studiohafstrom

Privacy Policy

Last updated: December 3, 2025

1. Controller

Name: studiohafstrom
Legal Entity: studiohafstrom
Website: studiohafstrom.com
Address: Hirtenstraße 23, 96050 Bamberg, Bavaria, Germany
Email: [email protected]

2. What I do

I am a web designer and web developer offering design, development and website maintenance services to clients worldwide.

3. Personal data I collect

I only collect the minimum information necessary to communicate and provide services:

3.1. Data you provide

  • First name
  • Last name
  • Email address
  • Message content (free text you send me)

3.2. Data collected automatically

  • IP address
  • Device and browser information
  • Cookies (consent-based in the EU)
  • Usage data (pages visited, actions taken)

3.3. Payment data

No payments are processed on this website directly. Payments are made via invoice.
I do not collect or store payment card information.

4. Purposes of processing

I process your data for:

  1. Responding to inquiries and providing quotations
  2. Providing web design, development, and maintenance services
  3. Email follow-ups with potential clients
  4. Analytics and performance measurement
  5. Remarketing and advertising
  6. Website optimization and security

5. Legal bases (GDPR)

Your data is processed under:

  • Art. 6(1)(b) – performance of a contract or steps prior to entering one
  • Art. 6(1)(a) – consent (cookies, marketing)
  • Art. 6(1)(f) – legitimate interests (security, analytics, business operations)

6. Cookies & Tracking Technologies

I use:

  • Google Analytics (consent in the EU)
  • Google Ads (remarketing)
  • Facebook Pixel / Meta Pixel (remarketing)
  • Google Tag Manager

Cookies are only activated after consent in regions where this is required (like the EU).

You can withdraw your consent at any time via the cookie settings.

7. International Data Transfers

Because I serve clients worldwide and use services like Google, Meta, and other providers, your data may be transferred outside the EU.
Transfers are based on:

  • Standard Contractual Clauses (SCCs), or
  • Adequacy decisions

All providers are chosen with GDPR-compliant safeguards.

8. How long your data is stored

  • Inquiry emails: up to 24 months
  • Project-related data: up to 3 years after completion
  • Analytics data: according to Google standards
  • Cookies: according to your consent settings

9. Sharing of data

I only share data with trusted service providers:

  • Hosting provider (not chosen yet)
  • Google Analytics / Google Ads
  • Meta (Facebook Pixel)
  • Google Tag Manager
  • Email provider

I do not sell, rent, or trade your personal data.

10. Your rights

You have the following rights under GDPR:

  • Access to your data
  • Correction
  • Deletion
  • Restriction
  • Objection
  • Data portability
  • Withdrawal of consent
  • Lodge a complaint with your regulatory authority

For requests: [email protected]

11. Children’s Privacy

This website is not intended for children under 16.

12. Changes to this Privacy Policy

Updates will be published on this page with a new “Last updated” date.