Privacy policy

Controller

The controller for data processing on this website is:

NW Studio
Nils Wilbert
Genter Straße 67 a
13353 Berlin
Germany

Email: hello@nwstudio.de
Phone: +49 157 888 05 337

Principles and legal bases

We process personal data only for the purposes described in this policy and only on a valid legal basis under the GDPR:

• consent (Art. 6 (1) (a) GDPR)
• performance of a contract or pre-contractual steps (Art. 6 (1) (b) GDPR)
• compliance with a legal obligation (Art. 6 (1) (c) GDPR)
• our legitimate interests (Art. 6 (1) (f) GDPR)

Your data is not passed on to third parties for any purpose other than those named here. We have concluded data processing agreements under Art. 28 GDPR with every processor named below.

Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. It is served from servers in the European Union.

When you visit the site, Vercel processes technically necessary connection data. The legal basis is our legitimate interest in a secure and performant website (Art. 6 (1) (f) GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses.

Server log files

Every time the site is accessed, data your browser transmits is recorded automatically:

• the page requested and the time of access
• the amount of data transferred and the HTTP status code
• the referrer URL
• browser type, browser version and operating system
• a shortened IP address

This data is used solely for technical operation, error analysis and defending against attacks. The legal basis is Art. 6 (1) (f) GDPR. It is not combined with other data sources.

Contact form

If you send us an enquiry using the contact form, we process the details you provide in order to handle and answer it:

• name (required)
• email address (required)
• message (required)
• company, phone number, type of project, number of products, timeline and how you heard about us (all optional)
• the language of the site, the page you submitted from and the time of submission
• a cryptographic checksum (hash) of your IP address to protect against bulk submissions — the IP address itself is not stored

The legal basis is Art. 6 (1) (b) GDPR, as your enquiry is directed at entering into a contract, and otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

The details are stored in a database and also sent to us by email. You receive an automatic acknowledgement at the address you provided. We delete the data once your enquiry has been dealt with conclusively and no statutory retention periods apply, and after three years at the latest.

Database

Data submitted through the contact form is stored in a PostgreSQL database operated by Neon Inc., 209 Orange Street, Wilmington, DE 19801, USA. The database is located in the European Union (Frankfurt am Main). The legal basis is Art. 6 (1) (b) and (f) GDPR.

Email delivery

To send the notification to us and your acknowledgement to you, we use Resend (Plus Five Five, Inc., 2261 Market Street, San Francisco, CA 94114, USA). Your email address, your name and the content of your message are processed. Delivery runs through servers in the European Union. The legal basis is Art. 6 (1) (b) and (f) GDPR.

Spam protection (Cloudflare Turnstile)

To protect the contact form against automated submissions we use Cloudflare Turnstile, a service of Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany.

Turnstile analyses your browser's technical behaviour to tell humans from bots. Your IP address, browser information and interaction data are transmitted to Cloudflare. Turnstile does not use cookies for recognition. The legal basis is our legitimate interest in preventing abuse (Art. 6 (1) (f) GDPR).

More information: www.cloudflare.com/privacypolicy/

Content and media

Images are delivered through the content management system Sanity (Sanity AS, Dronning Eufemias gate 16, 0191 Oslo, Norway) and its image CDN. Videos are provided by Mux, Inc. (1 Letterman Drive, San Francisco, CA 94129, USA); the video players are configured so that no cookies are set.

When the content loads, your IP address is transmitted to the respective provider. The legal basis is our legitimate interest in delivering the site quickly and reliably (Art. 6 (1) (f) GDPR).

Fonts

This website uses the Inter typeface. It is loaded exclusively from our own server. No connection is made to Google servers and no data is transmitted to Google.

Google Tag Manager

We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager itself does not collect personal data; it manages other tags. When it loads, however, your IP address is transmitted to Google.

The legal basis is our legitimate interest in measuring and improving our website (Art. 6 (1) (f) GDPR). You may object to this processing at any time (see “Your rights”).

More information: policies.google.com/privacy

Audience measurement (PostHog)

To analyse how our website is used we use PostHog (PostHog, Inc., 2261 Market Street, San Francisco, CA 94114, USA). Processing takes place exclusively on servers in the European Union (eu.i.posthog.com).

PostHog records pseudonymous usage data such as pages viewed, time on page, clicks, referrer and browser and device information. Cookies and an entry in your browser's local storage are used to recognise returning visitors. This data is not combined with identifying information, and the contents of the contact form are not transmitted to PostHog.

The legal basis is our legitimate interest in designing our offering to meet demand (Art. 6 (1) (f) GDPR). You may object to this collection at any time by enabling the “Do Not Track” setting in your browser or by sending us a message.

More information: posthog.com/privacy

Google Maps

We embed map material from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map loads, your IP address is transmitted to Google and Google may set cookies. If your browser is signed in to Google, Google can associate the visit with your account.

The legal basis is our legitimate interest in making our studio easy to find (Art. 6 (1) (f) GDPR).

More information: policies.google.com/privacy

Cookies and local storage

We use the following cookies and entries in your browser's local storage:

• a technically necessary cookie set after you submit the contact form, so that the confirmation page can be shown to you (lifetime 30 minutes)
• an entry in session storage recording whether you dismissed our Instagram prompt (cleared when you close the browser tab)
• cookies set by the audience measurement tool PostHog and, where applicable, cookies loaded through Google Tag Manager
• an entry in session storage that stops a submitted enquiry being counted twice (cleared when you close the browser tab)

You can delete cookies in your browser settings at any time, or prevent them from being stored in the first place. The website may then not work fully.

SSL encryption

This website uses TLS encryption throughout (recognisable by “” in the address bar), which protects your data in transit.

Retention and deletion

We follow the principles of data minimisation and storage limitation. We keep personal data only as long as is necessary for the purposes named, or as long as statutory retention periods require. After that the data is deleted or its processing is restricted.

Your rights

You have the right at any time to:

• access the data held about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• erasure, where no statutory retention obligations apply (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on a legitimate interest (Art. 21 GDPR)
• withdraw consent with effect for the future (Art. 7 (3) GDPR)

An informal message to hello@nwstudio.de is enough to exercise your rights.

Right to complain to a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
www.datenschutz-berlin.de

Changes to this privacy policy

We reserve the right to amend this privacy policy if the legal situation, our services or the way we process data change. The version current at the time of your visit applies.