Back

Privacy Policy

I. Controller

The controller within the meaning of the GDPR (DSGVO) is:
Michael Janssen
Kommunikationsdesign
Haselstrasse 30
63619 Bad Orb
Germany



Owner: Michael Janssen
VAT ID (USt-ID): DE301429846
Tel.: +49 (0) 6052-4090882
Email: hi@studiojanssen.de


II. General information on data processing

1. Scope of processing of personal data

We process personal data of our users only to the extent necessary to provide a functional website as well as our content and services. As a rule, personal data of our users is processed only with the user’s consent. An exception applies where prior consent cannot be obtained for factual reasons and the processing is permitted by law.

2. Legal basis for processing

Under Article 6 (1) GDPR, processing of data is lawful only if at least one of the following conditions is met:

  • a) the data subject has given consent to the processing of their personal data for one or more specific purposes;

  • b) processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract;

  • c) processing is necessary for compliance with a legal obligation to which the controller is subject;

  • d) processing is necessary in order to protect the vital interests of the data subject or of another natural person;

  • e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

  • f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

3. Place of processing

Data collected directly is processed at the owner’s business premises in Germany and, in some cases, transferred to a third country outside the EU, as listed below for the specific services that collect data automatically.


III. Collection and storage of personal data, and type and purpose of use

1. Types of data collected directly

“Personal data” within the meaning of the GDPR means any data that can be used to identify a particular person, including but not limited to:

  • Name

  • Email

  • Address

  • Payment information

If you get in touch with us or pay us for a service, we have access to your name, email address or phone number, depending on how you choose to contact us. We will also ask for your address in order to issue an invoice for the service provided. This data is required so that we can meet our legal obligations under Article 6 (1) (c) GDPR, and is used only to provide the service to you.

2. When visiting the website

When you visit our website, the browser on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is collected without any action on your part and stored until it is deleted automatically:

  • IP address of the requesting computer

  • Date and time of access

  • Name and URL of the file retrieved

  • Website from which access is made (referrer URL)

  • Browser used and, where applicable, the operating system of your computer as well as the name of your access provider

We process this data for the following purposes:

  • ensuring a smooth connection to the website

  • ensuring comfortable use of our website

  • evaluating system security and stability, and

  • other administrative purposes

The legal basis for this processing is Article 6 (1) sentence 1 (f) GDPR. Our legitimate interest follows from the purposes of data collection listed above. We never use the data collected to draw conclusions about you as a person.

3. Email contact

This website has no contact form and no newsletter. If you contact us by email (e.g. via michael@studiojanssen.de), the personal data you send (in particular email address, name and the content of the message) is stored and used solely to respond to your enquiry.

The legal basis for processing data transmitted in the course of sending an email is Article 6 (1) (f) GDPR. If the email contact is aimed at concluding a contract, Article 6 (1) (b) GDPR is an additional legal basis for the processing.

Your data will be deleted once your enquiry has been dealt with in full — that is, when it can be inferred from the circumstances that the matter in question has been conclusively resolved — unless statutory retention obligations prevent deletion.


IV. Disclosure of data

Your personal data is not transmitted to third parties for purposes other than those listed below.

We only disclose your personal data to third parties if:

you have given your express consent pursuant to Article 6 (1) sentence 1 (a) GDPR,

disclosure is necessary pursuant to Article 6 (1) sentence 1 (f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,

there is a legal obligation to disclose pursuant to Article 6 (1) sentence 1 (c) GDPR, or

this is legally permissible and necessary pursuant to Article 6 (1) sentence 1 (b) GDPR for the processing of contractual relationships with you.

Data is disclosed exclusively to the service providers listed below and under the following conditions:

1. Hosting by Hetzner Online GmbH

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner stores the data on servers located exclusively in Germany and is subject to strict German and European data protection regulations. Your data is processed only to the extent necessary for the operation and maintenance of the website.

Further details can be found in Hetzner’s privacy policy: hetzner.com/legal/privacy-policy

2. Content delivery network (Bunny CDN)

To deliver content faster and more reliably, this website uses the content delivery network (CDN) “Bunny CDN” provided by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (“Bunny CDN”).

Static files such as images, stylesheets or JavaScript files are delivered via Bunny CDN servers that are geographically distributed within the EU. This shortens load times and improves the performance of the website.

For this purpose it may be necessary for your IP address to be transmitted to Bunny CDN servers. Use is based on Article 6 (1) (f) GDPR. We have a legitimate interest in the secure and efficient provision of our website and in optimising the user experience.

A data processing agreement pursuant to Article 28 GDPR has been concluded with Bunny CDN. Bunny CDN processes data exclusively within the EU.

Further information can be found in Bunny CDN’s privacy policy: bunny.net/privacy


V. Cookies and local storage

This website does not use any cookies.

Optionally, the chosen light/dark mode and a colour palette can be stored in your browser’s localStorage. This information remains on your device and is not transmitted to us or to third parties. You can delete these entries at any time via your browser settings.


VI. Rights of the data subject

You have the right:

  • pursuant to Article 15 GDPR to obtain information about your personal data processed by us. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details

  • pursuant to Article 16 GDPR to obtain without undue delay the rectification of inaccurate personal data or the completion of your personal data stored by us

  • pursuant to Article 17 GDPR to obtain the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims

  • pursuant to Article 18 GDPR to obtain restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose erasure and we no longer need the data, but you need it for the establishment, exercise or defence of legal claims, or you have objected to processing pursuant to Article 21 GDPR

  • pursuant to Article 20 GDPR to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request transmission to another controller

  • pursuant to Article 7 (3) GDPR to withdraw consent you have given us at any time. This means that we may no longer continue the data processing based on that consent for the future, and

  • pursuant to Article 77 GDPR to lodge a complaint with a supervisory authority. As a rule you may contact the supervisory authority of your usual place of residence or workplace, or of our registered office.


VII. Right to object

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) sentence 1 (f) GDPR, you have the right under Article 21 GDPR to object to the processing of your personal data where there are grounds relating to your particular situation, or where the objection is directed against direct marketing. In the latter case you have a general right to object which we will implement without requiring a particular situation.

If you wish to exercise your right of withdrawal or objection, an email to hi@studiojanssen.de is sufficient.


VIII. How to exercise these rights

If you have questions or concerns or wish to exercise any of your rights, please use the contact details given at the beginning of this document. All requests regarding your rights will be handled free of charge and within one month.


IX. Storage period

The storage period of personal data depends on the respective legal basis, the purpose of processing and the applicable statutory retention periods.

If you have given express consent to the processing of personal data pursuant to Article 6 (1) sentence 1 (a) GDPR, this data is stored until the data subject withdraws their consent.

If we are required by law (tax and commercial retention obligations) to store certain data for a longer period, storage continues after it is no longer required for the respective processing purpose solely in order to fulfil that legal obligation. Access to the data is then blocked.

Where personal data is processed for the purpose of direct marketing on the basis of Article 6 (1) (f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Article 21 (2) GDPR.


X. Data security

During your visit to the website we use the widely used SSL (Secure Socket Layer) method together with the highest encryption level supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or padlock symbol in the status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.


XI. Disclaimer regarding links to third-party websites

Our website may contain links to third-party websites. If you follow a link to one of these websites, please note that they have their own privacy policies and that we accept no liability for them. We therefore ask you to review those privacy policies before you submit personal data to those websites.


XII. Status and changes to this privacy policy

This privacy policy is currently valid and dated 08.2026.

As our website and the services offered on it develop, or due to changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on the website at https://studiojanssen.de/datenschutz.