Peak-Studios Privacy Policy
1. An overview of data protection
General information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e., the “controller”)?
The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.
Other data are collected automatically by our IT systems when you visit the website. This mainly includes technical data (e.g., internet browser, operating system, or the time of the page visit). These data are collected automatically as soon as you access our website.
What are the purposes we use your data for?
Part of the data is collected to ensure that the website is provided without errors. Other data can be used to analyze your user behavior. Another part of your data is used to carry out the order you have requested. For this it may be necessary for us to transmit your data to our employees and/or subcontractors for order processing.
What rights do you have as far as your information is concerned?
At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction or deletion of this data. For this purpose as well as for further questions about data protection you can contact us at any time at the address given in the imprint. Furthermore, you have a right of appeal to the competent supervisory authority.
In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. Details can be found in the privacy policy under "Right to restriction of processing".
Analysis tools and tools provided by third parties
When visiting this website, your surfing behavior can be statistically evaluated. This happens above all with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; the surfing behavior can not be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information about these tools and their possibilities of appeal can be found in the following privacy policy.
2. Hosting
External hosting
This website is hosted by an external service provider. The provider is ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
The hosting provider processes data generated during visits to this website or transmitted via the website, insofar as this is necessary for the technical provision, security, maintenance, and operation of the website. This may include, in particular, IP addresses, server log data, technical access data, contact and form data, as well as upload and order data, insofar as this data is processed or stored on the hosting provider's systems.
The hosting provider is used for the purpose of ensuring the secure, fast, and reliable provision of our online services. The legal basis for this is Article 6(1)(f) GDPR. Insofar as contract inquiries, uploads, or order data are processed via the website, this processing may additionally be based on Article 6(1)(b) GDPR. Where statutory retention obligations exist, processing is based on Article 6(1)(c) GDPR.
A data processing agreement pursuant to Article 28 GDPR exists with the hosting provider. According to this data processing agreement, data processing services are performed exclusively in a member state of the European Union or in a contracting state of the Agreement on the European Economic Area; any transfer to a third country requires a separate contractual basis.
3. General information and mandatory information
Privacy Policy
The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
Christopher Subat Otto-Hahn-Str. 20, 97218 Gerbrunn
Telephone: +49 (0)931 90879510 Email: info “at” peak-studios.de
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).
Revocation of your consent to the processing of data
Many data processing operations are only possible with your express consent. You can revoke consent that you have already given at any time. An informal message by e-mail to us is sufficient. The legality of the data processing that took place up until the revocation remains unaffected by the revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Information, cancellation and rectification
Within the scope of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to rectification or deletion of this data. For further information on personal data, please contact us at any time at the address given in the imprint.
Right to demand processing restrictions
You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restriction of processing exists in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
Opposition to advertising emails
We hereby expressly prohibit the use of contact data published in the context of website legal notice requirements with regard to sending promotional and informational materials not expressly requested. The website operator reserves the right to take specific legal action if unsolicited advertising material, such as email spam, is received.
4. Recording of data on this website
Cookies and similar technologies
Our website uses cookies and similar technologies, such as local storage, session storage, pixels, scripts, and embedded content. Some of these technologies are necessary to technically provide the website, enable security features, provide forms, and save your privacy settings.
The use of necessary technologies, insofar as access to your device takes place, is based on Section 25 Paragraph 2 of the German Telemedia Act (TDDG). The associated processing of personal data is based on Article 6 Paragraph 1 Letter b or Article 6 Paragraph 1 Letter f of the GDPR, depending on the purpose. Our legitimate interest lies in the secure, stable, and user-friendly provision of this website.
We only use optional technologies for statistics, marketing, external media, and the AI chatbot with your consent. The legal basis for accessing your device is Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw or change your consent at any time with effect for the future via the "Privacy Settings" link.
You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to accept cookies in certain cases or to generally reject them, and to automatically delete cookies when you close your browser. Disabling technically necessary cookies may limit the functionality of this website.
Consent management / Privacy settings
We use Borlabs Cookie as a consent management system to obtain, document, and manage your consent for optional services such as statistics, marketing, external media, and the AI chatbot. Your selection is saved so that the website can take your decision into account on subsequent visits.
In particular, your consent selection, timestamp, banner version, language setting, and technical information necessary for storing your decision are processed. The legal basis for storing the required consent information is Section 25 Paragraph 2 of the German Telemedia Act (TMG). The associated processing of personal data is based on Article 6 Paragraph 1 Letter f of the GDPR. Our legitimate interest lies in the legally compliant documentation and implementation of your data protection settings.
You can change or revoke your selection at any time via the "Privacy Settings" link in the footer.
Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes, in particular, browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address.
Server log files are processed for the technical provision, stability, error analysis, and security of the website. This data is not combined with other data sources unless necessary for investigating security incidents.
The log files are regularly deleted after a maximum of 7 days. Longer storage only occurs on a case-by-case basis, insofar as this is necessary for the investigation of security incidents, attempted misuse, or for the establishment, exercise, or defense of legal claims.
This data is collected on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the technically flawless presentation, stability, security, and optimization of this website.
Contact form
When you submit inquiries to us via our contact form, we process the information you provide, including your contact details, to handle your inquiry and for any follow-up questions. Your data will only be shared if this is necessary for processing your inquiry, for carrying out pre-contractual measures, or for fulfilling the contract, if we are legally obligated to do so, or if you have given your consent.
The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us in accordance with Article 6(1)(f) GDPR or on your consent in accordance with Article 6(1)(a) GDPR, if such consent has been obtained.
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Mandatory legal provisions, in particular retention periods, remain unaffected.
Upload form, quote requests and order processing
When you submit a quote request, upload files, or request a quote via our website, we process the data you enter to handle your request, prepare a quote, carry out pre-contractual measures, and execute any potential contract. This may include, in particular, your name, email address, telephone number, billing information, project information, song titles, audio files, reference files, message content, technical upload data, and payment information.
The legal basis is Article 6(1)(b) GDPR, insofar as the processing is necessary for initiating or performing a contract. Insofar as we comply with statutory retention obligations, the processing is based on Article 6(1)(c) GDPR.
To process your project, data may be shared with internal staff, freelancers, studio managers, subcontractors, technical service providers, payment providers, or billing service providers, insofar as this is necessary for quoting, production, mixing, mastering, editing, recording, invoicing, payment processing, or customer communication. Where necessary, we conclude data processing agreements with processors in accordance with Article 28 of the GDPR.
Inquiries via email, phone or messenger
When you contact us by email, phone, or messenger, your inquiry, including all resulting personal data, will be stored and processed by us for the purpose of handling your request. We will only disclose your personal data to the extent necessary for processing your inquiry, for carrying out pre-contractual measures, or for fulfilling a contract, or to the extent that we are legally obligated to do so.
For the technical support of our business processes, we use carefully selected service providers, such as IT hosting, email providers, messenger services, or AI assistance systems, who process personal data exclusively on our behalf and on the basis of a data processing agreement pursuant to Article 28 GDPR, insofar as this is legally required. Your data will not be shared for advertising purposes unless we have obtained your explicit consent beforehand.
The processing of this data is based on Article 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on your consent pursuant to Article 6(1)(a) GDPR and/or on our legitimate interests pursuant to Article 6(1)(f) GDPR, as we have a legitimate interest in the efficient processing of inquiries addressed to us.
The data you send us via contact requests will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies. Mandatory legal provisions, in particular statutory retention periods, remain unaffected.
5. Social Media
Social media links
Our website may contain links to our profiles on social networks. Clicking these links will take you away from our website and to the respective provider's platform. Only then will personal data be processed by that provider. The respective provider is solely responsible for data processing on the linked platforms.
If social media content, buttons, or external posts are technically embedded on individual pages, this content will not be loaded automatically, but only after your consent or active activation. The legal basis for loading such external content and accessing your device is Section 25 Paragraph 1 of the German Telemedia Act (TDDG); the legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR.
6. Analysis tools and advertising
Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Website tags can be centrally managed and triggered via Google Tag Manager. Google Tag Manager primarily serves the technical management of other services. Services for statistics or marketing are only activated according to your selection in the consent banner.
To the extent that the Google Tag Manager is necessary for the technical management of your consent choices and for triggering permitted services, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the technically controlled and consent-compliant management of the services used. Where optional services are triggered via the Google Tag Manager, the legal bases of the respective service apply.
google analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, which pages are accessed, and how our website can be improved technically and in terms of content.
Google Analytics is only activated with your consent. In particular, IP address, device and browser information, referrer URL, page views, interactions, timestamps, and pseudonymous identifiers may be processed. According to Google, Google Analytics does not use IP addresses for logging or storing them in full.
The legal basis for accessing your device is Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time via "Privacy Settings".
The recipient is Google Ireland Limited. Processing by affiliated Google companies, in particular Google LLC in the USA, cannot be ruled out. Where personal data is transferred to third countries, this is done in accordance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses. Further information on recipients, transfers to third countries, storage periods, and safeguards can be found in our privacy settings and in Google's privacy policy. https://policies.google.com/privacy?hl=de.
Google Ads conversion tracking
We use Google Ads Conversion Tracking from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to track whether users perform certain actions on our website after clicking on an ad, for example, sending an inquiry or visiting a relevant page.
Google Ads conversion tracking is only activated with your consent. This may involve processing data such as IP address, device and browser information, referrer URL, page views, interactions, timestamps, ad and conversion identifiers, and pseudonymous identifiers.
The legal basis for accessing your device is Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time via "Privacy Settings".
The recipient is Google Ireland Limited. Processing by affiliated Google companies, in particular Google LLC in the USA, cannot be ruled out. Where personal data is transferred to third countries, this is done in accordance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses. Further information can be found in Google's privacy policy: https://policies.google.com/privacy?hl=de.
Meta Pixels
We use Meta Pixel, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Meta Pixel helps us measure the effectiveness of advertisements and better understand our advertising target audiences.
Meta Pixel is only activated with your consent. In this process, data such as IP address, device and browser information, referrer URL, page views, interactions, timestamps, event data, and pseudonymous identifiers may be processed and transmitted to Meta. Meta may link this data to your Meta account if you are logged in to a Meta service.
The legal basis for accessing your device is Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time via "Privacy Settings".
The recipient is Meta Platforms Ireland Limited. Processing by affiliated Meta companies, in particular Meta Platforms, Inc. in the USA, cannot be ruled out. Where personal data is transferred to third countries, this is done in accordance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses. Further information can be found in Meta's privacy policy. https://www.facebook.com/privacy/explanation.
7. Plugins, external media and tools
External media: YouTube, Google Maps, Calendly and SoundCloud
Our website may include content and features from third-party providers such as YouTube, Google Maps, Calendly, and SoundCloud. This content is blocked by default and will only load if you consent to it under the "External Media" category or actively enable the respective content.
When loading external media, personal data such as IP address, device and browser information, referrer URL, time of access, and interaction data may be transmitted to the respective provider. If you are logged in to the respective provider, they can associate your visit to our website with your user account.
The legal basis for loading external media and accessing your device is your consent pursuant to Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. You can withdraw your consent at any time via "Privacy Settings".
Further information can be found in the privacy policies of the respective providers: Google/YouTube/Google Maps at [link to privacy policies]. https://policies.google.com/privacy?hl=de, Calendly under https://calendly.com/privacy and SoundCloud under https://soundcloud.com/pages/privacy.
GTranslate / Language switching
Our website offers a language switching feature so that content is available in different language versions. For this, we use the GTranslate service provided by GTranslate Inc., 4394 NW 120th Ave, Coral Springs, FL 33065, USA.
Depending on the language URL accessed and the technical implementation, language switching can occur via a widget or through a translation proxy or a translation delivery network. In this process, data such as IP address, browser and device information, referrer URL, accessed URL, language selection, technical usage data, and the content of the accessed page may be processed, transmitted, or cached.
Where language switching is technically necessary, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a user-friendly and multilingual website. Where external translation, proxy, or tracking functions are loaded, or where access to your device occurs, this only happens with your consent in accordance with Section 25(1) TDDDG and Article 6(1)(a) GDPR.
A transfer to third countries, particularly the USA, cannot be ruled out. Where personal data is transferred to third countries, this will be done in accordance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses. Further information can be found in GTranslate's privacy policy. https://gtranslate.io/privacy-policy.
8. AI chatbot “Peak-Studios Chatbot”
We provide an optional AI chatbot on our website. The chatbot is designed to automatically answer general questions about our services, processes, pricing, file delivery, and project preparation. The chatbot will only load if you activate the "AI chatbot" category in your privacy settings or accept all optional services.
Type of processing
When using the chatbot, the following data may be processed: IP address, device and browser information, referrer URL, page URL, timestamp, session information, your chat input, system-generated responses, and voluntarily entered contact details. Please do not enter any special categories of personal data as defined in Article 9 of the GDPR or any confidential information that is not necessary for answering your inquiry.
Purpose of processing
The data is processed to provide the chat function, to automatically answer general inquiries, to prepare for potential contact or commissioning, and for technical security and to improve the function. No purely automated decision-making with legal effect within the meaning of Article 22 GDPR takes place via the chatbot.
Legal basis
The legal basis for loading the chatbot and accessing your device is your consent pursuant to Section 25 Paragraph 1 of the German Telemedia Act (TDDG). The legal basis for the subsequent processing of personal data is Article 6 Paragraph 1 Letter a of the GDPR. If your inquiry relates to a specific engagement or contract initiation, further processing may additionally be based on Article 6 Paragraph 1 Letter b of the GDPR.
Systems and service providers used
The chatbot may utilize in-house server and WordPress components, as well as technical service providers for automation, data storage, and AI language model processing, in particular n8n, Supabase, and the Anthropic Claude API. Where external service providers process personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Article 28 GDPR, insofar as this is legally required.
Depending on the service provider used, data may be transferred to third countries. In this case, the transfer will only take place in compliance with Articles 44 et seq. of the GDPR, for example on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses.
Storage duration
Chat content is stored only as long as necessary for provision, security, error analysis, quality assurance, or follow-up communication. Unless longer legal retention periods apply, chat content is deleted or anonymized after 90 days at the latest.
Transparency notice pursuant to the EU AI Act
The chatbot is an AI system. Answers are generated automatically and may be incomplete or incorrect. Legally, medically, or tax-binding advice is not provided via the chatbot. Should you wish to contact us personally, please use the contact options listed in the legal notice.
10. AI-supported processing of email and messenger requests
To support our employees, we use AI-based assistance systems when processing incoming emails and messenger messages (e.g. WhatsApp Business).
These systems provide support, in particular, for:
– the summary of longer news items,
– the structuring of project information,
– the creation of draft answers,
– linguistic optimization,
– internal research or quality assurance.
The final review, decision, and dispatch of responses are carried out exclusively by natural persons. No fully automated decision-making within the meaning of Article 22 GDPR takes place.
Data categories
In particular, the following personal data may be processed:
– Contact details (name, email address, telephone number)
– Communication content (message text, project information, file attachments)
– Communication metadata (time, channel)
We kindly request that you do not transmit any special categories of personal data (Art. 9 GDPR) unless absolutely necessary.
Legal basis
The processing takes place as follows:
– in accordance with Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the implementation of pre-contractual measures or for the performance of the contract;
– moreover, in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficient, structured and high-quality processing of customer inquiries, a reduction of processing times and consistent provision of information.
precautions
We implement technical and organizational measures to protect your data. These include, in particular:
– Access restrictions,
– encrypted data transmission,
– Logging of system accesses,
– Data minimization,
– human review of all AI-generated content,
– where possible, configurations that exclude the use of content for training purposes.
Recipient / Service Provider
If external AI service providers are used, processing is carried out exclusively on the basis of a data processing agreement in accordance with Art. 28 GDPR.
These service providers process data only according to our instructions and not for their own purposes.
Third-country transfer
Should it be necessary in individual cases to transfer personal data to a third country, this will only take place in compliance with the requirements of Art. 44 et seq. GDPR (e.g. on the basis of an adequacy decision or suitable safeguards such as standard contractual clauses).
Storage duration
Communication content is generally only stored for as long as is necessary to process the request.
If a contractual relationship is established, the data will be stored within the framework of the statutory retention periods.
Otherwise, the data will be deleted once the purpose for which it was collected no longer applies.
Right of objection
Insofar as the processing is based on Article 6(1)(f) GDPR, you have the right, pursuant to Article 21 GDPR, to object at any time on grounds relating to your particular situation.
In this case, we will process your request without AI assistance, insofar as this is technically and organizationally possible.
Contact us via WhatsApp Business
When you contact us via WhatsApp Business, we process your phone number and the transmitted communication content to handle your request.
The legal basis is Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR.
WhatsApp Ireland Limited may process personal data as an independent data controller in the course of providing the service. Further information can be found in WhatsApp's privacy policy.
Alternatively, you can contact us at any time by email or telephone.