Data Privacy
1. Controller
The controller responsible for processing personal data on this website is:
Umrah Smart UG (haftungsbeschränkt)
Konkordiastraße 55
40219 Düsseldorf
Telefon: +49 211 9948 0060
E-Mail: info@umrah-smart.com
Represented by the Managing Director: Stephan Klar
A data protection officer has not been appointed, as there is no legal obligation to do so.
2. General Information on Data Processing
We process personal data of our visitors only to the extent necessary to provide a functional website and our content and services. Processing is always carried out in accordance with the General Data Protection Regulation (GDPR).
3. When Visiting the Website
When you access our website, information is automatically transmitted by your device's browser to our server and stored in so-called server log files. The following data may be collected:
-
IP address
-
Date and time of access
-
page or file accessed
-
referrer URL
-
browser and operating system used
-
name of access provider
This data is technically required to:
-
deliver the website correctly,
-
ensure system security and stability,
-
detect errors and attacks.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
Hosting:
The website is hosted by IONOS SE. Processing takes place on servers within the EU.
4. Cookie and Consent Management (Cookiebot)
We use Cookiebot (Usercentrics) to manage your consent for cookies and external services.
Cookiebot:
-
informs you about cookies used,
-
allows you to grant or withdraw consent,
-
stores your choices in compliance with data protection regulations.
Non-essential cookies and services are activated only after your explicit consent.
Legal basis:
Art. 6(1)(c) GDPR (legal obligation)
5. Analytics & Statistics – Google Analytics (via Site Kit)
If you have consented, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to:
-
analyze user behavior anonymously,
-
improve our website technically and in terms of content.
The following data may be processed:
-
IP address (shortened/anonymized),
-
pages accessed,
-
time spent,
-
technical information about browser and device.
In exceptional cases, data may also be transferred to Google LLC servers in the USA. Google uses EU Standard Contractual Clauses for this purpose.
Legal basis:
Art. 6(1)(a) GDPR (consent)
You can withdraw your consent at any time via the cookie banner.
6. Google Search Console
For technical monitoring and optimization of our website, we use Google Search Console.
No personal data of website visitors is processed.
7. Bookings and Appointment Management (Amelia)
For bookings and appointments, we use the Amelia plugin.
We process the data you provide, such as:
-
Name
-
Email address
-
Phone number
-
Booking or appointment details
This data is required to process and manage your booking.
Legal basis:
Art. 6(1)(b) GDPR (contract performance)
8. Performance & Technical Optimization
To improve loading times and technical stability, we use various performance tools, including:
-
WP Rocket (caching)
-
Imagify (image optimization)
-
OMGF / OMGF Pro (local hosting of Google Fonts)
Processing is carried out solely for the technically flawless provision of the website.
Legal basis:
Art. 6(1)(f) GDPR (legitimate interest)
9. Website Security
To protect our website, we use security features (e.g., via Jetpack), particularly for:
-
defense against attacks,
-
detection of malware,
-
securing login areas.
No user tracking takes place.
Legal basis:
Art. 6(1)(f) GDPR
10. Disclosure of Data
Personal data is only disclosed if:
-
you have expressly consented,
-
it is necessary for contract performance,
-
there is a legal obligation.
11. Retention Period
Personal data is stored only for as long as necessary for the respective purposes or as required by legal retention periods.
12. Your Rights
You have the right:
-
to access (Art. 15 GDPR),
-
to rectification (Art. 16 GDPR),
-
to erasure (Art. 17 GDPR),
-
to restriction of processing (Art. 18 GDPR),
-
to data portability (Art. 20 GDPR),
-
to object (Art. 21 GDPR),
-
to withdraw consent (Art. 7(3) GDPR).
You also have the right to lodge a complaint with the competent data protection supervisory authority.
13. Currency
This privacy policy is current as of February 2026.
We reserve the right to update it in the event of legal or technical changes.