Privacy Policy

Responsible for the data processing on this website is:

Fabian Günther
Bernhard-Göring-Straße 17
04107 Leipzig
Germany

Phone: +49 159 02225021

Personal data are only processed insofar as this is necessary for the provision of a functional website, for the processing of inquiries, for the execution of contracts, for the handling of bookings and orders or for the fulfillment of legal obligations.

The processing takes place in particular on the basis of Art. 6 Para. 1 GDPR:

• Art. 6 Para. 1 lit. a GDPR for consents
• Art. 6 Para. 1 lit. b GDPR for contract initiation and contract fulfillment
• Art. 6 Para. 1 lit. c GDPR for the fulfillment of legal obligations
• Art. 6 Para. 1 lit. f GDPR on the basis of legitimate interests, in particular for security, stability and prevention of misuse

This website is hosted by the following provider:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Within the scope of hosting, the data required for the provision, security and technical stability of the website are processed.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH.

When this website is accessed, technical information that is required for the delivery of the website and system security is automatically recorded:

• IP address
• Date and time of access
• Pages and files accessed
• Referrer URL
• Browser type and browser version
• Operating system
• Access status

The processing takes place for technical provision, error analysis as well as for the prevention of misuse and attacks.

When you contact us via a contact form, by telephone or by other means, the transmitted data are processed to handle the inquiry:

• Name
• Company or institution, if provided
• Phone number, if provided
• Email address or other return channel
• Message content
• Project related or order related information, if applicable

The processing takes place to handle the inquiry as well as for contract initiation.

To protect the website and the contact forms from automated messages, bot access and abusive entries, technical and organizational protective measures are used:

• Honeypot fields
• Time check when sending the form
• Server side validation
• IP based security checks
• Rate limiting
• Blocking of obviously abusive accesses

In doing so, technical data such as IP address, time, browser data, form behavior and security features may be processed, insofar as this is necessary to ward off spam and misuse.

This website does not use analytics or marketing cookies and does not use an external analytics provider. A first-party, data-minimising audience measurement is carried out on the German web server to assess reach, technical use and the clarity of the business service.

The record contains the time rounded to the minute, the page path, only the domain name of a referring source, a broad device category derived from the browser identifier already transmitted with the request, and successful contact requests as a count. Names, contact details, organisations, project information and message content are not included in the visitor statistics.

IP addresses are not written to the statistics log. To distinguish visits, a shortened checksum is formed from the IP address, browser identifier, website and a newly generated daily random value. The previous day's random value is overwritten, so visitors cannot be recognised across days or across the individual websites. No cookies are set and no information is stored in local storage or session storage for this purpose.

Raw data is retained for no more than 14 months. Afterwards, only aggregated monthly totals without visit identifiers remain. Processing is based on Art. 6(1)(f) GDPR. The legitimate interest is data-minimising audience measurement, technical optimisation and improvement of the service. The browser's Do Not Track setting is respected. You may object at any time using the contact details in the legal notice.

Any additional analytics, marketing or external convenience functions will be loaded only after prior consent where consent is legally required.

Insofar as online bookings, appointment reservations or orders are offered on this website, the data required for contract execution are processed:

• Name and company name, if applicable
• Billing address
• Contact data
• Booking or order data
• Selected services
• Payment status
• Voluntary project information, if applicable

The processing takes place to carry out pre contractual measures and to fulfill the contract.

External payment service providers may be used for payment processing, insofar as corresponding payment methods are offered.

Depending on the offer and selection, these may be, for example, PayPal, Klarna, credit card providers, Apple Pay, Google Pay or banking service providers for transfers.

In doing so, the data required for the payment are transmitted to the respective selected provider. For business customers, payment by invoice is also available on request.

For the creation of invoices, for accounting and for the fulfillment of tax law obligations, personal data are processed, insofar as this is legally required or necessary for contract execution:

• Name and company name
• Address
• VAT identification number, if applicable
• Service data
• Invoice data
• Payment information

In the context of existing or initiated business relationships, contact data and communication content are processed, insofar as this is necessary for scheduling, project execution, offer preparation, invoicing or answering follow up questions.

This includes in particular communication with companies, institutions, authorities and other clients within the scope of the offered studio services.

WhatsApp. WhatsApp is offered as an additional communication channel on the contact page and in the footer. WhatsApp is provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a company of the Meta corporate group (Meta Platforms, Inc., USA).

When WhatsApp is used, phone number, profile data, connection data and message content are processed by WhatsApp. A transfer to the USA and other third countries cannot be excluded. The data processing is carried out independently by WhatsApp; the privacy provisions are available at https://www.whatsapp.com/legal/privacy-policy-eea.

The legal basis for the processing of data that are transmitted to the contractor as part of WhatsApp communication is Art. 6 Para. 1 lit. f GDPR (legitimate interest in efficient direct communication) as well as Art. 6 Para. 1 lit. b GDPR for contractual inquiries. The use of WhatsApp is voluntary. Alternatively, email, telephone and the contact form are available.

On this website, links to social networks and platforms may be present, for example to Instagram, TikTok, Facebook, YouTube, Pinterest, LinkedIn or X.

When you simply visit this website, no data are generally transmitted to the respective platforms via simple links. Only when you click on such a link do you leave this website; the privacy provisions of the respective provider then apply.

Insofar as external content is embedded on individual pages, such as videos, maps, audio players, fonts or other third party content, a connection to servers of these providers may occur.

In doing so, in particular IP address, browser data and information about the accessed page may be processed.

Such content is, insofar as legally required, only loaded after corresponding consent or only used where it is technically necessary or otherwise permissible.

If a newsletter is offered on this website, the data entered for this purpose are processed exclusively for sending the respective requested information.

Unsubscription is possible at any time with effect for the future.

Personal data are stored only for as long as this is necessary for the respective purposes or as a legal retention obligation exists:

• Inquiries only for as long as this is necessary for processing and follow up
• Contract and booking data for contract execution and within the scope of legal retention periods
• Invoice and tax relevant data regularly up to 10 years according to legal requirements

Personal data are only transmitted to third parties if this is legally permissible or required for the fulfillment of a contract:

• Hosting providers
• Payment service providers
• Accounting and billing service providers
• Technical service providers for website operation and security
• Governmental bodies or authorities, insofar as a legal obligation exists

A transfer of personal data to countries outside the European Union or the European Economic Area only takes place if this is necessary for certain services, consent has been given or another data protection legal basis exists.

Insofar as external providers with their registered office or data processing in third countries are used, this only takes place within the scope of the legal requirements.

Technical and organizational measures are taken to protect personal data from loss, misuse, unauthorized access or unauthorized disclosure:

• Encrypted transmission via HTTPS
• Securing server and website measures
• Access restrictions
• Misuse and spam protection mechanisms

Within the scope of the legal requirements, you have in particular the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to revoke given consents with effect for the future

To exercise your rights, please contact us using the contact channels indicated in the Legal Notice.

If you are of the opinion that the processing of your personal data is not lawful, you have the right to complain to a competent data protection supervisory authority.

The competent supervisory authority for Saxony is the Saxon Data Protection Commissioner, Devrientstraße 5, 01067 Dresden.

Automated decision making or profiling within the meaning of the GDPR does not take place on this website, unless expressly stated otherwise in individual services.

This privacy policy may be adjusted if this becomes necessary due to legal, technical or organizational changes. The respective current version published on this website is decisive.