Data Protection

Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your information.

Last Updated: January 2025
Effective Date: January 1, 2025
GDPR Compliant: Yes

Privacy at a Glance

Secure by Design

Your data is encrypted and protected

GDPR Compliant

Full compliance with EU regulations

Your Control

You control your data and privacy

1. Information We Collect

We collect information you provide directly to us, such as: Personal Information: • Name and contact information (email, phone, address) • Company information and job title • Project requirements and preferences • Payment and billing information Automatically Collected Information: • IP address and location data • Browser type and version • Device information and operating system • Pages visited and time spent on our site • Referral sources and search terms • Cookies and similar tracking technologies

2. How We Use Your Information

We use your information to: Service Delivery: • Provide and improve our web design services • Communicate about your projects and account • Process payments and send invoices • Provide customer support and technical assistance Business Operations: • Analyze website usage and improve user experience • Send marketing communications (with your consent) • Comply with legal obligations • Protect against fraud and security threats • Conduct research and analytics

3. Information Sharing and Disclosure

We may share your information with: Service Providers: • Payment processors (Stripe, PayPal) • Email service providers (for newsletters and communications) • Analytics providers (Google Analytics) • Cloud hosting services (Firebase, Netlify) • Customer support tools Legal Requirements: • When required by law or legal process • To protect our rights and property • To prevent fraud or security threats • In connection with business transfers or mergers We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security

We implement appropriate security measures to protect your information: Technical Safeguards: • SSL encryption for data transmission • Secure cloud storage with access controls • Regular security audits and updates • Firewall protection and intrusion detection Administrative Safeguards: • Employee training on data protection • Limited access to personal information • Background checks for staff with data access • Incident response procedures Physical Safeguards: • Secure office facilities • Locked storage for physical documents • Controlled access to equipment and systems

5. Data Retention

We retain your information for as long as necessary to: • Provide our services and support • Comply with legal obligations • Resolve disputes and enforce agreements • Maintain business records Specific Retention Periods: • Project files: 3 years after project completion • Financial records: 7 years for tax purposes • Marketing communications: Until you unsubscribe • Website analytics: 26 months (Google Analytics default) • Support tickets: 2 years after resolution

6. Your Rights and Choices

Under GDPR and other privacy laws, you have the right to: Access and Portability: • Request a copy of your personal information • Receive your data in a portable format • Know how your information is being used Correction and Deletion: • Correct inaccurate or incomplete information • Request deletion of your personal information • Object to processing of your information Control and Consent: • Withdraw consent for marketing communications • Opt-out of certain data collection practices • Restrict processing of your information • File complaints with supervisory authorities

7. Cookies and Tracking Technologies

We use cookies and similar technologies to: Essential Cookies: • Enable basic website functionality • Remember your preferences and settings • Maintain security and prevent fraud Analytics Cookies: • Understand how visitors use our website • Improve website performance and user experience • Generate usage statistics and reports Marketing Cookies: • Deliver relevant advertisements • Track campaign effectiveness • Personalize content and offers You can control cookies through your browser settings. For more details, see our Cookie Policy.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including: • United States (for cloud services and analytics) • European Union (our primary operations) • Other countries where our service providers operate We ensure appropriate safeguards are in place: • Standard Contractual Clauses (SCCs) • Adequacy decisions by the European Commission • Binding Corporate Rules where applicable • Your explicit consent when required

9. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we learn we have collected personal information from a child under 16, we will: • Delete the information immediately • Notify the parent or guardian • Take steps to prevent future collection • Review our data collection practices

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes: • We will post the updated policy on our website • We will update the "Last Updated" date • For material changes, we will provide additional notice • We may send email notifications to registered users • Continued use of our services constitutes acceptance We encourage you to review this policy periodically to stay informed about how we protect your information.

Exercise Your Rights

Contact Our Data Protection Officer

Response Time

We will respond to your privacy requests within:

  • 30 days for GDPR requests
  • 45 days for complex requests
  • 24-48 hours for urgent matters

Supervisory Authority: If you're not satisfied with our response, you can file a complaint with your local data protection authority or the Bavarian State Office for Data Protection Supervision (BayLDA) in Germany.