PRIVACY POLICY / DATA PRIVACY / COOKIES

1. Data Protection at a Glance General Information
The following notes provide a straightforward overview of what happens to your personal data when you visit this website. Personal data includes all information that can be used to personally identify you. For detailed information on the subject of data protection, please refer to our Privacy Policy found below.

Data Collection on Our Website Who is responsible for data collection?
Data processing on this website is carried out by the website operator. The operator's contact details can be found in the "Controller" section of this Privacy Policy.

How do we collect your data?
Some data is collected when you provide it to us, such as data entered into a contact form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This primarily involves technical data (e.g., your internet browser, operating system, or the time of the page request). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Part of the data is collected to ensure that the website operates flawlessly. Other data may be used to analyze your user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders, or other inquiries.

What rights do you have regarding your data?
You have the right to obtain information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future. Furthermore, under certain circumstances, you have the right to request the restriction of the processing of your personal data, as well as the right to lodge a complaint with the competent supervisory authority.

2. Hosting Squarespace
We host our website with Squarespace. The provider is Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland. When you visit our website, Squarespace collects various log files, including your IP address. Squarespace uses cookies and other recognition technologies necessary for the presentation of the page, the provision of certain website functions, and to ensure security (strictly necessary cookies). The use of Squarespace is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent was requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time. Data transmission to the USA is based on the Standard Contractual Clauses (SCCs) of the EU Commission and the EU-US Data Privacy Framework (DPF). Squarespace is certified under the DPF, committing to comply with European data protection standards. Data Processing Agreement (DPA): We have concluded a Data Processing Agreement with the above-mentioned provider to ensure that they process the personal data of our website visitors strictly according to our instructions and in compliance with the GDPR.

3. General Notes and Mandatory Information The Controller

The controller responsible for data processing on this website is:

Simon Feldbein
Simdesigns
Rübezahlhof 2
30823 Garbsen, Lower Saxony
DE, Germany

Phone: +49 (0) 178 896 4608
Email: simon.feldbein@googlemail.com

Storage Duration
Unless a more specific storage period has been specified in this Privacy Policy, your personal data will remain with us until the purpose for data processing ceases to apply. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, provided we have no other legally permissible reasons for storing it (e.g., tax or commercial retention periods); in the latter case, the deletion takes place after these reasons cease to apply.

Legal Bases for Data Processing
If you have consented to data processing, we process your personal data based on Art. 6(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device, processing is additionally based on § 25(1) TDDDG. If your data is necessary for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interest according to Art. 6(1)(f) GDPR.

Revocation of Your Consent
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out before the revocation remains unaffected.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND DIRECT MARKETING (ART. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE, OR DEFEND LEGAL CLAIMS. IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME; THIS ALSO APPLIES TO PROFILING CONNECTED TO SUCH DIRECT MARKETING.

Further Rights of the Data Subject

• Right to lodge a complaint (Art. 77 GDPR):
  You have the right to complain to a supervisory authority in the event of GDPR violations.

• Right to data portability (Art. 20 GDPR):
  You have the right to have data that we process automatically based on your consent or in fulfillment of a contract handed over to you or a third party in a standard, machine-readable format.

• Access, Rectification, and Erasure (Art. 15, 16, 17 GDPR):
  You have the right to free information about your stored personal data, its origin, recipient, and purpose at any time, as well as a right to correct or delete this data.

• Right to restriction of processing (Art. 18 GDPR):
  You have the right to demand the restriction of the processing of your personal data under certain circumstances (e.g., while the accuracy of the data is being checked).

SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.

4. Data Collection on This Website Cookies
Our website uses "cookies." These are small data packages that do not cause any harm to your device. They are stored either temporarily (session cookies) or permanently (persistent cookies). Strictly necessary cookies are stored on the basis of Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically flawless provision of our services. If consent for cookies and similar technologies was requested, processing is based exclusively on this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).

CCM19 (Consent Management)
We use CCM19 (Provider: Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany) to obtain and document your consent for the storage of certain cookies. When you visit our website, a connection to the CCM19 servers is established to obtain your consent. CCM19 stores a cookie in your browser to allocate the granted consents. This data is stored until you request us to delete it or delete the CCM19 cookie yourself. The legal basis for this is Art. 6(1)(c) GDPR, as we are legally obliged to obtain consent. We have concluded a Data Processing Agreement (DPA) with CCM19.

5. Communication Tools WhatsApp Business
We use WhatsApp for communication. The provider is WhatsApp Ireland Limited, Dublin 2, Ireland. Communication is end-to-end encrypted. However, WhatsApp gains access to metadata (e.g., sender, recipient, time) and shares data with its US parent company, Meta. The use is based on our legitimate interest in fast communication (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR). WhatsApp is certified under the EU-US Data Privacy Framework (DPF), and data transfer to the US is secured via Standard Contractual Clauses.

Telegram
We also use Telegram (Telegram Messenger LLP, London, UK). Communication is encrypted between the device and the server. Telegram accesses metadata generated during use. The use is based on our legitimate interest in effective communication (Art. 6(1)(f) GDPR).

6. Analysis Tools and Advertising Google Analytics
This website uses Google Analytics. The provider is Google Ireland Limited, Dublin 4, Ireland. Google Analytics allows us to analyze user behavior (e.g., page views, time spent, operating systems). Google uses cookies and device fingerprinting for this purpose. The use of this service is based solely on your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Google is certified under the EU-US DPF. IP Anonymization: We have activated IP anonymization on this website. Your IP address will be truncated by Google within the EU/EEA before being transmitted to the US. Browser Plugin: You can prevent Google from collecting your data by downloading the browser plugin here: https://tools.google.com/dlpage/gaoptout.

7. Plugins and Tools Google Fonts (Local Hosting)
This site uses Google Fonts for the uniform display of fonts. These fonts are hosted locally on our servers. No connection to Google's servers is established, and no data is transferred to Google.

Adobe Fonts
We use Adobe Web Fonts (Adobe Systems Incorporated, San Jose, CA, USA). Your browser loads the required fonts directly from Adobe, establishing a connection to Adobe's servers in the US, transmitting your IP address. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in uniform presentation) or your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Adobe is certified under the EU-US DPF, and data transfers are backed by Standard Contractual Clauses