Last updated: 11 October 2026
This privacy policy explains what personal data Perfometrics collects when you visit perfometrics.co, contact us, request an audit or buy a digital product, why we use it, and what rights you have. We keep it short where we can and specific where it matters.
1. Who is responsible
The controller under the EU General Data Protection Regulation (GDPR) is:
Perfometrics UG (haftungsbeschränkt)
Managing director: Andrej Zafirov
Email: contact@perfometrics.co
Phone: +49 151 10767411
Full postal address: see our Impressum
We are not required to appoint a data protection officer. For any privacy question, write to contact@perfometrics.co.
2. Summary
- We collect the data you give us (for example through our contact and audit forms) and technical data your browser sends when you visit the site.
- We use it to run the website, answer your enquiry, prepare your audit, deliver purchases and, only if you agree, to measure and improve our marketing.
- We do not sell your data.
- Non-essential cookies and tracking only run after you consent in our cookie banner. You can change your choice at any time.
3. Hosting and server data
Our website runs on Shopify. The provider for the EU is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, Ireland. When you visit the site, Shopify automatically processes technical data such as your IP address, date and time of access, pages viewed, referring URL, browser and operating system. This is necessary to deliver the website securely and reliably.
Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website). Shopify may process data in Canada and the United States. Shopify Inc. is certified under the EU-U.S. Data Privacy Framework, and Shopify also uses the EU Standard Contractual Clauses. We have a data processing agreement with Shopify. More information: shopify.com/legal/privacy.
4. Contact forms, audit requests and email
When you use one of our forms (for example "Get a free audit" or "Talk to Andrej"), email us or call us, we process the details you provide. Typically this is your name, email address, company, website, phone number if given, and your message. Our forms are provided through Shopify Forms, so this data is stored in our Shopify account.
We use this data to reply, prepare your free audit or call, and, if we start working together, to set up the engagement. For an audit we also look at publicly available information about your website and online presence.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request before a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering business enquiries). We delete enquiry data when it is no longer needed, usually within 24 months of our last contact, unless we start working together or the law requires us to keep it longer.
If you later give us access to your own accounts or data (for example Google Ads, Analytics or Shopify), we process that data on your behalf under a separate data processing agreement.
5. Marketing emails
If you tick the box to receive emails from us, we use your email address to send occasional insights and offers about our services. We only do this with your consent (Art. 6(1)(a) GDPR). Every email contains an unsubscribe link, and you can also withdraw consent by writing to contact@perfometrics.co. After you unsubscribe we keep your address only on a block list so we do not email you again.
6. Cookies and consent
We use cookies and similar technologies. Cookies that are strictly necessary for the website to work are set on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. All other cookies, for statistics or marketing, are only set after you consent in our cookie banner (§ 25(1) TDDDG and Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time on our Your privacy choices page. Details, including the cookies we use, are in our Cookie policy.
7. Analytics and advertising (only with your consent)
If you agree to statistics or marketing cookies, we use the following services to understand how visitors use the site and to measure our advertising:
- Shopify Analytics (Shopify International Limited, Ireland): visits, pages viewed and how visitors find the site.
- Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): pseudonymised usage statistics. IP addresses are not stored in Google Analytics 4.
- Google Ads conversion tracking and remarketing (Google Ireland Limited): to see which ads lead to enquiries and, if you agree, to show our ads to people who visited our site.
- Microsoft Clarity (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland): records how visitors use our pages, for example clicks, scrolling and mouse movements, and shows this as heatmaps and anonymised session replays so we can find and fix usability problems. Text you type into forms is masked and not recorded. More information: Microsoft privacy statement.
Google may transfer data to Google LLC and Microsoft may transfer data to Microsoft Corporation in the United States. Both are certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future on our Your privacy choices page.
8. Google Fonts
To display our pages in the intended fonts (Nunito and Instrument Serif), our pages currently load these fonts from Google's servers (Google Fonts, provided by Google Ireland Limited). When a page loads, your browser connects to Google and your IP address is transmitted to Google. Google states that it does not use this data to build profiles or for advertising. We are moving these fonts onto our own hosting so that no connection to Google is needed. Until then, the legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a consistent appearance of our website). More information: Google Fonts privacy FAQ.
9. Purchases of digital products
If you buy a digital product from us, such as an e-book, we process your name, email address, billing details and order information to complete the purchase, deliver the product and meet our tax and accounting obligations. Payments are handled by the payment provider you choose at checkout (for example Shopify Payments or PayPal). We do not receive your full card details. Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) GDPR (legal obligations). Order and invoice data is kept for the periods required by German commercial and tax law, generally up to 10 years.
10. Links to social networks
Our website links to our LinkedIn page. These are plain links, not embedded plugins. LinkedIn only receives data if you click a link and visit LinkedIn, where LinkedIn's own privacy policy applies.
11. Who receives your data
We only share personal data where needed for the purposes above, with service providers bound by data processing agreements: Shopify (hosting, forms, shop and email), Google (fonts, and with your consent analytics and advertising), Microsoft (with your consent, usage analysis through Microsoft Clarity) and our payment providers. We may also share data with our tax advisor or authorities where the law requires it. We never sell personal data.
12. How long we keep data
We keep personal data only as long as needed for the purpose it was collected for, or as long as the law requires. Cookie lifetimes are listed in our Cookie policy.
13. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted (Art. 17)
- restrict processing (Art. 18)
- receive your data in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- withdraw any consent at any time, with effect for the future (Art. 7(3))
To use these rights, email contact@perfometrics.co. You also have the right to complain to a data protection authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin.
14. Changes to this policy
We update this policy when our services or the law change. The current version is always available on this page.