Last updated: July 3, 2026. This information applies to the Web Territory Check.
1. Controller
BrandBaboon UG (haftungsbeschränkt), Duisburger Str. 125, 40479 Düsseldorf, Germany
E-Mail: datenschutz@brand-baboon.com
2. Website access and Matomo
When the site is accessed, technically required connection data such as IP address, time, requested resource, referrer, and browser information is processed for secure delivery, error analysis, and abuse prevention. The legal basis is Art. 6(1)(f) GDPR. We do not use marketing cookies.
If optional self-hosted Matomo measurement is enabled, we collect page views without query strings or fragments, referrers, browser and device data, and general funnel events to improve the tool. For analysis errors, the entered URL is recorded together with the error code. Matomo is used without Matomo cookies by default, respects “Do Not Track”, and does not use browser feature detection. Names, email addresses, company names, competitor URLs, and confirmation tokens are not sent to Matomo.
You can object to Matomo processing here at any time:
3. Web Territory quick analysis
When the analysis starts, we process the entered URL, publicly visible content, and a screenshot of the analyzed page. IP address and user agent are stored only as salted hashes for abuse detection. The content is transmitted to OpenAI for the requested analysis. The legal bases are Art. 6(1)(b) GDPR and, for abuse prevention, Art. 6(1)(f) GDPR.
Analysis results, extracted content, and screenshots are cached by URL for up to 30 days so repeated checks of the same website produce consistent results during the displayed period. The time of the underlying crawl is shown in the result. Afterwards, the website snapshot and screenshot are removed automatically. A non-reversible block hash from IP and domain is stored for up to 90 days to prevent repeated analyses.
4. PDF report
For the report, we process name, business email address, company, website, optionally up to three competitor URLs, and analysis and report data. The report is generated locally via Gotenberg and sent as transactional email via Brevo. If enabled internally, BrandBaboon also receives a blind copy of the report email to process the request. The data is also processed in Fibery as lead, contact, and company records. The legal basis is Art. 6(1)(b) GDPR.
Locally stored PDF files and screenshots are deleted no later than 24 hours after sending. Internal email copies, lead and report data are generally anonymized 24 months after the last interaction. Block hashes from email and domain are removed after 90 days.
5. Optional sales consent
If you activate the optional checkbox, you will receive a confirmation email. Only after clicking the double opt-in link may BrandBaboon contact you by email about your analysis and suitable services. The legal basis is Art. 6(1)(a) GDPR. The link is valid for 48 hours. You may withdraw consent at any time with future effect via datenschutz@brand-baboon.com.
6. Service providers and transfers
We use processors for hosting, AI analysis (OpenAI), transactional email (Brevo), and CRM/lead management (Fibery). Where data is processed outside the European Economic Area, we use appropriate safeguards under Art. 44 et seq. GDPR, especially adequacy decisions or EU standard contractual clauses.
7. Fetching third-party websites
The tool fetches only the entered publicly reachable HTTP or HTTPS URL and respects robots.txt. Forms, protected areas, and internal network addresses are not fetched. Detected email addresses and phone numbers are removed before AI analysis as far as technically possible.
8. Your rights
Under the GDPR, you have rights of access, rectification, erasure, restriction, data portability, and objection. Consent can be withdrawn at any time. You also have the right to lodge a complaint with a data protection supervisory authority.