Privacy.

1. Controller

The controller responsible for processing personal data on this website is:

Fotini Tzani
trading under the business name Sirens Studios
Donaustr. 112
12043 Berlin
Germany

Email: hello@sirens-studios.com

2. Hosting with STRATO

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. When the website is accessed, STRATO processes technically necessary connection and log data. This may include, in particular, the IP address, date and time of access, the file or URL accessed, the previously visited page (referrer), browser type, operating system and transmission status.

The processing serves to provide the website securely and reliably, analyse errors and protect against attacks and misuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest lies in the secure and functional operation of the website.

According to STRATO, the IP addresses of website visitors are stored for a maximum of seven days in order to detect and prevent attacks. They are retained for longer only where this is necessary to investigate a specific security incident or to comply with legal obligations.

A data processing agreement pursuant to Article 28 GDPR is in place with STRATO.

Processing generally takes place within the European Union or the European Economic Area. Where STRATO uses further processors in third countries in individual cases, transfers take place in accordance with Articles 44 et seq. GDPR and on the basis of the guarantees required in each case.

3. SSL/TLS encryption

This website uses SSL/TLS encryption to protect data in transit. An encrypted connection can be recognised by the website address beginning with “https://”.

4. Contact form

When you submit an enquiry via the contact form, the information you enter is processed. The required fields are name, email address and message. Company and project type may be provided voluntarily.

Providing the required fields is not prescribed by law or contract. However, it is necessary so that the enquiry can be assigned, processed and answered. Without this information, the enquiry cannot be processed via the contact form.

A technically generated timestamp and a honeypot field that is invisible to visitors are used to detect and prevent automated spam and abusive enquiries. The legal basis for this is Article 6(1)(f) GDPR. The legitimate interest lies in protecting the contact form and server infrastructure from misuse.

The form endpoint does not store the content entered in its own database and does not set its own cookies or sessions. The enquiry is transmitted via STRATO’s server infrastructure to the mailbox hello@sirens-studios.com. The IP address may be included in the general server logs in accordance with the hosting section above. The form application does not add the IP address separately to the message.

Where an enquiry is aimed at entering into or performing a contract, processing is based on Article 6(1)(b) GDPR. Other business enquiries are processed on the basis of Article 6(1)(f) GDPR. The legitimate interest lies in appropriate communication and the handling of incoming enquiries.

General enquiries that do not result in a contractual or client relationship are deleted no later than six months after the communication has concluded. Where an enquiry results in a contractual or client relationship, the relevant data is stored for as long as is necessary for its performance and administration and to comply with statutory retention obligations. It is then deleted.

5. Contact by email

When you contact us by email, the information you provide is processed in order to handle the enquiry. The legal bases and deletion periods correspond to the provisions described in the section on the contact form. The business mailbox is operated by STRATO.

6. Cookies, browser storage and audience measurement

This website may use optional visit statistics provided by Metricool. The provider is METRICOOL SOFTWARE, S.L., Madrid, Spain. The statistics are loaded only after explicit consent. Without consent, no Metricool script is loaded and no data is transmitted to Metricool.

Where consent has been given, Metricool receives the page address accessed and the IP address. What is measured is how many visits there are and which pages are viewed. According to the provider, the counter works without tracking cookies. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.

The choice made (allow or decline) is stored in the browser storage of the device. This entry is used solely to remember the decision on subsequent visits and is not transmitted to third parties.

Consent can be withdrawn at any time with future effect via the “Statistics settings” link in the footer.

Further information from the provider: https://metricool.com/privacy-policy/ and notes on connecting a website.

7. Fonts and media

The website uses system fonts and does not load fonts from Google Fonts or other external font services. Images, videos and audio files are served locally from the web server. YouTube, Vimeo or social media players that transmit data to external platforms as soon as the page is loaded are not embedded.

8. Rights of data subjects

Subject to the statutory requirements, you have the right to obtain information about the personal data stored about you, to have inaccurate data rectified, and to request erasure, restriction of processing and data portability.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for the controller’s registered office is the Berlin Commissioner for Data Protection and Freedom of Information: https://www.datenschutz-berlin.de

9. Right to object under Article 21 GDPR

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

Following an objection, the personal data concerned will no longer be processed on this basis unless there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

The objection may be submitted informally by email to hello@sirens-studios.com.

10. Updates to this Privacy Policy

This Privacy Policy will be amended if the functions, service providers or legal requirements used change. The version published on this website at the relevant time applies.