1. Who we are (the data controller)
The data controller for this website and any data processing described here is AdwordsOne GmbH, registered at Baarerstrasse 43, 6300 Zug, Switzerland (VAT / MWST CHE-298.968.498). For any privacy-related question or to exercise your rights, email us at contact@adwordsone.com.
2. What data we collect, and why
2.1 When you contact us
If you book a fit call, send us an email, or fill out a form, we receive whatever you provide — typically your name, email address, company, website, and the contents of your message. We use this to reply, to qualify whether we'd be a good fit to work together, and (if we end up working together) to deliver the service.
Lawful basis: performance of a (potential) contract with you (Art. 6(1)(b) GDPR), and our legitimate interest in responding to inbound enquiries (Art. 6(1)(f) GDPR).
Retention: 24 months from your last contact with us, unless we're actively in a client relationship (in which case we keep it for the duration of that relationship plus 7 years for accounting and legal purposes).
2.2 When you visit this website
We use Google Analytics 4 (with cookies, only if you consent) to understand aggregated usage — page views, broad geography, referrer domains, basic device info. We also use Google Ads conversion tracking (with cookies, only if you consent) so we know which campaigns brought you here. We do not use any cross-site retargeting trackers from Meta, LinkedIn, or anywhere else.
Lawful basis: your consent (Art. 6(1)(a) GDPR), captured via the cookie banner. You can withdraw consent at any time via the "Manage cookies" link in the footer.
Retention: Google Analytics retention is set to 14 months. Conversion tracking cookies expire per Google's defaults, with a maximum of 90 days.
2.3 When you book a call via Calendly
Calendly receives your name, email, the time you booked, and any answers to questions on the booking form. We see all of that. Calendly is a separate processor — see Section 4.
2.4 Server logs
Our hosting provider (Cloudflare) logs basic request data — IP address, timestamp, requested URL, user agent — for security and operational purposes. These logs are retained for a limited period per Cloudflare's policies and are not used for marketing.
Lawful basis: our legitimate interest in keeping the site secure and performant (Art. 6(1)(f) GDPR).
3. What we don't do
- We don't sell your personal data to anyone, ever.
- We don't share your data with third-party advertising networks beyond Google Ads (which we use for conversion measurement only, not retargeting). No Meta Pixel, no LinkedIn Insight Tag, no third-party retargeting cookies.
- We don't run automated decision-making or profiling that has legal effects on you.
- We don't use dark patterns to coerce consent — you can reject non-essential cookies and still use the site fully.
4. Who else processes your data
We use a small number of third-party services. Each receives only the data it needs to do its job.
| Processor | What they do | Where data is processed |
|---|---|---|
| Cloudflare, Inc. | Hosting, CDN, DDoS protection | Global edge (incl. EU + US) |
| Google LLC | Analytics and ad attribution (only with your consent) | EU + US (SCCs in place) |
| Calendly LLC | Meeting booking | US (SCCs in place) |
| Email provider | Sending and receiving email at @adwordsone.com | EU / Switzerland |
For transfers outside the EU, EEA, UK, and Switzerland, we rely on the Standard Contractual Clauses (SCCs) and, where available, the EU–US Data Privacy Framework, to ensure adequate protection.
5. Your rights
Under EU GDPR, UK GDPR, and Swiss FADP, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your data (the right to be forgotten)
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time, without affecting the lawfulness of prior processing
- Lodge a complaint with a supervisory authority (Switzerland: FDPIC; EU: your local DPA; UK: ICO)
To exercise any of these rights, email contact@adwordsone.com. We respond within one month at the latest, usually faster.
6. Children
This site and our services are aimed at businesses, not children. We don't knowingly collect personal data from anyone under 16. If you believe we've inadvertently received such data, please tell us and we'll delete it.
7. Security
We use industry-standard technical and organisational measures to protect your data: TLS for all traffic, encrypted storage, access controls on internal systems, no plaintext passwords, no production access for anyone outside AdwordsOne. No system is perfectly secure. If a breach occurs that affects your data, we'll notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR and FADP.
8. Cookies
The full list and your control over cookies is in our Cookie Policy. You can change your cookie preferences at any time via the "Manage cookies" link in the footer.
9. Changes to this policy
If we make material changes to this policy, we'll update the "Last updated" date above and, where the change materially affects your rights, post a prominent notice on the site. We recommend checking back occasionally.
10. Contact
Any questions about this policy or how we handle your data — email us at contact@adwordsone.com. We aim to reply within one working day.