Privacy policy
Last updated: 28 October 2026
This is a translation for your convenience. The German version of the Datenschutzerklärung is legally binding. “GDPR” refers to the EU General Data Protection Regulation (in German: DSGVO).
1. Controller
AFKARO GbR
Eiswerderstraße 18e
13585 Berlin, Germany
Email: hello@afkaro.de
Phone: 030 325 133 27
2. Hosting and log files
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf.
Each time the site is accessed, the server automatically stores some information in log files: your IP address, which is anonymised immediately, date and time, the page or file requested, browser and browser version, operating system, device type and the page you came from.
We need this data to deliver the website to you, to operate it stably and securely and to detect attacks. This is our legitimate interest. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted after eight weeks.
3. Contact by form or email
When you write to us, we process your details: name, company, email address, your phone number if provided, and your message. Required fields are marked. Without them, we cannot process your enquiry.
We only use the data to answer your enquiry. If it concerns a possible contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases it is Art. 6(1)(f) GDPR. Our legitimate interest is answering enquiries.
Our emails are handled by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The provider processes the data on our behalf. If no contract results, we delete your enquiry once it has been dealt with, at the latest after six months. If a contract results, we keep the documents for as long as statutory retention periods require, for example under German tax law (§ 147 AO).
4. Digital Check
4.1 How the check works
You enter the address of a website, together with your company, your name and your email address. Optionally also your phone number. Our server retrieves the publicly accessible content of the website and evaluates it. We send you the result by email. A copy goes to us.
The legal basis is Art. 6(1)(b) GDPR. The check is not possible without a website address and email address.
4.2 Google PageSpeed Insights
For technical values such as loading time, we transmit the address of the checked website to Google PageSpeed Insights, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The website address is thus transferred to the USA. This is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework under Art. 45 GDPR, under which Google LLC is certified. The legal basis for the transfer is Art. 6(1)(b) GDPR.
4.3 Our list of prospects
We store your company, your name, your contact details and the result of the check in our list of prospects. This allows us to contact you about your result and present suitable services, for example by phone. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is contacting businesses that are interested in our services.
Unless you object, we delete your data twelve months after the last contact.
4.4 Information by email
With your consent, we send you information about our services by email. The legal basis is your consent under Art. 6(1)(a) GDPR. We store the time of your consent and of your confirmation so that we can prove it.
You can withdraw your consent at any time. Processing up to the withdrawal remains lawful.
5. Protection against misuse
To prevent anyone from using our form and the check in large-scale automated ways, we store the time of your request and your IP address as a hash value. We automatically delete both after 48 hours at the latest.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protection against misuse.
6. Cookies and analytics
6.1 Consent banner (Cookiebot)
Our consent banner is provided by Cookiebot, a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Usercentrics processes the data on our behalf. The following is processed: your selection, date and time, a random identifier of your consent and technical details such as the shortened IP address and the browser. Your selection is stored in a cookie in your browser so that the banner does not appear on every visit.
We are legally obliged to be able to prove consent. The legal basis is therefore Art. 6(1)(c) in conjunction with Art. 7(1) GDPR. We store your selection for twelve months.
6.2 Google Analytics
With your consent, we use Google Analytics 4. The provider for users in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service shows us how visitors use our website: which pages they open, how long they stay and how they find us. This helps us improve the website.
Information about your visit is processed, such as pages viewed, clicks, time spent, the page you came from, device, browser, operating system and your approximate location (country, region, city). For this, Google Analytics sets cookies that recognise your browser on a later visit. They expire after two years. Google deletes user and event data after two months.
Google processes the data on our behalf. Data may also be transferred to Google LLC in the USA. This is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework under Art. 45 GDPR, under which Google LLC is certified.
The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
6.3 Changing or withdrawing your consent
You can change your selection or withdraw your consent at any time via the “Privacy settings” link at the bottom of every page. Processing up to the withdrawal remains lawful.
6.4 Settings stored locally
The website stores your chosen display and accessibility settings (e.g. light or dark design, text size, contrast) and your cookie choice in your browser’s local storage. This information stays on your device and is not transmitted to us. It is technically necessary for the functions you requested (§ 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.
7. Our Instagram profile
We have a profile on Instagram. The provider is Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4, Ireland. When you visit our profile, Meta processes your data under its own responsibility. Meta also processes data in the USA.
Meta provides us with aggregated statistics on how visitors use our profile. We have no access to the individual data behind them. We are jointly responsible with Meta for these statistics (Art. 26 GDPR). The legal basis is our legitimate interest in improving our presence (Art. 6(1)(f) GDPR). You can exercise your rights with us and with Meta.
If you write to us via Instagram or comment on a post, we process this information in order to reply to you. If it concerns a possible contract, the legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR. The same deletion periods apply as for enquiries by email (section 3).
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent you have given at any time (Art. 7(3)). You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
9. Your right to object
Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or we need the data to establish, exercise or defend legal claims.
You can object to the use of your data for advertising at any time without giving reasons. We will then no longer use it for this purpose (Art. 21(2) and (3) GDPR).