Standard Contractual Clauses)
• Google Analytics – website analytics (only with cookie consent)
• Google Fonts – typography delivery

6. Your Rights

Under GDPR, you have the right to access, rectify, erase, restrict processing, data portability, and object to processing of your personal data. You also have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI).

7. International Transfers

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards through Standard Contractual Clauses or adequacy decisions as required by GDPR Chapter V.

8. Security

We implement technical and organizational measures including TLS encryption, access controls, and regular security assessments to protect your data against unauthorized access, alteration, or destruction.

9. Changes

We may update this policy periodically. Material changes will be communicated via our website with an updated effective date.