هذه الصفحة متاحة بالإنجليزية للتسهيل. النسخة الألمانية هي المرجع القانوني. النسخة الألمانية.
Last updated: October 2026
Controller responsible for data processing on this website:
Issa Shaker (Whale Agency), [Straße], [PLZ] Berlin, Germany — email: support@whaleagency.company
We process personal data only to the extent necessary to operate this website, to handle your enquiries, or with your consent. Before you give consent, no analytics or marketing services are loaded and no data is transmitted to Google.
This website is hosted by Vercel Inc. (USA). When you visit the site, technically necessary server log data is processed (e.g. IP address, date and time, requested page, browser type). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). A transfer to the USA cannot be ruled out; the safeguards under Art. 44 et seq. GDPR apply, as described in the provider's privacy notices.
On your first visit we determine only the country from which you access the site, using our own hosting infrastructure, in order to offer you the appropriate language version. No external service is used for this; we neither evaluate nor store your IP address. Legal basis: Art. 6(1)(f) GDPR.
If you use the contact form or the enquiry assistant (“Apply for access”), we process the data you enter (name, email address, message, and details of your budget, desired services and timeframe) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. We store the data for as long as is necessary to handle the enquiry and delete it afterwards, unless statutory retention obligations apply.
Enquiries and website content (e.g. blog, team, job listings, portfolio) are processed via Supabase (Supabase Inc.) and stored in a data centre in the EU (region eu-west-1). When this content is loaded, your IP address is technically transmitted to the provider. The provider acts as a processor (Art. 28 GDPR).
When you write to our AI assistant, your input is transmitted in order to be answered — via our backend service (Supabase Edge Function) — to Anthropic PBC (USA), which operates the language model. The replies come from an AI, not from a human. Please do not enter sensitive or confidential data. We do not store chat content permanently in our systems. Legal basis: Art. 6(1)(b) or (f) GDPR (answering your enquiry). A transfer to the USA cannot be ruled out; the safeguards under Art. 44 et seq. GDPR apply, as described in the provider's privacy notices.
To book a call we link to Calendly (calendly.com/whaleagency-support/30min). Only when you open the link is data transmitted to Calendly LLC (USA) and processed there under its privacy notices. The same applies to links to WhatsApp (Meta), Instagram and TikTok: these services are not embedded, and data flows to the respective provider only when you click.
Strictly necessary (no consent required, Section 25(2) TDDDG): we store your cookie choice (whale-cookie-consent) and your language choice (whale-lang) in your browser's local storage.
With your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG): Google Tag Manager and Google Analytics, as well as our own visit statistics (see sections 10 and 11). Without your consent these services are not loaded. You can change or withdraw your choice at any time: (also available via the link in the page footer). Withdrawal does not affect the lawfulness of processing carried out until then.
After you consent, we load Google Tag Manager of Google Ireland Limited (Ireland). It triggers measurement tags, in particular Google Analytics for audience measurement and for evaluating our enquiries; depending on the configuration, also conversion measurement for advertising campaigns (e.g. Google Ads, Meta). Cookies may be set and data (e.g. IP address, page views, device and browser data) may be transmitted to Google, including to Google LLC in the USA; Google is certified under the EU-U.S. Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
After you consent, we ourselves record page views and clicks on key buttons (page visited, referring page, country, date). For this we store a randomly generated visitor ID (wa_vid) in your browser's local storage. The data is stored at Supabase (EU) and is not linked to your name or email address. Legal basis: consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you withdraw consent, the visitor ID is deleted.
The fonts we use are hosted locally on our own server; no connection to Google Fonts is made.
You have the right at any time to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.
If you have questions about data protection, you can reach us at: support@whaleagency.company
نودّ قياس استخدام موقعنا (Google Analytics وإحصاءاتنا الخاصة). يتم ذلك بموافقتك فقط — وبدونها يعمل فقط ما هو ضروري تقنياً. سياسة الخصوصية