Privacy Policy

Last updated: April 2026

1. Data Controller

VANDS MEDIA LLC
Owner: Vanessa Schütze
3833 Powerline Road Suite 601-T
Fort Lauderdale, FL 33309
United States

Email: info@vands-media.com

The appointment of a Data Protection Officer is not legally required for us, as we do not meet the requirements of Art. 37 GDPR. For questions regarding data protection, please contact us at the email address above.

2. General Information on Data Processing

We process personal data of our users only on the basis of a legal ground provided by the GDPR. This includes in particular the user's consent, the fulfillment of contractual obligations, and our legitimate interests. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Telecommunications Digital Services Data Protection Act (TTDSG), and other applicable data protection laws.

We do not use any analytics or tracking tools (such as Google Analytics, Facebook Pixel, or similar services) on this website.

3. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request information about the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data or the completion of incomplete data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided there are no statutory retention obligations.
• Right to restriction of processing (Art. 18 GDPR): You may request the restriction of processing of your data.
• Right to data portability (Art. 20 GDPR): You may request to receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data where processing is based on Art. 6(1)(f) GDPR.
• Right to withdraw consent (Art. 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future.
• No profiling (Art. 22 GDPR): You have the right not to be subject to a decision based solely on automated processing.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.

To exercise your rights, please contact: info@vands-media.com

4. Website Provision / Server Log Files

When you visit our website, our hosting provider automatically collects information in server log files that your browser transmits. This includes:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Amount of data transferred
• Browser type and version
• Operating system used
• Referrer URL (previously visited page)

This data is technically necessary to deliver the website and to ensure stability and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Log files are automatically deleted after the retention period set by the hosting provider (typically within a few days).

5. Hosting and Data Processing Agreements

Our website is hosted by external service providers (Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA and IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany). The personal data collected on this website is stored on the hosting provider's servers.

Legal basis for processing: Art. 6(1)(f) GDPR (legitimate interest in reliable presentation of our website). The transfer of personal data to Vercel in the USA is based on the EU-US Data Privacy Framework (EU Commission adequacy decision pursuant to Art. 45 GDPR, Implementing Decision (EU) 2023/1795 of 10 July 2023).

We have concluded Data Processing Agreements (DPA) with our hosting providers pursuant to Art. 28 GDPR to ensure the protection of your personal data.

6. Cookies

Our website uses cookies. Cookies are small text files that are stored on your device by your browser. The storage of cookies on your device is based on Section 25 TTDSG (German Telecommunications Digital Services Data Protection Act). Where consent involves the processing of personal data, Art. 6(1)(a) GDPR additionally applies as a legal basis.

a) Technically necessary cookies

We use technically necessary cookies to make our website functional. These cookies are automatically deleted when you close your browser (session cookies). Legal basis: Section 25(2) TTDSG (technical necessity) in conjunction with Art. 6(1)(f) GDPR (legitimate interest).

b) Third-party cookies

When using certain features (e.g. Calendly appointment booking), cookies from third-party providers may be set. For more details, see the "Calendly" section of this privacy policy. These cookies are only set with your explicit consent. Legal basis: Section 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR (consent).

c) Managing cookies

You can configure your browser to inform you about the setting of cookies, to allow cookies only on a case-by-case basis, to generally prevent the acceptance of cookies, or to delete cookies that have already been stored. Disabling cookies may limit the functionality of this website.

7. Contact

When you contact us by email, the data you provide (e.g. your email address, name, and message) will be stored by us to process your inquiry. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in responding to your inquiry). Where your inquiry is aimed at concluding a contract, the additional legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). Data will be deleted no later than 6 months after your inquiry has been fully processed, unless statutory retention obligations (e.g. tax or commercial law retention periods of up to 10 years) apply.

8. Calendly (Appointment Booking)

On our contact page, we embed the Calendly service to enable online appointment booking. Provider: Calendly LLC, 3423 Piedmont Road NE, Atlanta, GA 30305, USA.

The embedding of the Calendly widget and the setting of cookies by Calendly is based on your consent (Art. 6(1)(a) GDPR). The processing of your booking data (name, email, appointment selection) for the purpose of scheduling is based on Art. 6(1)(b) GDPR (pre-contractual measures). When you book an appointment, the following data is collected and processed by Calendly:

• Name
• Email address
• Phone number (if applicable)
• Selected appointment and timezone
• IP address
• Browser and device information

Since Calendly is based in the USA, data is transferred to the USA. Calendly is certified under the EU-US Data Privacy Framework. Appointment data is deleted after the appointment takes place or after 12 months at the latest. For more information, please see Calendly's privacy policy: https://calendly.com/privacy

9. Fonts

This website uses the fonts "Krona One" and "Kumbh Sans". These fonts are stored locally on our server (self-hosting). No connection to external servers (e.g. Google Fonts) is made, so no personal data is transmitted to third parties.

10. Google Ads Data (DigitalErfolgreich Ads-Optimizer)

Our service "DigitalErfolgreich Ads-Optimizer" allows users to connect their Google Ads account to generate audit reports.

Data accessed

• Campaign, ad group, and ad data (names, status, performance metrics)
• Search query reports
• Conversion tracking configuration
• Google Ads account ID and account name

Use of data

• Solely to generate audit reports displayed to the user
• NO changes are made to Google Ads accounts (read-only access)
• Data is not shared with third parties, except as required by law
• Data is NOT used for advertising purposes
• Data is NOT used to develop, improve, or train AI or machine learning models

Storage and deletion

• Audit results are stored for the duration of the active user session and automatically deleted after 30 days at the latest
• OAuth access tokens are stored encrypted on our servers
• Users can disconnect their account at any time — all stored tokens and account data are deleted without undue delay
• Users may also revoke access at https://myaccount.google.com/permissions

Human access to Google user data is limited to what is necessary for security purposes, legal compliance, or with the user's explicit consent.

Legal basis: Consent (Art. 6(1)(a) GDPR) — the user grants consent via the Google OAuth Consent Screen.

11. Automated Decision-Making

We do not use fully automated decision-making pursuant to Art. 22 GDPR. Where automated analyses of your Google Ads data are generated through the DigitalErfolgreich Ads-Optimizer, these serve solely as an informational basis and do not have any legal effect on you.

12. International Data Transfers

VANDS MEDIA LLC is based in the USA. When you use our website or services, personal data may be transferred to and processed in the USA.

VANDS MEDIA LLC is not currently self-certified under the EU-US Data Privacy Framework. For transfers of personal data from the EU/EEA to our company, we rely on the following safeguards:

• Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR, where applicable
• Your explicit consent pursuant to Art. 49(1)(a) GDPR, particularly when you voluntarily submit data through our contact form, Calendly booking, or Google Ads account connection

Our sub-processors Vercel Inc. and Calendly LLC are certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection for data processed by those services.

13. Google User Data Disclosure (DigitalErfolgreich Ads-Optimizer)

Our service connects to users' Google Ads accounts via OAuth2 to generate read-only audit reports.

Data accessed: Campaign, ad group, ad, and search term data; conversion tracking configuration; account identifiers.

Use of data: Solely to generate audit reports displayed to the authenticated user. We do not modify any Google Ads settings. Data is not shared with third parties (except as required by law) and not used for advertising purposes. Google user data is not used to develop, improve, or train generalized or non-personalized AI and/or ML models.

Human access: Human access to Google user data is limited to what is necessary for security purposes, legal compliance, or with the user's explicit consent.

Storage & deletion: OAuth tokens are stored encrypted on our servers. Audit results are deleted automatically after 30 days. Users can disconnect their account at any time, which deletes all stored tokens and account data without undue delay. Users may also revoke access at https://myaccount.google.com/permissions.

Contact: For questions about your Google Ads data, contact us at info@vands-media.com.

DigitalErfolgreich Ads-Optimizer's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

14. Email Communications

If you contact us or book an appointment, we may send you email communications related to your inquiry or our services. Any commercial or promotional emails will include a clear way to opt out. You may opt out of promotional emails at any time by clicking the "unsubscribe" link in any such email or by contacting us at info@vands-media.com. Opt-out requests will be honored within 10 business days. Please note that even after opting out, we may still send you transactional messages (e.g. responses to your inquiries, appointment confirmations).

15. Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@vands-media.com, and we will take steps to delete such information from our systems.

16. Additional Information for California Residents

This section applies to California residents and supplements the information in our general privacy policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, "CCPA").

We do not sell or share (as those terms are defined under the CCPA) your personal information for monetary or other valuable consideration. As a California resident, you may have the following rights under the CCPA, subject to verification of your identity: the right to know, the right to delete, the right to correct, the right to opt-out of sale/sharing, and the right to non-discrimination. To exercise any of these rights, please contact us at info@vands-media.com. We will respond to verifiable consumer requests within 45 days.

17. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or changes to our services. The current version is always available on this page.