Privacy Policy

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data is collected. Personal data refers to data with which you can be personally identified. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Notice About the Responsible Party

The responsible party for data processing on this website is:

Studio Dufte
Wilhelminenhofstraße 29
12459 Berlin

Phone: +49 159 01956051
Email: hello(a)studio-dufte.de

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Storage Duration

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, provided there are no other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law). In the latter case, deletion will occur once these grounds cease to apply.

General Legal Basis for Data Processing on This Website

If you have given consent to data processing, we process your personal data based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special data categories under Art. 9(1) GDPR are processed. If you have explicitly consented to the transfer of personal data to third countries, the data processing is additionally based on Art. 49(1)(a) GDPR. If consent includes storing cookies or accessing information on your device (e.g., via device fingerprinting), data processing is also based on § 25(1) TTDSG. Consent can be withdrawn at any time.

If your data is required for fulfilling a contract or pre-contractual measures, we process your data under Art. 6(1)(b) GDPR. We also process your data to fulfill a legal obligation under Art. 6(1)(c) GDPR. Furthermore, data processing can be based on our legitimate interest under Art. 6(1)(f) GDPR. The respective legal bases for data processing are detailed in this privacy policy.

Data Transmission to the USA and Third Countries

We use tools from companies based in the USA or other non-EU countries that may not provide the same level of data protection. If these tools are active, your personal data may be transferred to and processed in these countries. Please note that in such countries, it might not be possible to ensure the same level of data protection as within the EU. For example, US companies may be obligated to provide personal data to security authorities without allowing you to legally challenge this. As a result, US authorities (e.g., intelligence agencies) may process, evaluate, and store your data on US servers. We have no control over these activities.

Your Rights

Right to Revoke Consent
You may revoke any consent you have given for data processing at any time. The legality of data processing carried out until the revocation remains unaffected.

Right to Object (Art. 21 GDPR)
If your data is processed based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing at any time due to reasons arising from your particular situation. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or if the processing serves the assertion, exercise, or defense of legal claims.

If your data is processed for direct marketing purposes, you have the right to object at any time to such processing. If you object, your personal data will no longer be used for direct marketing purposes.

Complaint Rights
If you believe there is a violation of GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or the place where the alleged infringement occurred.

SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us. You can recognize an encrypted connection by the “https://” in the browser’s address bar and the lock symbol.

Objection to Promotional Emails
We hereby object to the use of contact data published within the framework of imprint obligations for sending unsolicited advertisements and information. The operators of these pages reserve the right to take legal action in the case of unsolicited promotional information, such as spam emails.