Data Privacy Statement

Privacy Policy 1. General Information The protection of your personal data is important to us. In this Privacy Policy, we explain which personal data is processed when you visit our website webbrandstudio.com, for what purposes this happens and which rights you have under the General Data Protection Regulation (GDPR). We process personal data only to the extent necessary to provide this website, handle inquiries, communicate with prospects and clients, ensure technical security, analyze website usage or comply with legal obligations. This Privacy Policy applies to the website webbrandstudio.com and the functions offered there, in particular the contact form, cookie banner, Google Analytics, WhatsApp contact link and external links to social media profiles. 2. Controller The controller responsible for data processing on this website is: Oleksandr Bilonozhko WebBrandStudio Owner: Oleksandr Bilonozhko Email: info@webbrandstudio.com Phone: +49 176 24615269 Website: https://webbrandstudio.com VAT ID: DE279469959 3. Hosting and Server Log Files Our website is hosted by Hostinger. When you access our website, the hosting provider automatically collects information that your browser transmits to the server. This may include in particular: - IP address - date and time of the request - page or file accessed - referrer URL - browser used - operating system used - amount of data transferred - access status / HTTP status code This data is required to provide the website technically, ensure stability and security and detect possible technical problems or misuse. The legal basis for processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and error-free provision of our website. Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. 4. Contact Form If you contact us via the contact form, we process the data you enter. This may include: - name - email address - phone number, if provided - company, if provided - content of your message - time of the inquiry - technical metadata, where necessary for security and traceability The processing is carried out in order to handle your inquiry, ask follow-up questions and prepare a possible collaboration. The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to the conclusion or performance of a contract. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of incoming inquiries. The data submitted via the contact form is stored for as long as necessary to process the inquiry, continue communication or document a possible collaboration. The data is deleted once it is no longer required for these purposes, unless statutory retention obligations or legitimate interests require further storage. The data will not be passed on to unrelated third parties without your consent. It may be passed on to technical service providers where this is necessary for operation, storage, notification or processing of the inquiry. 5. Internal Notifications for Contact Requests To process contact requests quickly, incoming form inquiries may be forwarded internally as notifications, for example by email or via a messenger service. The data you entered in the contact form may be included in the internal notification. This processing is used exclusively to recognize and process your inquiry promptly. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in fast and reliable communication with prospects and clients. 6. Contact by Email or Phone If you contact us by email or phone, we process the personal data you provide in order to handle your inquiry and communicate with you. The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to a contract or pre-contractual measures. Otherwise, processing is based on Art. 6(1)(f) GDPR. The data will be deleted once it is no longer required for processing your inquiry, unless statutory retention obligations or legitimate interests require further storage. 7. Contact via WhatsApp Our website may provide a link for contacting us via WhatsApp. The link may work through wa.me. If you use this link, you leave our website and are redirected to WhatsApp. Depending on your region and use, the provider is a company of the Meta group. If you contact us via WhatsApp, personal data may be processed, in particular your phone number, profile name, message, communication content and technical metadata. We have only limited influence over data processing by WhatsApp. The use of WhatsApp is voluntary. If you do not wish to use WhatsApp, you can alternatively contact us via contact form or email. The legal basis for our communication with you via WhatsApp is Art. 6(1)(b) GDPR, where the communication serves the preparation or performance of a contract, and Art. 6(1)(f) GDPR. Our legitimate interest lies in simple and fast communication with prospects and clients. Please also note WhatsApp’s own privacy information. 8. Cookies and Cookie Banner Our website uses a cookie banner through which you can give, reject or later change certain consents. Cookies and similar technologies may be technically necessary to provide the website or enable certain functions. Other cookies, especially for analytics purposes, are only set if you have given your prior consent. Technically necessary cookies are processed on the basis of Art. 6(1)(f) GDPR and Section 25(2) TDDDG. Our legitimate interest lies in the secure and functional provision of the website. Non-essential cookies, especially analytics cookies, are only used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw or change your consent at any time with effect for the future via the cookie settings. 9. Google Analytics This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website. This allows us to improve the content, structure, user guidance and technical quality of our website. As part of Google Analytics, the following data may be processed in particular: - pages viewed - time spent on pages - click behavior - referrer URL - device used - browser information - approximate location information - technical identifiers - cookie IDs or comparable identifiers Google Analytics is only used on our website if you have given your consent via the cookie banner. The legal basis for processing is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings. Google may also transfer data to servers outside the European Union. This may include servers of Google LLC in the USA. According to Google, data transfers to third countries are based on appropriate safeguards, such as standard contractual clauses or existing adequacy decisions. We recommend configuring Google Analytics in a privacy-friendly way, in particular with limited retention periods, disabled unnecessary advertising functions and activated IP anonymization or the privacy features provided in Google Analytics 4. 10. Social Media Links Our website may contain links to our profiles on social networks, in particular Instagram and Facebook. These are generally simple external links. Merely visiting our website does not automatically transfer data to Instagram or Facebook. Only when you click such a link do you leave our website and get redirected to the respective platform. The respective provider is responsible for data processing on the linked platforms. Instagram and Facebook belong to the Meta group. Please refer to the respective platform’s privacy information for details about the type, scope and purpose of data processing. 11. No Google Maps Integration Google Maps is currently not embedded on our website. Therefore, simply visiting our website does not establish a connection to Google Maps. If Google Maps is embedded in the future, this Privacy Policy will be updated accordingly and, where required, consent will be obtained via the cookie banner. 12. Local Fonts We aim to host fonts locally on our server. This means that, when visiting the website, no connection to external font provider servers is generally established. If external font or design resources are used in the future, we will inform you in this Privacy Policy and obtain consent where required. 13. External Links Our website may contain links to external websites. If you click an external link, you leave our website. The operators of the linked websites are solely responsible for their content and data processing. We have no influence over which personal data is processed by external providers. Please review the privacy information of the respective website. 14. Retention Period We store personal data only for as long as necessary for the respective purposes. Data from contact inquiries is generally stored for as long as necessary to process the inquiry, prepare a possible collaboration or document communication. If no collaboration takes place and no statutory retention obligations apply, the data will be deleted once it is no longer needed. Where statutory retention obligations apply, in particular commercial or tax-related obligations, data may be stored for a longer period. Server log files are stored only for as long as necessary for technical security, error analysis and misuse detection, unless longer storage is necessary in an individual case. 15. Legal Bases for Processing We process personal data on the basis of the following legal grounds: Art. 6(1)(a) GDPR — Consent If you give us consent, we process data for the specific purpose stated. Art. 6(1)(b) GDPR — Contract or pre-contractual measures If processing is necessary for the performance of a contract or to handle pre-contractual inquiries. Art. 6(1)(c) GDPR — Legal obligation If we are legally obliged to process or retain data. Art. 6(1)(f) GDPR — Legitimate interest If we have a legitimate interest in processing, for example for security, communication, technical provision or improvement of our website. 16. Recipients of Personal Data Personal data is only passed on if this is necessary, legally required, you have given consent or a legitimate interest exists. Possible recipients may include: - hosting providers - technical service providers - email service providers - communication services - analytics or consent service providers - tax advisors or authorities, where legally required Personal data is not passed on to unrelated third parties for advertising purposes. 17. Transfers to Third Countries When using certain services, in particular Google Analytics, WhatsApp, Instagram or Facebook, personal data may be transferred to countries outside the European Union or the European Economic Area. Where such a transfer takes place, we ensure that appropriate safeguards within the meaning of the GDPR are in place, for example an adequacy decision by the European Commission or standard contractual clauses. Please note that despite such safeguards, a different level of data protection may exist in third countries. 18. Your Rights Under the GDPR, you have the following rights: - right of access pursuant to Art. 15 GDPR - right to rectification pursuant to Art. 16 GDPR - right to erasure pursuant to Art. 17 GDPR - right to restriction of processing pursuant to Art. 18 GDPR - right to data portability pursuant to Art. 20 GDPR - right to object pursuant to Art. 21 GDPR - right to withdraw consent pursuant to Art. 7(3) GDPR - right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR If you wish to exercise any of these rights, you can contact us at any time. 19. Right to Object If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defense of legal claims. 20. Withdrawal of Consent If data processing is based on your consent, you may withdraw this consent at any time with effect for the future. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected. 21. Data Security We use technical and organizational measures to protect personal data against loss, misuse, unauthorized access and unauthorized alteration. Our website uses an encrypted HTTPS connection. This means that data you transmit via the website generally cannot easily be read by third parties. 22. Updates and Changes to this Privacy Policy We reserve the right to update this Privacy Policy if our website, services used, legal requirements or technical processes change. The current version is always available on this website. Last updated: July 2026