Privacy
The controller is the operator of this website (name and address in the legal notice).
What we store: name, email and optionally phone (for your account); project details, messages and files you upload; quotes, contracts and payment status. Card details are entered directly with the payment provider and are not stored here.
Purpose and legal basis: handling your request and contract (Art. 6(1)(b) GDPR), statutory retention duties (Art. 6(1)(c)) and website security (Art. 6(1)(f)). Data is hosted in Frankfurt, Germany. To turn your wishes into a scope of work, only the text of your wishes – without your name or contact details – may be sent to an AI service.
Retention: requests without a contract are deleted no later than 12 months after the last contact; contract and payment records until the statutory periods end (up to 10 years).
Your rights: access, rectification, erasure, restriction, data portability, objection and complaint to a supervisory authority. In the client portal you can download all your data or delete your account. No tracking cookies – only one necessary login cookie.
Sign-in here is separate from the rest of the website and uses its own necessary cookie (Studio_Auth). Sign-up and sign-in are protected against bots without third parties (a small calculation in your browser, an invisible field and a timing check); nothing is stored for this.
“Continue with Google” is optional: only if you click it are you redirected to Google Ireland Ltd., and only your Google ID, verified email and name are received (Art. 6(1)(b) GDPR). Processing in the USA is possible (Google LLC is certified under the EU-US Data Privacy Framework).