Privacy Policy
Pursuant to Art. 13 GDPR (General Data Protection Regulation)
Last updated: August 2026 | German law applies (NRW)
1. Controller
Mirhan Sarikaya
Sole proprietor
Hühnerfeld 17
46562 Voerde
Germany
Email: mirhan@myclipped.com
Website: myclipped.com
2. Hosting – Netlify
This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. Netlify is certified under the EU-US Data Privacy Framework (DPF), which ensures an adequate level of data protection for data transfers to the USA.
When you visit the website, Netlify automatically collects server log files containing the following data:
- IP address of the requesting device
- Date and time of access
- Page / file accessed
- Browser type and version
- Operating system
- Referrer URL
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). The data is not merged with other sources. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Netlify.
Netlify Privacy Policy: https://www.netlify.com/privacy/
3. Domain – Squarespace Domains
The domain of this website is registered with Squarespace Domains (formerly Google Domains, fully migrated to Squarespace Domains as of July 2024). Operator: Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA. Squarespace is certified under the EU-US Data Privacy Framework (DPF).
As part of domain management, Squarespace Domains processes DNS queries and WHOIS registration data (name, address of the domain owner). Legal basis: Art. 6(1)(f) GDPR.
Squarespace Privacy Policy: https://www.squarespace.com/privacy
4. Email – Google Workspace
Business email communication is carried out via Google Workspace (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google is certified under the EU-US Data Privacy Framework (DPF).
During email communication, the content and metadata of messages (sender, recipient, timestamp) are processed on Google servers. Legal basis: Art. 6(1)(b) GDPR (contractual performance / pre-contractual measures). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Google.
Google Privacy Policy: https://policies.google.com/privacy
5. Contact Form – Make.com & Gmail
The contact form on this website transmits the entered data (name, email address, YouTube/TikTok channel, message) via a webhook to Make (Celonis SE, Theresienstr. 6, 80333 Munich, Germany). Make automatically forwards the data as an email to the operator's business email address (Google Workspace). The data is used solely to process your inquiry and is not shared with any third parties.
- Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures)
- A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Make (Celonis SE)
- Forwarding via Gmail is covered by the DPA with Google (see section 4)
- Retention period: Data is deleted after the inquiry has been fully processed, no later than 90 days
6. Cookies & Consent Management
We use cookies and similar technologies on our website. We distinguish between:
Strictly necessary technologies: Required for the core functionality and security of the website. These are set without requiring prior consent (§ 25 (2) TDDDG).
Tracking & Marketing technologies: Used to analyze visitor behavior and identify B2B leads. These are only activated if you give us your explicit prior consent (§ 25 (1) TDDDG). The consent banner offers three equally weighted options (Accept all / Reject / Settings); tracking technologies are not pre-selected.
Consent documentation (Art. 7(1) GDPR): When you make a choice in the cookie banner, we store a record of your decision (timestamp, your choice, and the version of this privacy policy). The consent cookie expires after 365 days; the records stored in your browser's local storage remain until you delete your browser data or until a new choice overwrites the previous record. No consent data is stored or transmitted to our servers. After the consent cookie has expired, the banner is displayed again and we ask you for a new decision.
You can manage or withdraw your consent at any time with future effect by adjusting your preferences in our Cookie Settings located at the bottom of the website.
Cookies & technologies used:
| Technology | Provider | Purpose | Duration |
|---|---|---|---|
cookie_consent | myclipped.com | Stores your cookie decision (necessary, marketing, timestamp, policy version) — as cookie and in localStorage | 365 days (cookie); localStorage until deleted by the user |
consent_record | myclipped.com (localStorage) | Consent audit record (Art. 7(1) GDPR): unique ID, timestamp, choice, policy version, page URL | Until overwritten by a new choice or browser data is deleted |
vtag-ai-js (script) | Leadsy / Instantly (Foo Monk, LLC, USA) | B2B visitor identification (see section 7) | Only loaded after consent |
_reb2butk | Leadsy / Instantly (Foo Monk, LLC, USA) | Long-term cross-session visitor identification | 1 year |
_reb2buid | Leadsy / Instantly (Foo Monk, LLC, USA) | Persistent visitor ID | 360 days |
_reb2bgeo | Leadsy / Instantly (Foo Monk, LLC, USA) | Geolocation for company identification | 20 days |
_reb2bref | Leadsy / Instantly (Foo Monk, LLC, USA) | Referrer URL attribution | 15 days |
_reb2bfxf, _reb2btd, _reb2bli | Leadsy / Instantly (Foo Monk, LLC, USA) | Identity resolution & session-to-identity linking | 1 month |
_reb2bresolve | Leadsy / Instantly (Foo Monk, LLC, USA) | Temporary identity resolution buffer | 2 days |
_reb2sessionID | Leadsy / Instantly (Foo Monk, LLC, USA) | Session management | 30 minutes |
_reb2bloaded | Leadsy / Instantly (Foo Monk, LLC, USA) | Script load flag (prevents double execution) | 1 second |
All tracking technologies are first-party cookies/local storage and are only set after you have given your consent. None of the cookies contain directly identifying personal data (e.g., name or email address).
7. Visitor Tracking & B2B Identification (Instantly.ai / Leadsy)
If you give your explicit consent via our cookie banner, we use the "Website Visitors" tracking technology provided by Instantly.ai (operated by Foo Monk, LLC, 30 N. Gould St., Ste. R, Sheridan, Wyoming 82801, USA; script loaded via r2.leadsy.ai).
Data collected: When you visit our website, the script collects device and network data (e.g., IP address, browser type, operating system), usage data (e.g., pages viewed, time spent) and the referring URL. From your IP address, geolocation data (e.g., city, region, country) is derived to identify the corporate entity behind a visit. For this purpose, the script uses the services of third-party identity providers (e.g., IP geolocation services and identity resolution providers such as LiveRamp). Where this allows a company to be identified, the corporate entity and — where publicly available — the professional contacts associated with it may be identified.
Purpose: This data is processed to identify corporate entities (B2B leads) and professional contacts associated with visiting IP addresses for our business and marketing purposes.
Legal basis: The storage of information on your device (cookies/local storage) is based on your explicit consent pursuant to § 25 (1) TDDDG. The subsequent processing of your personal data is based on your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future via our Cookie Settings.
Data transfer to the USA: The data collected by the script is transmitted to and processed on servers operated by Foo Monk, LLC in the United States. The USA is a third country for which the European Commission has not issued an adequacy decision. The transfer is based on the EU Standard Contractual Clauses (SCCs) pursuant to Commission Implementing Decision (EU) 2021/914, which have been concluded with the provider. In addition, a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been executed with Foo Monk, LLC.
Independent responsibility: To the extent Foo Monk, LLC processes data for its own purposes (e.g., within its own B2B lead database), it acts as an independent controller. Please refer to Instantly's privacy policy: https://instantly.ai/privacy
Retention: The cookies and local storage entries used expire automatically after the periods stated in section 6 (maximum 1 year). Visitor records stored in the provider's systems are deleted as soon as they are no longer required for the stated purposes; you can request the deletion of your data at any time via the contact details in section 1.
8. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7(3) GDPR): You can withdraw any consent you have given at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, please contact us at: mirhan@myclipped.com
You also have the right to lodge a complaint with a competent data protection supervisory authority. The competent authority for us is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
https://www.ldi.nrw.de
9. No Data Protection Officer Required
As a sole proprietor with no regular processing of special categories of data and fewer than 20 persons processing personal data, the appointment of a data protection officer is not mandatory pursuant to § 38 BDSG in conjunction with Art. 37 GDPR.
10. Updates
This privacy policy will be updated if the website, the services used, or the legal situation changes. The version published at the time of your visit applies.
Last updated: August 2026 | German law applies (NRW)