Privacy policy
1. Data controller
Sadjad Alizada
Steinbeker Hauptstraße 71a, 22117 Hamburg
Email: kontakt@webonestudio.de
2. Collection and processing of data
When you visit this website, we process technical server logs to ensure that the website operates properly (legal basis: Article 6(1)(f) GDPR, our legitimate interest in operating a secure website).
When you complete the contact form, we process the information you provide (name, email address, company if applicable, subject and message) to handle and respond to your enquiry (legal basis: Article 6(1)(b) GDPR). We use a Supabase database to store the enquiry and an email service provider (SMTP) to send confirmation and reply emails. Both act as processors within the meaning of Article 28 GDPR.
When you book an initial consultation online, we process your name, email address, optional phone number, company, message and selected services to arrange and hold the appointment (legal basis: Article 6(1)(b) GDPR). We use Google Calendar to check availability and create the appointment, and Google Meet for video calls (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The data is also stored in our database (Supabase), and you receive an email confirmation.
The services you collect in “Your package” are stored only locally in your browser (localStorage) and are sent to us only when you make a booking.
Your enquiry data is stored until your enquiry has been fully dealt with and is then deleted, unless statutory retention obligations require otherwise. No further disclosure to third parties takes place.
3. Cookies & consent
When you first visit the website, we ask for your consent through a cookie banner. Strictly necessary cookies are always set. Analytics and marketing cookies, for example for Google Analytics or Google Ads, are activated only with your explicit consent. You can change your selection at any time via “Cookie Settings” in the footer.
Google Ads & conversion tracking: With your consent (Article 6(1)(a) GDPR, Section 25(1) TDDDG), we use Google Ads with conversion tracking provided by Google Ireland Limited. This measures whether someone books an appointment or sends an enquiry after clicking one of our ads, for example. When enhanced conversions are enabled, your email address is hashed in the browser before transmission. Data may be transferred to the USA; Google is certified under the EU–US Data Privacy Framework. Without consent, Google operates in Consent Mode using only anonymous, cookieless signals.
Vercel Web Analytics: We use Vercel Web Analytics (Vercel Inc.) to measure website traffic. No cookies are set and no personal profiles are created (legal basis: Article 6(1)(f) GDPR).
4. Your rights
You have the right at any time to access, rectify and erase your personal data, to restrict its processing, and to lodge a complaint with the competent supervisory authority.