Privacy policy

1. Controller

The controller responsible for data processing on this website is:
Steffen Hofbauer
Goethestraße 17
67547 Worms

Phone: +49 151 29821398
Email: steffen@studio-hofbauer.com

2. Hosting and server log files (Vercel)

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). When you access the website, technically required information may be processed in server log files, such as IP address, date/time, requested URL, referrer, browser information, and operating system.

Processing is carried out to ensure secure, stable, and error-free website delivery and is based on Art. 6(1)(f) GDPR (legitimate interest).

3. Fonts (locally hosted)

This website uses the Inter and Lora fonts as self-hosted assets via Fontsource. No connection to Google Fonts servers is established when pages are loaded.

4. Web analytics (Vercel Analytics)

This website uses Vercel Web Analytics (Vercel Inc., USA) for aggregated, anonymised visitor statistics – e.g. page views, referrer, and device type. No marketing cookies are set; measurement is cookieless.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly, technical analysis of website usage). You may object to this processing at any time with future effect (Art. 21 GDPR), e.g. by email to the address above.

More information: Vercel Analytics privacy .

5. Contact form and pricing inquiry popup

If you use the contact form on the contact page or the inquiry popup on the pricing page, I process the information you submit to handle your request.

Processed data includes:

• Required fields: name, email address, message
• Optional package: Einfach, Komplett, Nach Maß, or Individual Project
• Optional topic: New Build, Relaunch, Tool, Automation, or Unsure

Processing is carried out for pre-contractual steps under Art. 6(1)(b) GDPR and for efficient handling of inquiries under Art. 6(1)(f) GDPR.

6. Email delivery via Resend

Resend Inc. is used for technical delivery of form messages by email. Submitted form data (especially name, email address, message, and optional details) may be processed for this purpose.

More information: Resend Privacy Policy .

7. Recipients and third-country transfers

Recipients of personal data may include hosting and infrastructure providers, analytics providers, and email service providers where required for website operation and inquiry handling.

Where data is transferred to third countries, this is based on appropriate safeguards (e.g. adequacy decisions or standard contractual clauses), where required.

8. Storage period

Personal data is stored only as long as necessary for the respective purpose or as required by statutory retention obligations. Data is then deleted or processing is restricted.

9. Your rights

Under the GDPR, you have the following rights in particular:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw consent at any time for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a supervisory data protection authority.

10. Data security

This website uses transport encryption (TLS/SSL) to protect transmitted data against unauthorized access.

11. Changes to this Privacy Policy

I reserve the right to update this Privacy Policy if legal, technical, or organizational requirements change.