Privacy Policy

The controller responsible for data processing on this website pursuant to the General Data Protection Regulation (GDPR) is:

studio vaai GmbH
Freddie-Mercury-Straße 5
80636 München
Germany
Email: paul@studio-vaai.com

We process personal data only when necessary for providing a functional website and our content and services. The processing of personal data occurs regularly only with your consent. An exception applies where prior consent cannot be obtained for practical reasons and the processing is permitted by law.

We process your personal data on the following legal bases under the GDPR:

• Consent (Art. 6(1)(a) GDPR) – where you have given consent for a specific purpose
• Contract (Art. 6(1)(b) GDPR) – where processing is necessary for the performance of a contract
• Legitimate interests (Art. 6(1)(f) GDPR) – where processing is necessary for our legitimate interests, provided your rights do not override these

Server Log Files

Our hosting provider automatically collects and stores information in server log files, which your browser transmits to us. This includes:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing device
• Time of the server request
• IP address

This data is not merged with other data sources. The collection is based on Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free presentation and optimization of our website.

When you contact us via our contact form, the information you provide (name, email address, message) will be processed for the purpose of handling your inquiry. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in responding to your request.

We use Formspree as a service provider to process contact form submissions. Formspree is operated by Formspree, Inc. (USA). Your data may be transferred to the USA. Formspree is certified under the EU-U.S. Data Privacy Framework.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies.

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit our website, Cloudflare processes your IP address and other data transmitted by your browser.

The use of Cloudflare is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable and secure provision of our website. Cloudflare is certified under the EU-U.S. Data Privacy Framework.

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) – to obtain information about your data being processed
• Right to rectification (Art. 16 GDPR) – to correct inaccurate data
• Right to erasure (Art. 17 GDPR) – to request deletion of your data
• Right to restriction (Art. 18 GDPR) – to restrict data processing
• Right to data portability (Art. 20 GDPR) – to receive your data in a portable format
• Right to object (Art. 21 GDPR) – to object to data processing based on legitimate interests
• Right to withdraw consent (Art. 7(3) GDPR) – to withdraw consent at any time

To exercise these rights, please contact us at paul@studio-vaai.com.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Once the purpose no longer applies and no legal retention obligations exist, your data will be deleted.

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The current version is always available on this page.