Privacy Policy

1) Introduction and Controller Information

Thank you for visiting our website. The protection of your personal data is of great importance to us. In the following, we would like to inform you in detail about how we handle your personal data when you use our website. Personal data refers to all information that can be used to identify you personally.

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is S. Daniel Hopp, SH Consulting (Brand: createrr.studio), Leopoldstraße 2-8, 32051 Herford, Germany, Tel.: +49 5221 8549837, E-Mail: hello@createrr.studio. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

If you access our website merely for informational purposes without registering or otherwise transmitting data to us, we only collect the information that your web browser automatically sends to our server (so-called “server log files”). When you visit our website, the following technically necessary data is collected:

• The visited website
• Time of access (date and time)
• Volume of data transferred in bytes
• Referring website (referrer URL) from which you reached our website
• The web browser used by you
• The operating system used by you
• Your IP address (anonymized where applicable)

This data processing is based on Art. 6 Abs. 1 lit. f GDPR and serves our legitimate interest in ensuring the technical stability and functionality of our website. This data is generally not shared with third parties or used for other purposes. However, we reserve the right to review server log files retroactively if there are concrete indications of unlawful use.

To protect the transmission of sensitive content, such as inquiries you submit via our contact form, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix in your browser's address bar and the lock icon being visible.

3) Hosting

To operate our website and deliver its content, we use the services of Hetzner Online GmbH, whose servers are located exclusively within the European Union. All data generated in connection with the use of our website is processed on these servers. We have entered into a data processing agreement with this hosting provider that ensures the protection of our visitors' data and prevents unauthorized disclosure to third parties.

4) Use of Cookies

To make our website appealing and to enable the use of certain features, we use so-called cookies. These are small text files that are stored on your device. Some of these cookies are automatically deleted from your device after the browser session ends (so-called “session cookies”). Other cookies remain on your device and allow your settings to be recognized on subsequent visits (so-called “persistent cookies”). The respective storage duration can be found in the cookie settings of your web browser.

If personal data is also processed within the scope of individual cookies used by us, such processing takes place either pursuant to Art. 6 Abs. 1 lit. b GDPR for the performance of a contract, pursuant to Art. 6 Abs. 1 lit. a GDPR on the basis of your consent, or pursuant to Art. 6 Abs. 1 lit. f GDPR to safeguard our legitimate interests in the optimal functionality of our website and a user-friendly and effective design of your visit.

In your browser settings, you have the option to be notified about the setting of cookies, to allow cookies on a case-by-case basis or to reject them entirely, and to delete cookies that have already been set. Please note that rejecting cookies may result in certain features of our website not being fully available.

5) Contact

When you contact us – whether via our contact form or by email – personal data is collected. The scope of data collected via the contact form is determined by the input fields provided. This typically includes your name, your company, your email address, a description of your project, and the type of service you are interested in. We store and use this information exclusively for the purpose of processing your inquiry and for the associated technical administration.

The legal basis for this data processing is our legitimate interest in responding to your inquiry pursuant to Art. 6 Abs. 1 lit. f GDPR. If the purpose of your contact is to enter into a contractual agreement, Art. 6 Abs. 1 lit. b GDPR serves as an additional legal basis. After your inquiry has been fully processed, your data will be deleted, unless statutory retention obligations prevent deletion.

6) Use of Customer Data for Promotional Purposes

Registration for Our Email Newsletter

If you register for our email newsletter, we will send you information about our services in the areas of AI consulting, prompt engineering, and software development at regular intervals. The only mandatory information for receiving the newsletter is your email address. Any additional information is voluntary and serves the purpose of personalized communication. We use the so-called double opt-in procedure for sending the newsletter. This means we will only send you the newsletter after you have expressly confirmed your wish to receive it by clicking a confirmation link.

By activating the confirmation link, you consent to the use of your personal data pursuant to Art. 6 Abs. 1 lit. a GDPR. When registering for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any misuse of your email address at a later time. The data collected during newsletter registration is used exclusively for the promotional distribution of the newsletter. You may unsubscribe from the newsletter at any time via the link provided in each newsletter edition or by sending a message to hello@createrr.studio. After you unsubscribe, your email address will be promptly removed from our newsletter distribution list, unless you have expressly consented to further use of your data or we have reserved a further use of data that is permitted by law and about which we inform you in this policy.

Sending the Email Newsletter to Existing Customers

If you have provided us with your email address in connection with the use of services, we reserve the right to regularly send you information about comparable services from our portfolio via email. No separate consent is required for this pursuant to § 7 Abs. 3 UWG. This data processing is based on our legitimate interest in personalized direct advertising pursuant to Art. 6 Abs. 1 lit. f GDPR. If you have objected to the use of your email address for this purpose from the outset, we will not send any such emails. You have the right at any time to object to the use of your email address for the aforementioned promotional purposes with effect for the future by notifying the controller mentioned above. Only the transmission costs at basic rates will apply for the objection. Upon receipt of your objection, the promotional use of your email address will be discontinued immediately.

Newsletter Distribution via systeme.io

Our email newsletter is distributed through the following service provider: ITACWT Ltd., 3 Cruise Park Rise, Tyrrelstown, Dublin, D15 XR58, Ireland. Based on our legitimate interest in effective and user-friendly newsletter marketing, we transmit the data you provided during newsletter registration to this service provider pursuant to Art. 6 Abs. 1 lit. f GDPR, so that the service provider can carry out the newsletter distribution on our behalf. If you grant your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR, the service provider will additionally perform statistical success measurement of newsletter campaigns. This involves the use of web beacons or tracking pixels in the sent emails, which can measure open rates and interaction behavior with newsletter content. Device information such as access time, IP address, browser type, and operating system is also collected and analyzed but not linked to other data sets. You may revoke your consent to newsletter tracking at any time with effect for the future. We have entered into a data processing agreement with the service provider that ensures the protection of our users' data and prevents unauthorized disclosure to third parties.

7) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, an analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which allows us to analyze user behavior on our website. When you visit our website, Google Analytics 4 places cookies on your device by default that collect certain usage information. This information also includes your IP address, which is, however, truncated by Google by removing the last digits, so that a direct association with your person is excluded. The collected information is transmitted to and processed on Google servers. In the course of this, data may also be transferred to servers of Google LLC in the United States. Google processes the collected information on our behalf to evaluate your usage behavior on our website, to compile summary reports on website activity, and to provide us with further analyses related to the use of our website and the internet. The truncated IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Data collected within the scope of Google Analytics 4 is retained for a period of two months and then deleted. All of the aforementioned processing operations, in particular the storage of cookies on your device, only take place if you have given us your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be activated during your visit to our website. You may revoke any consent given at any time with effect for the future. Please use the cookie consent tool provided on our website for this purpose. We have entered into a data processing agreement with Google that ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.

Demographic Characteristics

Google Analytics 4 has a special function for capturing demographic characteristics and can generate statistics based on these that allow conclusions about the age, gender, and areas of interest of website visitors. This is achieved through the analysis of advertising information and data from third-party providers. In this way, target groups for marketing measures can be determined. However, the collected data cannot be attributed to any specific person and is deleted after a retention period of two months.

Google Signals

In addition to Google Analytics 4, Google Signals may be used on this website to enable cross-device analysis. If you have activated personalized ads in your Google account and linked your devices to that account, Google may – subject to your consent to the use of Google Analytics pursuant to Art. 6 Abs. 1 lit. a GDPR – analyze your usage behavior across devices and derive cross-device conversion models, among other things. We ourselves do not receive any personal data from Google, only statistical evaluations. You can prevent cross-device analysis by deactivating the “Personalized Advertising” function in your Google account.

UserIDs

As a further addition to Google Analytics 4, the “UserIDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6 Abs. 1 lit. a GDPR, have created a user account on this website, and log in with this account on different devices, your activities including conversions can be analyzed across devices. For the transfer of data to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

Google Tag Manager

We use Google Tag Manager on this website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager provides a technical infrastructure that allows various web applications – including tracking and analytics services – to be consolidated, configured, and linked to specific conditions. Google Tag Manager itself does not store any data on user devices and does not read any data from them. Independent data analysis is also not performed by the service. However, when a page is accessed, your IP address is transmitted to Google and may be stored there. A transfer to servers of Google LLC in the USA cannot be excluded. This processing only takes place if you have given us your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR. Without such consent, Google Tag Manager will not be used during your visit. You may revoke any consent given at any time with effect for the future by deactivating this service via the cookie consent tool provided on our website. We have entered into a data processing agreement with the provider that ensures the protection of our visitors' data and prevents unauthorized disclosure to third parties. For the transfer of data to the USA, the provider has joined the EU-US Data Privacy Framework.

8) Retargeting, Remarketing and Conversion Measurement

Meta Pixel

As part of our website, we use the “Meta Pixel” service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. When a user reaches our website through an advertisement we placed on Facebook and/or Instagram, Meta Pixel appends a specific parameter to the URL of our landing page. Following the redirect, this URL parameter is stored in the user's browser via a cookie set by our landing page. This allows Meta to identify visitors to our website as a target audience for displaying advertisements. Accordingly, we use this service to display the Facebook and/or Instagram ads we place only to those users who have shown an interest in our offerings or who exhibit certain characteristics (so-called “Custom Audiences”). Additionally, Meta Pixel can track whether users were redirected to our website after clicking on an advertisement and what actions they took there (so-called “Conversion Tracking”). The collected data is not personally identifiable to us and does not allow conclusions about the identity of individual users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes. All of the aforementioned processing operations, in particular the storage of cookies for collecting information on your device, only take place if you have given us your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR. You may revoke any consent given at any time with effect for the future by deactivating this service via the cookie consent tool provided on our website. We have entered into a data processing agreement with the provider that ensures the protection of our visitors' data and prevents unauthorized disclosure to third parties. The information generated by Meta is usually transferred to and stored on a Meta server; this may also include a transfer to servers of Meta Platforms Inc. in the United States. For the transfer of data to the USA, the provider has joined the EU-US Data Privacy Framework.

Google Ads Conversion Tracking

Our website uses the Google Ads advertising program and the associated conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use Google Ads to draw attention to our services using advertising materials on external websites. Based on campaign data, we can determine how effective our individual advertising measures are. The conversion tracking cookie is placed when a user clicks on a Google Ads advertisement. These cookies generally expire after 30 days and are not intended to personally identify you. If the user visits certain pages of our website and the cookie has not yet expired, both Google and we can recognize that the user clicked on the advertisement and was redirected to the corresponding page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of different Google Ads customers. The information obtained through conversion cookies is used to create conversion statistics for Google Ads customers who use conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, no information is provided that would allow personal identification of individual users. The use of Google Ads may also result in the transfer of personal data to servers of Google LLC in the USA. All of the aforementioned processing operations only take place if you have given us your express consent pursuant to Art. 6 Abs. 1 lit. a GDPR. You may revoke any consent given at any time via the cookie consent tool. Furthermore, you can permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=en. For the transfer of data to the USA, the provider has joined the EU-US Data Privacy Framework.

9) Cookie Consent Tool

We use a so-called cookie consent tool on this website to obtain effective consent for cookies and cookie-based applications that require consent. When the page is accessed, users are presented with an interactive user interface through which consent can be granted for specific cookies and/or cookie-based services by checking the corresponding boxes. By using this tool, it is ensured that cookies and services requiring consent are only loaded once the respective user has given their consent. The tool only sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed. If, in individual cases, personal data is nevertheless processed (such as the IP address) in order to store, assign, or log cookie settings, this is done pursuant to Art. 6 Abs. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website. An additional legal basis for the processing is Art. 6 Abs. 1 lit. c GDPR. As controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent. Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our visitors' data and prevents unauthorized disclosure to third parties. Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.

10) Your Rights as a Data Subject

Applicable data protection law grants you comprehensive rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data. In particular, you have the following rights:

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to notification pursuant to Art. 19 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to withdraw consent pursuant to Art. 7 Abs. 3 GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

Right to Object

If we process your personal data on the basis of our overriding legitimate interest within the framework of a balancing of interests, you have the right to object at any time to such processing with effect for the future on grounds relating to your particular situation. If you exercise your right to object, we will cease processing the data concerned. However, further processing may remain possible if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims. If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your data for such advertising purposes. If you exercise your right to object, we will cease processing the data concerned for direct marketing purposes.

11) Retention Period for Personal Data

The period for which personal data is stored depends on the respective legal basis, the processing purpose, and – where applicable – additionally on the respective statutory retention period. When personal data is processed on the basis of express consent pursuant to Art. 6 Abs. 1 lit. a GDPR, such data is stored until you withdraw your consent. For data processed within the scope of legal or quasi-legal relationships on the basis of Art. 6 Abs. 1 lit. b GDPR for which statutory retention periods apply, deletion occurs routinely after the expiration of such periods, provided the data is no longer required for the performance or initiation of a contract and there is no legitimate interest on our part in continued storage. When personal data is processed on the basis of Art. 6 Abs. 1 lit. f GDPR, such data is stored until you exercise your right to object pursuant to Art. 21 Abs. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. When personal data is processed for direct marketing purposes on the basis of Art. 6 Abs. 1 lit. f GDPR, such data is stored until you exercise your right to object pursuant to Art. 21 Abs. 2 GDPR. Unless otherwise indicated in the other information in this policy regarding specific processing situations, stored personal data is deleted once it is no longer needed for the purposes for which it was collected or otherwise processed.