Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:
André Deiss · Studio Deiss, Leutenbergstraße 19, 78532 Tuttlingen, Germany
Email: [email protected]

2. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw any consent given at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

3. Hosting

This website is delivered via Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA); a data processing agreement (Art. 28 GDPR) is to be concluded with the provider. Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or standard contractual clauses. Legal basis: Art. 6(1)(f) GDPR (secure, efficient operation of the website).

4. Server log files

When the site is accessed, data is automatically recorded in server log files (IP address, date/time, file requested, browser type, referrer). Purpose: technical operation and security. Legal basis: Art. 6(1)(f) GDPR. Storage period: typically 7 days.

5. Contact (form & email)

If you contact us via the form or by email, we process the data you provide (e.g. name, email, message) to handle your enquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual) or (f) (communication). The data is deleted once it is no longer required, at the latest after 6 months, unless statutory retention obligations apply.

6. Fonts

All fonts are served locally from our own server. There is no connection to third parties (e.g. Google Fonts, Fontshare) and therefore no transfer of your IP address to third parties.

7. Embedded media

Video and audio content is also delivered directly from our own server. No external players (e.g. YouTube/Vimeo) that transfer data to third parties are embedded.

8. Web analytics with Microsoft Clarity

We use Microsoft Clarity, a web-analytics service provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA) and Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Clarity captures how visitors interact with our website — including mouse and scroll movements, clicks, and usage, browser and device information — and produces aggregated metrics, heatmaps and pseudonymised session recordings. It uses cookies and similar technologies. This data is transmitted to and processed by Microsoft; a transfer to the USA may occur (Microsoft is certified under the EU-US Data Privacy Framework). The purpose is to analyse and improve our website. The legal basis is our legitimate interest in a needs-based design of the website (Art. 6(1)(f) GDPR). More information: privacy.microsoft.com.

9. Cookies & consent

The web analytics described in section 8 (Microsoft Clarity) uses cookies or similar technologies that are not strictly necessary. Otherwise this website uses only technically necessary mechanisms and no marketing cookies. You can object to this collection at any time by deleting or blocking cookies in your browser or enabling its tracking-protection feature.

10. Encryption

The website is delivered exclusively over an encrypted HTTPS (TLS) connection.

Last updated: 17 June 2026