This privacy policy explains what personal data we collect when you visit this website, why wecollect it, and what rights you have. We take the protection of your personal data seriously and process it only in accordance with the EU General Data Protection Regulation (GDPR) and applicablenational data protection law.
The controller responsible for data processing on this website is: Claudiu Dulau Graphic Mastiff Freischützstraße 110 81927 München, Germany Email: info@graphicmastiff.com Phone: +49 151 290 253 36
This website is hosted by an external service provider (the "host"). Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact details, metadata, and any other data generated through a website and its use.
Our host is: Bluehost / Newfold Digital, LLC, 5335 Gate Parkway, Jacksonville, FL 32256, USA Server location: Arizona, United States of America
The host is used for the purpose of fulfilling our (pre-)contractual obligations to prospective andexisting clients and for the secure, fast, and reliable provision of our online offering by aprofessional provider. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in the reliablepresentation of our website).
International data transfer
Because our host stores and processes data on servers located in the United States, your data is transferred to a third country outside the EU/EEA. Our host's parent company, Newfold Digital, is not certified under the EU–U.S. Data Privacy Framework. Instead, transfers of personal data to the United States are safeguarded by the European Commission's Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2)(c) GDPR (Commission Implementing Decision (EU) 2021/914 of 4 June 2021).
We rely on the host's Data Processing Addendum (DPA) pursuant to Art. 28 GDPR, which incorporatesthese Standard Contractual Clauses and obliges the host to protect our visitors' data and not to passit on to unauthorised third parties. A copy of the DPA, including the SCCs, is available from theprovider (Newfold Digital, Inc., Data Protection Officer, privacy@newfold.com).
The host automatically collects and stores information in server log files, which your browser transmits to us automatically. These are:
• browser type and version
• operating system used
• referrer URL (the previously visited page)
• host name of the accessing device
• time of the server request
• IP address
This data is not merged with other data sources. It is collected on the basis of Art. 6 (1)(f)GDPR; we have a legitimate interest in the technically error-free presentation and optimisation ofour website, which requires server log files to be recorded. This data is retained only for as longas necessary for these purposes and then deleted or anonymised.
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLSencryption. You can recognise an encrypted connection by the "https://" prefix and the lock symbol inyour browser's address bar. When encryption is active, data you transmit to us cannot be read bythird parties.
If you contact us via the contact form or by email, the data you provide (such as your name, email address, and the content of your message) is processed for the purpose of handling your enquiry andany follow-up questions.
• Legal basis: where your enquiry relates to entering into or performing a contract, processingis based on Art. 6 (1)(b) GDPR. In all other cases, processing is based on our legitimate interest in responding to enquiries directed to us (Art. 6 (1)(f) GDPR) or, where requested, on your consent (Art. 6 (1)(a) GDPR), which you may withdraw at any time.
• Recipients / processing: contact form submissions are transmitted to us by email via our host'smail service and stored in our email inbox. No separate third-party form processor is used.
• Retention: we retain this data until your request has been fully dealt with, unless statutory retention periods (e.g. commercial or tax law) require longer storage, after which it is deleted.
This website uses fonts that are hosted locally on our own server. No connection is made to theservers of any third-party font provider (such as Google Fonts) when the fonts are loaded, and nodata about you is transmitted to a third party for this purpose.
To provide interactive and animated elements, this website loads JavaScript libraries and a 3D modelfrom external content delivery networks. When these resources load, your IP address is transmitted to the respective provider, because it is technically required to deliver the files toyour browser. The providers may be located outside the EU/EEA.The resources loaded are:
• JavaScript animation and rendering libraries via Cloudflare (cdnjs), jsDelivr, and unpkg — providers may process data in the USA and other third countries.
• an animation library via Bunny.net (bunny.net d.o.o., Slovenia, EU).
• a 3D model file via GitHub (githubusercontent.com), GitHub Inc., USA.
• scripts, images, and assets via the Webflow CDN (cdn.prod.website-files.com), Webflow Inc., USA.
• Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in a functioning, visually consistent, and performant website.
• Third-country transfer: to the extent data is transferred to the USA, this is safeguarded by the providers' Data Privacy Framework certifications and/or Standard Contractual Clauses.
This website uses only technically necessary (essential) cookies / storage required for the siteto function and to be delivered securely. We do not use analytics, advertising, tracking, orsocial-media cookies, and we do not embed any advertising or tracking pixels (such as GoogleAnalytics or the Meta/Facebook pixel).Because we set no non-essential cookies, no consent banner is required. You can still control anddelete cookies at any time through your browser settings. For more detail, see our Cookie Policy.
Under the GDPR, you have the following rights regarding your personal data:
• Right of access (Art. 15) — to obtain confirmation of whether and what data we process about you.
• Right to rectification (Art. 16) — to have inaccurate data corrected.
• Right to erasure (Art. 17) — to have your data deleted, subject to legal retention obligations.
• Right to restriction of processing (Art. 18).
• Right to data portability (Art. 20).
• Right to object (Art. 21) — you may object at any time, on grounds relating to your particularsituation, to processing based on Art. 6 (1)(f).
• Right to withdraw consent (Art. 7 (3)) — where processing is based on your consent, you maywithdraw it at any time with effect for the future.
To exercise any of these rights, contact us at info@graphicmastiff.com.
You have the right to lodge a complaint with a data protection supervisory authority, in particularin the Member State of your habitual residence, place of work, or the place of the allegedinfringement.Our competent supervisory authority is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Germany Website: https://www.lda.bayern.de
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
We may update this privacy policy to reflect changes to our website or to legal requirements. Theversion published here applies. Please review it periodically.