Privacy
This Privacy Policy explains which personal data we process when you visit and use this website, for what purposes such processing takes place, the legal bases on which it is carried out, and the rights available to you under applicable data protection law.
Last updated: 23 August 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
studionel GmbH
Lilienthalstr. 5c
12529 Schönefeld
Germany
Studio:
Schlesische Str. 38
10997 Berlin
Germany
Phone: +49 (0) 30 91546677
Email: info@studionel.com
Represented by:
Nico Leist, Managing Director
Further contact and company registration details can be found in our Legal Notice.
2. General Information on Data Processing
We process personal data only to the extent necessary to provide and secure this website, to respond to enquiries and applications, to take pre-contractual or contractual measures, or to comply with legal obligations.
Any processing beyond this scope takes place only where an appropriate legal basis exists.
3. Legal Bases
Depending on the type and purpose of the processing, we rely in particular on the following legal bases:
- Art. 6(1)(a) GDPR, where you have given us your consent;
- Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract;
- Art. 6(1)(c) GDPR, where processing is necessary for compliance with a legal obligation;
- Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests or those of a third party and such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
Where we rely on Art. 6(1)(f) GDPR, our legitimate interests include, in particular, ensuring the secure, stable and technically reliable operation of our website and the efficient handling of business enquiries.
4. Hosting and Website Delivery via Lovable
This website is published and delivered via the Lovable platform. The provider is Lovable Labs Incorporated, USA.
When you access our website, technically necessary connection and access data may be processed. This may include, in particular:
- IP address;
- date and time of access;
- page or URL accessed;
- browser type and version;
- operating system and device information;
- referrer URL;
- technical error and diagnostic data.
The processing of this data is necessary to deliver the website to your device and to ensure the security, stability and functionality of the technical infrastructure.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and high-performance provision of our website.
The optional Lovable Visitor Analytics feature is disabled on this website. We do not use Lovable for visitor analytics, audience measurement or comparable analysis of user behaviour.
According to Lovable, certain technical usage, service and log data may be processed for its own purposes, in particular for security, billing, error analysis and improvement of the platform. Lovable states that certain log data may be retained for up to 90 days unless longer retention is required for legal or security-related reasons.
As Lovable is a provider based in the United States, processing of personal data outside the European Economic Area cannot be excluded. For transfers from the European Economic Area, Lovable states that it relies, in particular, on the European Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.
Further information on data processing by Lovable is available at:
5. Server Log Data
When you access our website, server and connection data are generated for technical reasons. This may include, in particular, your IP address, the time of access, the URL accessed, browser and device information, and technical status or error data.
This processing is carried out for the technical provision of the website, the detection and prevention of attacks, error analysis, and the secure operation of the website.
The legal basis is Art. 6(1)(f) GDPR.
Where data is stored by our hosting provider Lovable, the applicable retention periods are determined by Lovable. Lovable currently states that certain log data may be stored for up to 90 days.
We do not combine this data with other data sets.
6. Content Management System and Image CDN: Sanity
We use Sanity to manage and deliver editorial content.
The provider is:
Sanity US Inc.
351 California Street, Suite 650
San Francisco, CA 94104
USA
We use Sanity to manage, in particular, project content, job vacancies, texts and media used on our website.
Images and other media may be loaded directly into your browser via the Sanity Asset CDN at cdn.sanity.io. For this purpose, your browser establishes a connection to servers and infrastructure providers used by Sanity.
The following data may be processed in this context:
- IP address;
- time of access;
- requested file or URL;
- browser and device information;
- technical connection data.
This processing is carried out in order to provide our website content quickly, reliably and efficiently.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the high-performance and stable delivery of our digital content.
Where Sanity processes personal data on our behalf, such processing is carried out on the basis of contractual data processing arrangements pursuant to Art. 28 GDPR.
For transfers of personal data to the United States or other third countries, Sanity relies, in particular, on the European Commission’s Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.
Further information is available at:
https://www.sanity.io/legal/privacy
7. Locally Hosted Fonts
This website uses the fonts Fraunces, Newsreader and Inter Tight.
The font files are hosted locally or delivered via the website infrastructure used by us. No connection is established with Google Fonts or any comparable external font provider when the fonts are loaded.
Your IP address is therefore not transmitted to Google or other external font providers as a result of the fonts used on this website.
8. Local Storage and Language Preference
Our website may store your selected language preference, in particular German or English, in your browser’s local storage (localStorage).
The stored value is used exclusively to retain the language selected by you when you continue browsing the website or return to it.
The storage is based on Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as it is necessary to provide the website in the language version expressly requested by you.
The stored value does not contain directly identifying information and is not used for analytics, tracking or advertising purposes.
The language preference generally remains stored in your browser’s local storage until you change the setting, delete the website data, or otherwise clear your browser’s local storage.
9. Cookies, Analytics and Tracking
We currently use no analytics, tracking or marketing services on this website.
In particular, we do not use Lovable Visitor Analytics or comparable tracking technologies for our own analytics or advertising purposes.
Where technically necessary information is stored on or accessed from your device, this takes place only to the extent required to provide a function expressly requested by you.
At present, this applies in particular to the storage of your selected language in your browser’s local storage.
Based on the website’s current technical configuration, no consent banner for analytics or marketing technologies is therefore required.
Should we introduce technologies in the future that require consent, we will use them only after the relevant consent has been obtained and will update this Privacy Policy accordingly.
10. Contact
If you contact us by email, telephone or via our contact form, we process the information you provide in order to handle your enquiry.
This may include, in particular:
- name;
- email address;
- telephone number, where provided;
- company or organisation, where provided;
- content of your message;
- any other information voluntarily provided by you.
If your enquiry relates to entering into or performing a contract, the processing is based on Art. 6(1)(b) GDPR.
For other business or general enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the appropriate and efficient handling of incoming enquiries and business communications.
Mandatory fields in a contact form are required where we need the relevant information in order to process and respond to your enquiry. Any additional information is provided voluntarily.
Your data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations or other legitimate reasons require further storage.
11. Spam Protection for the Contact Form
To protect our contact form against automated spam submissions, we use a so-called honeypot field.
This is a form field that is not visible to regular website visitors and can be used to identify automated submissions.
We do not use an external CAPTCHA service for this purpose. In particular, the honeypot protection does not result in the transfer of personal data to Google reCAPTCHA or comparable external CAPTCHA providers.
12. Contact Form Delivery via Resend
We use Resend for the technical delivery of messages submitted through our contact form.
The provider is:
Plus Five Five, Inc.
2261 Market Street #5039
San Francisco, CA 94114
USA
When you submit our contact form, the data entered by you is processed through Resend’s technical infrastructure and transmitted to our email inbox.
This may include, in particular:
- name;
- email address;
- telephone number, where provided;
- content of your message;
- technical delivery information.
The processing is necessary in order to transmit your message to us reliably.
For enquiries relating to a contract, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, the legal basis is Art. 6(1)(f) GDPR.
Resend processes personal data in accordance with its contractual arrangements as a processor. Resend’s Data Processing Addendum forms part of its contractual framework and contains provisions governing data processing and international data transfers.
According to Resend, personal data may be processed in the United States. For transfers of personal data from the European Economic Area, Resend relies, in particular, on the European Commission’s Standard Contractual Clauses pursuant to Art. 46 GDPR.
Further information is available at:
https://resend.com/legal/privacy-policy
13. Email Communications
If you communicate with us directly by email, or if a message from our contact form is delivered to our inbox, we process the personal data contained in the message as part of our email communications.
IT and email service providers used by us may process personal data in connection with the technical provision of our email communications.
The legal basis depends on the content of the communication and will generally be Art. 6(1)(b) GDPR for contract-related enquiries or Art. 6(1)(f) GDPR for other business communications.
Emails are deleted once further storage is no longer required for handling or documenting the matter and no statutory retention obligations apply.
Business correspondence may, in particular, be subject to commercial or tax-related retention obligations.
14. Applications
If you apply for an advertised position or submit an unsolicited application, we process the personal data provided as part of your application solely for the purpose of carrying out the recruitment process.
This may include, in particular:
- name and contact details;
- cover letter;
- CV;
- qualifications;
- certificates and references;
- work samples or portfolio;
- information on previous professional experience;
- any other application documents provided by you.
The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 88 GDPR.
If an employment relationship is established, the application data may be processed further for the purposes of the employment relationship.
If no employment relationship is established, we generally delete application documents no later than six months after completion of the recruitment process, unless particular circumstances justify longer retention.
Any longer storage, for example for inclusion in an applicant or talent pool, takes place only with your express consent. You may withdraw such consent at any time with effect for the future.
15. Recipients of Personal Data
Personal data is disclosed only where this is necessary for the relevant processing purpose, where we are legally required to do so, or where another legal basis permits the disclosure.
Possible recipients or categories of recipients include, in particular:
- hosting and infrastructure service providers;
- content management and content delivery service providers;
- email and communications service providers;
- IT service providers;
- processors engaged by us;
- authorities or other public bodies, where disclosure is required by law.
Where service providers process personal data exclusively on our behalf, they are engaged in accordance with the requirements of the GDPR, insofar as a processor relationship exists.
16. Transfers to Third Countries
Some of the service providers used by us are based outside the European Economic Area or themselves use service providers located in third countries.
Personal data is transferred to a third country only in compliance with the requirements of Art. 44 et seq. GDPR.
Relevant safeguards may include, in particular:
- an adequacy decision by the European Commission pursuant to Art. 45 GDPR;
- appropriate safeguards pursuant to Art. 46 GDPR, in particular the European Commission’s Standard Contractual Clauses;
- in legally defined exceptional cases, the conditions set out in Art. 49 GDPR.
For the US-based service providers Lovable, Sanity and Resend used in connection with this website, personal data may be transferred to the United States. The respective providers state that they rely, in particular, on the EU Standard Contractual Clauses for relevant transfers.
17. Retention Periods
We generally store personal data only for as long as is necessary to fulfil the respective processing purpose.
The data is subsequently deleted unless statutory retention periods, legal obligations or legitimate reasons require continued storage.
Statutory retention obligations may arise, in particular, from commercial and tax law.
Where specific retention periods apply to individual processing activities, these are stated in the relevant sections of this Privacy Policy.
18. Your Rights
Subject to the applicable legal requirements, you have, in particular, the following rights:
- the right of access to personal data processed by us pursuant to Art. 15 GDPR;
- the right to rectification of inaccurate or incomplete data pursuant to Art. 16 GDPR;
- the right to erasure of your personal data pursuant to Art. 17 GDPR;
- the right to restriction of processing pursuant to Art. 18 GDPR;
- the right to data portability pursuant to Art. 20 GDPR;
- the right to object to certain processing activities pursuant to Art. 21 GDPR;
- the right to withdraw consent pursuant to Art. 7(3) GDPR.
To exercise your rights, you may contact us informally at:
info@studionel.com
19. Right to Object
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, pursuant to Art. 21 GDPR, to object at any time to such processing on grounds relating to your particular situation.
We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
20. Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The lawfulness of processing carried out on the basis of your consent before its withdrawal remains unaffected.
21. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority concerning the processing of your personal data.
The supervisory authority particularly competent for studionel GmbH is:
The State Commissioner for Data Protection and the Right of Access to Records of Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
Phone: +49 33203 356-0
Email: Poststelle@LDA.brandenburg.de
https://www.lda.brandenburg.de
Irrespective of this, you may also contact any other supervisory authority competent under Art. 77 GDPR.
22. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.
23. Updates to this Privacy Policy
We may amend this Privacy Policy if the technical design of our website, the services used by us, or the applicable legal or regulatory requirements change.
The version currently published on this website shall apply.