Privacy Policy

1. Controller

The controller responsible for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR/DSGVO) and other national data-protection laws, is:

dandesigner e.K., Inhaber Daniel Anders
Lüdinghauser Weg 22, 13583 Berlin-Spandau, Germany
Email: support@dandesigner.com
Phone: +49 175 4133702

2. Overview of processing

This website is a static site with no server-side backend. It processes personal data in three situations: (a) when you submit the contact/enquiry form, (b) when you place an order through the cart and checkout, and (c) when you consent to analytics cookies. Nothing on this site processes payment-card data — no card fields exist anywhere on the site.

3. Hosting

This website is hosted on shared web hosting within the European Union, delivered as static files with no server-side application or database. Standard server log data (IP address, timestamp, requested resource, browser user agent) is processed automatically by the hosting provider for the purpose of delivering the site securely and reliably. This is a legitimate interest under Art. 6(1)(f) GDPR (secure, reliable operation of the site).

4. Fonts

This site uses the Instrument Serif, Archivo and JetBrains Mono typefaces, all served as self-hosted files from our own domain. No request is ever made to Google Fonts or any other third-party font service, so no font-related data is transmitted to a third party.

5. Contact and enquiry form

When you submit the form at /contact/, we process the data you enter — name, email, optional phone and company, service of interest, optional budget and timeline, and your message — to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries about our services) where no contract is in prospect. Submitted data also includes technical anti-spam fields (a hidden honeypot field and a submission-time check) that contain no personal data about you beyond confirming the submission was made by a person, not a bot. We retain enquiry data for as long as needed to handle your enquiry and for a reasonable follow-up period, and delete it once it is no longer needed, subject to any statutory retention obligation.

6. Orders (cart and checkout)

When you add a package to your cart, the contents of your cart (service, tier, quantity, price) are stored only in your browser's localStorage, under the key dd.cart.v1 — this data never leaves your device until you proceed to checkout. This local storage is strictly necessary for the cart to function and does not require consent under § 25 TDDDG (it falls under the necessary-function exemption).

When you complete checkout, we process the billing and contact details you provide (name, email, phone, company, VAT ID if applicable, billing address, chosen payment method, and any project brief you enter) to confirm your order, prepare your invoice and project agreement, and deliver the service you ordered. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Order data is retained for as long as required to fulfil the order and to satisfy statutory commercial and tax record-keeping obligations under German law (typically six to ten years for invoice-relevant records), after which it is deleted.

If you tick the marketing opt-in checkbox at checkout ("Send me occasional studio updates and case studies"), we also process your email address to send you occasional studio updates and case studies, no more than once a month. The legal basis is Art. 6(1)(a) GDPR (your consent) together with § 7(2) No. 2 and (3) of the German Act Against Unfair Competition (UWG). This box is unticked by default and entirely optional — declining it does not affect your order in any way. You can withdraw this consent at any time using the unsubscribe link in any such email, or by emailing support@dandesigner.com; we stop sending these messages as soon as your withdrawal is processed, and we retain the fact of your unsubscribe only to honour it.

7. Analytics — Google Analytics 4 (consent-gated)

We use Google Analytics 4 (provided by Google Ireland Limited) to understand how visitors use this site, but only if you actively consent via the cookie banner described in the Cookie Policy. No Google Analytics script is present in the page before you consent. If you accept analytics cookies, the legal basis is Art. 6(1)(a) GDPR (consent) and § 25(1) TDDDG. You can withdraw your consent at any time via "Change cookie settings" in the footer, which stops future data collection. IP addresses are anonymised/truncated by Google Analytics 4's default configuration where applicable. Data may be transferred to Google servers outside the EU/EEA; where this occurs, it relies on the European Commission's Standard Contractual Clauses as the transfer safeguard.

8. Cookies and local storage — summary

See the Cookie Policy for the full table of cookies and localStorage keys, their purposes, and their durations. In summary: your cart is stored locally and is strictly necessary; your cookie-consent choice is stored locally so we don't ask twice; Google Analytics 4 is the only non-essential storage in scope, and it loads only after explicit consent.

9. Recipients of data

We do not sell personal data. Data may be shared with: our email provider (to receive form submissions and enquiries), our hosting provider (to serve the website), and, only if you accept analytics cookies, Google Ireland Limited (Google Analytics 4). We do not use any advertising or marketing pixels. If a form endpoint is connected via a third-party form processor (e.g. Formspree, Web3Forms, or similar), that processor receives the data you submit solely to relay it to us, under its own data-processing terms.

10. Your rights

Under the GDPR, you have the right to: access the personal data we hold about you (Art. 15); request correction of inaccurate data (Art. 16); request erasure (Art. 17); request restriction of processing (Art. 18); receive your data in a portable format (Art. 20); and object to processing based on legitimate interest (Art. 21). To exercise any of these rights, contact support@dandesigner.com. You also have the right to lodge a complaint with a supervisory authority. The competent authority for dandesigner e.K. is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219, 10969 Berlin, Germany

11. Changes to this policy

We may update this policy if our processing changes. The "last updated" date at the top of this page reflects the current version.