Privacy – BORR.studio

Principle

Privacy doesn’t begin with lengthy statements. It begins with not collecting data unnecessarily in the first place.

BORR.studio processes personal data only insofar as this is necessary to provide this website, to handle enquiries, or to comply with legal requirements.

We do not create visitor profiles, do not analyse interests, and do not track people across this website. We care about projects, not movement profiles.

Controller

BORR.studio
Thorsten Borr
Händelstraße 96
14513 Teltow
Germany

datenschutz [at] borr.studio

Hosting

This website is hosted by STRATO.

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

Server log files

When this website is accessed, the hosting provider processes technical data in server log files. These may include in particular:

IP address
date and time of access
page or file accessed
browser type and version
operating system
referrer URL

This processing serves the technical provision, stability and security of the website. The legal basis is Art. 6(1)(f) GDPR.

Visitor log files are stored by STRATO as part of the web hosting for a maximum of seven days.

Contact form

When the contact form is used, we process the data entered there to handle the enquiry. This includes:

salutation
title (optional)
first name
last name
company (optional)
email address
subject
message
any uploaded files
the language used for the enquiry (in order to communicate in the appropriate language)

The data is processed to handle the enquiry, for communication, for project preparation and, where applicable, to prepare quotes. The legal basis is Art. 6(1)(b) GDPR where the enquiry concerns contractual or pre-contractual communication. In all other cases, processing is based on Art. 6(1)(f) GDPR.

Documentation of privacy confirmation

When the contact form is submitted, the fact that the privacy notice was confirmed is documented. Only the confirmation itself and the time of submission are stored.

No tracking profiles are created for this purpose and no analytics or marketing data is collected.

File uploads

Files can optionally be uploaded via the contact form. Uploaded files are used solely to handle the respective enquiry.

Only certain file types are permitted. File size is limited. Files are not made publicly available and are not analysed for advertising or analytics purposes.

Uploaded files are initially stored exclusively in a technically generated, non-public directory. Only technically generated directory identifiers are used for temporary storage on the web server. Personal details such as names, email addresses or project names are not used as directory names.

After successful transfer to the internal project storage, uploaded files are automatically removed from the web server. This usually happens within a few minutes of the enquiry arriving.

Data is only shared with third parties if this is necessary to handle the enquiry, if there is a legal obligation, or if explicit consent has been given.

Files that are no longer needed are deleted after 60 days at the latest, unless further processing within a project is required.

Email communication

If you contact us by email, we store the transmitted data to handle the enquiry. This includes in particular the email address, the content of the message and technical transmission information.

Contacting us by email is voluntary. The data is processed to handle the enquiry and for communication.

Storage period

Personal data is stored only for as long as necessary to handle the enquiry, to carry out a project, or to comply with statutory retention obligations.

Data from pure contact enquiries is deleted as soon as it is no longer required for processing and no statutory retention obligations apply. Uploaded files are deleted after 60 days at the latest, unless further processing within a project is required.

No analytics. No tracking.

This website deliberately uses no web analytics services, no marketing cookies, no tracking pixels and no embedded social media feeds.

No Google Fonts, no Google Analytics, no Meta Pixel and no comparable tracking services are used. Such services are not necessary to operate this website.

This is not a technical gap but a deliberate decision: we do not want to spy on visitors, profile them, or manipulate them based on their behaviour. A website may simply inform and make contact possible. That is exactly what this website does.

External links

This website contains external links to BORR.studio profiles on LinkedIn, Instagram and YouTube.

Merely accessing this website does not transmit any data to these platforms. The relevant platform is only opened when an external link is actively clicked. The respective providers are responsible for any data processing there.

BORR.studio does not embed any social media feeds, like buttons, share buttons, tracking pixels or comparable external social media functions on this website.

Your rights

Subject to the applicable legal provisions, data subjects have in particular the following rights:

right of access
right to rectification
right to erasure
right to restriction of processing
right to data portability
right to object to processing
right to withdraw consent

To exercise these rights, a message to datenschutz [at] borr.studio.

Right to lodge a complaint

Data subjects have the right to lodge a complaint with a data protection supervisory authority if they consider that the processing of their personal data infringes data protection law.

The competent authority is in particular the State Commissioner for Data Protection and the Right to Inspect Files of Brandenburg (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

Changes

This privacy policy will be updated if technical, legal or organisational changes arise.