Privacy Policy
Last updated: July 25, 2025
This Privacy Policy explains how we, dafZstudio, Ailinger Daniel, Zawadzki Fabian GbR ("we", "our", or "us"), process personal data when you visit or interact with our website www.dafzstudio.de.
We take the protection of your personal data seriously and process it in accordance with the European Union General Data Protection Regulation (GDPR).
1. Contact Information (Data Controller)
dafzstudio (Ailinger Daniel, Zawadzki Fabian GbR)
Witneystraße 7
82008 Unterhaching, Germany
Email: info@dafzstudio.de
Witneystraße 7
82008 Unterhaching, Germany
Email: info@dafzstudio.de
2. Hosting & Domain
- Website Hosting: Squarespace Ireland Ltd.
- Domain Provider: GoDaddy
Both providers may process technical data required for website operation (e.g. IP addresses, access logs). Squarespace may transfer data to the U.S. under the EU-U.S. Data Privacy Framework.
3. Types of Personal Data We Collect
- Technical data (IP address, browser type, operating system, access time)
- Data submitted via contact forms or email (name, email address, message content)
- Optional: usage data for analytics, if you consent to it
4. Legal Basis for Processing
We process your personal data based on:
- Art. 6(1)(b) GDPR – performance of a contract (e.g. responding to inquiries)
- Art. 6(1)(f) GDPR – legitimate interests (e.g. website functionality, security)
- Art. 6(1)(a) GDPR – your consent (e.g. for analytics cookies, marketing tools)
5. Purpose of Processing
We collect and process data to:
- Provide and maintain the website
- Respond to user inquiries
- Analyze website usage and improve content (only with consent)
- Ensure website security
6. Cookies & Analytics
Our website may use cookies through Squarespace or third-party tools (e.g. analytics).
You will be asked to consent to non-essential cookies via a cookie banner.
You will be asked to consent to non-essential cookies via a cookie banner.
You can change or withdraw your consent at any time in the cookie settings.
7. Data Transfer to Third Countries
Squarespace may process data in the United States under the EU-U.S. Data Privacy Framework. GoDaddy may also process DNS-related data outside the EU. These transfers are safeguarded by appropriate mechanisms such as:
- An adequacy decision (for the U.S. under the EU-U.S. DPF)
- Standard Contractual Clauses (SCCs), if applicable
8. Data Retention
We retain personal data:
- For as long as necessary to fulfill the purpose for which it was collected
- Contact form data: up to 1 year
- Server logs and analytics: according to Squarespace retention policy (up to 13 months)
- Where legally required, we store data according to retention obligations (e.g. under German commercial law)
9. Your Rights Under GDPR
You have the following rights:
- Access to your stored personal data (Art. 15)
- Rectification of incorrect or outdated data (Art. 16)
- Erasure ("right to be forgotten") under certain conditions (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interest (Art. 21)
- Withdrawal of consent at any time (Art. 7(3))
- Lodge a complaint with a supervisory authority
10. Obligation to Provide Data
You are not legally or contractually required to provide personal data unless necessary to fulfill a request or agreement (e.g. using the contact form).
11. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects concerning you or significantly affects you.
12. Data Security
Our website is hosted on Squarespace, which uses industry-standard encryption and security practices (e.g. TLS, firewall protection). We ensure that your data is protected through secure communication and regular monitoring.
13. Changes to This Privacy Policy
We may update this policy from time to time to reflect legal, technical, or operational changes. The latest version will always be published on this page.
If you have any questions about this Privacy Policy, please contact us at:
info@dafzstudio.de
info@dafzstudio.de
Privacy Policy
Last updated: July 25, 2025
This Privacy Policy explains how we, dafZstudio, Ailinger Daniel, Zawadzki Fabian GbR ("we", "our", or "us"), process personal data when you visit or interact with our website www.dafzstudio.de.
We take the protection of your personal data seriously and process it in accordance with the European Union General Data Protection Regulation (GDPR).
1. Contact Information (Data Controller)
dafzstudio (Ailinger Daniel, Zawadzki Fabian GbR)
Witneystraße 7
82008 Unterhaching, Germany
Email: info@dafzstudio.de
Witneystraße 7
82008 Unterhaching, Germany
Email: info@dafzstudio.de
2. Hosting & Domain
- Website Hosting: Squarespace Ireland Ltd.
- Domain Provider: GoDaddy
Both providers may process technical data required for website operation (e.g. IP addresses, access logs). Squarespace may transfer data to the U.S. under the EU-U.S. Data Privacy Framework.
3. Types of Personal Data We Collect
- Technical data (IP address, browser type, operating system, access time)
- Data submitted via contact forms or email (name, email address, message content)
- Optional: usage data for analytics, if you consent to it
4. Legal Basis for Processing
We process your personal data based on:
- Art. 6(1)(b) GDPR – performance of a contract (e.g. responding to inquiries)
- Art. 6(1)(f) GDPR – legitimate interests (e.g. website functionality, security)
- Art. 6(1)(a) GDPR – your consent (e.g. for analytics cookies, marketing tools)
5. Purpose of Processing
We collect and process data to:
- Provide and maintain the website
- Respond to user inquiries
- Analyze website usage and improve content (only with consent)
- Ensure website security
6. Cookies & Analytics
Our website may use cookies through Squarespace or third-party tools (e.g. analytics).
You will be asked to consent to non-essential cookies via a cookie banner.
You will be asked to consent to non-essential cookies via a cookie banner.
You can change or withdraw your consent at any time in the cookie settings.
7. Data Transfer to Third Countries
Squarespace may process data in the United States under the EU-U.S. Data Privacy Framework. GoDaddy may also process DNS-related data outside the EU. These transfers are safeguarded by appropriate mechanisms such as:
- An adequacy decision (for the U.S. under the EU-U.S. DPF)
- Standard Contractual Clauses (SCCs), if applicable
8. Data Retention
We retain personal data:
- For as long as necessary to fulfill the purpose for which it was collected
- Contact form data: up to 1 year
- Server logs and analytics: according to Squarespace retention policy (up to 13 months)
- Where legally required, we store data according to retention obligations (e.g. under German commercial law)
9. Your Rights Under GDPR
You have the following rights:
- Access to your stored personal data (Art. 15)
- Rectification of incorrect or outdated data (Art. 16)
- Erasure ("right to be forgotten") under certain conditions (Art. 17)
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing based on legitimate interest (Art. 21)
- Withdrawal of consent at any time (Art. 7(3))
- Lodge a complaint with a supervisory authority
10. Obligation to Provide Data
You are not legally or contractually required to provide personal data unless necessary to fulfill a request or agreement (e.g. using the contact form).
11. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects concerning you or significantly affects you.
12. Data Security
Our website is hosted on Squarespace, which uses industry-standard encryption and security practices (e.g. TLS, firewall protection). We ensure that your data is protected through secure communication and regular monitoring.
13. Changes to This Privacy Policy
We may update this policy from time to time to reflect legal, technical, or operational changes. The latest version will always be published on this page.
If you have any questions about this Privacy Policy, please contact us at:
info@dafzstudio.de
info@dafzstudio.de
