Privacy at a glance
The following notes provide a simple overview of what happens to your personal information when you visit this website. Personal information is any data with which you could be personally identified.
Data collection on this website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator.
Contact details can be found in the imprint of this website.
How we collect your data
Your data is collected when you communicate with us (e.g. by email). Other data is automatically recorded by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access).
Hosting & Server Logs (Cloudflare)
Our website is hosted on Cloudflare Pages, operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you visit the site, Cloudflare automatically processes technical access data — including IP address, timestamp, requested URL, referrer, browser type and operating system — to deliver the site, protect against attacks, and ensure availability. This processing is based on our legitimate interest in a secure and stable website (Art. 6 (1) (f) GDPR).
A data processing agreement (DPA) has been concluded with Cloudflare. Data transfer to the USA is covered by the EU-US Data Privacy Framework and Cloudflare's Standard Contractual Clauses. Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/
Google Maps embed
Our home page embeds a Google Maps view of our studio location (operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). As soon as the page loads, your browser establishes a connection to Google servers and transmits your IP address. If you are signed into a Google account, the visit may be associated with that account; to prevent this, log out of Google before loading the page. Legal basis: our legitimate interest in showing visitors where to find us (Art. 6 (1) (f) GDPR). Google's privacy policy: https://policies.google.com/privacy
YouTube embeds
Our case pages embed videos via YouTube (operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). We use the privacy-enhanced mode (youtube-nocookie.com), which means YouTube does not store cookies for visitors who do not interact with the video. However, as soon as a case page loads, your browser establishes a connection to YouTube/Google servers and transmits your IP address. The WELT case page additionally embeds the current live stream of the WELT YouTube channel, which loads automatically.
Legal basis: our legitimate interest in showcasing our work (Art. 6 (1) (f) GDPR). If you sign into a Google account while visiting, Google may associate the visit with your account. To prevent this, log out of your Google account before opening case pages. Google's privacy policy: https://policies.google.com/privacy
SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from 'http://' to 'https://' and by the lock symbol in your browser line.
Your rights
Under the GDPR you have the right to information (Art. 15), correction (Art. 16), deletion (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). For requests, please contact us at the address given in the imprint.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, https://www.datenschutz-berlin.de
Legal basis & retention
Processing of access data and hosting logs: Art. 6 (1) (f) GDPR (legitimate interest in operating a secure website). Email communication: Art. 6 (1) (b) GDPR if pre-contractual / contractual, otherwise Art. 6 (1) (f) GDPR. Hosting log data is typically retained for a short period (a few days to weeks) and then deleted or anonymised by Cloudflare. Email correspondence is retained as long as needed to respond and meet any statutory retention obligations (typically 6 years under §257 HGB for business-relevant correspondence).
Cookies
This website does not set any cookies of its own. No tracking, no analytics, no advertising cookies. Embedded YouTube videos may set cookies if you actively play them; see the section on YouTube embeds above.
Contact
TONFABRIK ISCC UG (Haftungsbeschränkt)
Sonntagstr. 27 · 10245 Berlin