Privacy

Website access

The website is operated on virtual server infrastructure in the IONOS SE network. The current server location is the United Kingdom, for which the European Union has issued an adequacy decision.

When the website is accessed, technically necessary connection and server-log data are processed to provide, secure and troubleshoot the website. Processing is based on Article 6(1)(f) GDPR.

Server-log data are retained only within the configured limited rotation cycle and are overwritten or removed as rotation progresses.

Contact form

When an inquiry is submitted, the details provided by visitors are processed: name, email address, subject, message, and optionally budget and timeline.

Processing is used to respond to the inquiry and is based on Article 6(1)(b) GDPR where pre-contractual measures are concerned; otherwise, it is based on Article 6(1)(f) GDPR for legitimate communication interests.

The information is retained only for as long as necessary to process and reasonably follow up the inquiry. If a contractual or business relationship results, statutory retention obligations may apply.

Spam and abuse protection

Cloudflare Turnstile is used to protect the contact form against automated abuse and bots. Turnstile processes browser and client security signals, such as IP address, TLS fingerprint, User-Agent, sitekey and origin.

According to Cloudflare, Turnstile does not access, store or transmit communications, form entries or other page inputs. Processing is based on Article 6(1)(f) GDPR for the security of the website and contact form.

Email delivery

Contact inquiries are transmitted through Resend, a service of Plus Five Five, Inc., USA, to the configured recipient. The information from the contact form is processed solely to deliver the inquiry.

According to Resend, its primary processing operations and customer-data storage take place in the United States; email and log data are retained for 30 days on Free, Pro and Scale plans. For transfers from the EEA, Resend identifies the EU Standard Contractual Clauses and participation in the EU-US Data Privacy Framework.

External links

The Instagram link leads to an external service. The respective provider is responsible for data processing after that link is opened.

Cookies, retention and further information

CookieYes Limited, United Kingdom, is used to obtain, manage and document consent for non-essential technologies. The banner enables visitors to accept, reject or customise the offered categories, and consent choices are documented in a consent log. The United Kingdom benefits from a European Union adequacy decision.

Google Analytics 4 is used for statistical analysis of website use. The service is loaded only after you have consented to the Analytics category. Processing is based on your consent under Article 6(1)(a) GDPR and, where the storage of or access to information on your terminal equipment is concerned, Section 25(1) TDDDG.

Google Consent Mode initially sets analytics- and advertising-related storage to “denied”. After consent, only analytics_storage is set to “granted”. ad_storage, ad_user_data and ad_personalization remain disabled; Google Signals and advertising-personalization signals are not enabled.

Contact-form information, including name, email address, message, budget and timeline, is not intentionally transmitted to Google Analytics.

Consent given may be changed or withdrawn at any time with effect for the future through the CookieYes settings. These are available using the button to revisit consent.

Your rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability where applicable, and to object to processing. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.