Privacy Policy

The controller for the purposes of the EU General Data Protection Regulation (GDPR) and other data protection provisions is:

Simon Burger – The Story Architects
Schlacht 34a
85626 Glonn
+49 151 44500037
hey@story-architects.com
www.story-architects.com

Thank you for your interest in our website. The trust of all visitors and customers, the security of your data, and the protection of your privacy are of central importance to us. We therefore process your personal data in accordance with applicable data protection regulations and this Privacy Policy. Personal data is information that can be used to determine your identity, such as your real name, address, or telephone number.

If you view and use our site without registering or otherwise explicitly submitting information to us, we process the data transmitted to us with each request from your browser (see below “Log Data”). If you explicitly submit personal data to us, this is done solely for the purpose of the request or the respective order. Please note that data transmission over the internet can never be completely protected against third- party access.

Below, we would like to explain in more detail what data we process, when, and for what purpose. We will explain how our services work and how the protection of your personal data is ensured.

If we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a GDPR serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre- contractual measures.

If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not override those interests, then Art. 6 para. 1 lit. f GDPR serves as the legal basis for data processing.

The personal data of the data subject will be deleted as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by European or national laws or other regulations to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned regulations expires, unless there is a necessity for further storage of the data for the conclusion or fulfillment of a contract.

You have a right to free information about your stored personal data, and possibly a right to rectification, restriction of processing, or deletion of this data. You also have the right to data portability. Finally, you also have the right to complain about our processing of your personal data to the data protection supervisory authority.

We also inform you that you can object to the future processing of your personal data at any time in accordance with the legal provisions of Art. 21 GDPR. The objection can be made in particular against processing for direct marketing purposes.

For questions regarding the collection, processing, or use of your personal data, for information, for the correction, blocking, or deletion of data, as well as for the revocation of any given consents or for objection to a specific data use, please contact us using the following email address: hey@story-architects.com

The automatic collection and storage of log data by the internet service provider occurs because the processing of this data is technically necessary to display our website to you and to ensure stability and security. Log data includes the following information:

Date and time of each request; internet address (URL) that was requested; URL that the visitor previously visited; browser and language used; operating system and its interface used; IP address and hostname of the visitor; access status / http status code; amount of data transferred in each case.

This data is automatically transmitted to us and cannot be attributed to you with reasonable effort. The legal basis for processing this data is our legitimate interest according to Art. 6 para. 1 sentence 1 lit. f GDPR, as this data processing is necessary for the operation and display of the website. The data is deleted as soon as it is no longer required for the purpose of its collection. In the case of data collection for providing the website, this occurs when the respective session ends. The collection of data for providing the website and the storage of data in log files is absolutely necessary for the operation of the internet site. Consequently, the user has no right to object.

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device and store certain information for exchange with our system. The legal basis for processing this data is Art. 6 para. 1 sentence 1 lit. f GDPR. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing the browser (transient cookies). These include in particular session cookies. These store a unique identifier (session ID). This session ID allows different requests from your browser to be assigned to a common session. This allows your device to be recognized when you return to our website during a session. Session cookies are also deleted when you log out.

Other cookies remain on your device for a predetermined period and allow us to recognize your browser or device on your next visit (persistent cookies).

Please note that certain cookies are already set as soon as you enter our website. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or you can exclude the acceptance of cookies for certain cases, in particular third-party cookies, or generally. If you do not accept cookies, the functionality of our website may be limited for you.

For security reasons, our website uses SSL encryption (Secure Sockets Layer). This protects transmitted data and prevents it from being read by third parties. You can recognize successful encryption by the protocol designation in the browser's status bar changing from “http://” to “https://” and a closed padlock symbol being visible there.

We use the services of lima-city.de – lima-city is a project of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen for web hosting for our websites, and we have concluded a data processing agreement according to Art. 28 GDPR with lima-city.de.

Further information can be found in the data protection declaration of lima-city.de at lima-city.de/juristisches.

Legal Basis: The legal basis for the processing of this data is our legitimate interest in the operation and maintenance of the operational security of these websites according to Art. 6 Para. 1 Lit. f GDPR.

I use WhatsApp for easy and fast communication. If you use WhatsApp, WhatsApp is responsible for data processing. This is only relevant if you wish to communicate with me via this service. Please note that the security of the service depends on your account settings, and even with end-to-end encryption, the provider can detect that and when you communicate with me and may collect location data.

There are also alternative communication channels like email or phone to reach me. Further information on data processing by WhatsApp can be found at: whatsapp.com/privacy.

The use of WhatsApp is based on legitimate interests according to Art. 6 para. 1 lit. f) GDPR and is voluntary for users. When you contact me, I process your data to answer your request, based on your consent according to Art. 6 para. 1 lit. a) GDPR or to fulfill contractual obligations according to Art. 6 para. 1 lit. b) GDPR.

To optimize our workflows, we use the ClickUp service from ClickUp TM, 363 Fifth Ave. Suite 300, San Diego, CA 92101, USA.

ClickUp uses servers worldwide to store data. Data of users in Europe (EU) is stored in Ireland. Although server locations are in Europe, data may be transferred to the USA and processed by US authorities. ClickUp is not certified under the EU-US Data Privacy Framework. ClickUp has committed to complying with the Standard Contractual Clauses for the transfer of personal data to third countries according to Directive 2016/679 (Standard Contractual Clauses – SCC).

To protect your personal data, we have concluded a Data Processing Agreement with ClickUp in accordance with Art. 28 GDPR. More information at clickup.com/terms/privacy.

Legal Basis: The legal basis for data processing is our legitimate interest pursuant to Art. 6 Para. 1 Lit. f GDPR, to provide you with an appealing and efficient website.

To effectively use the services we employ and to consider your decision in accordance with legal requirements, we use Complianz from Complianz BV, CoC 717814475, Kalmarweg 14-5, 9723 JG, Groningen (NL).

When you visit our website, Complianz allows you to control which of our services you want to consent to. Your decision is stored separately for each service we use. You can review and adjust your settings at any time using the cookie banner.

Legal Basis: Complianz consent technology is used to obtain the legally required consents for the use of cookies. The legal basis for this is Art. 6 Para. 1 S. 1 Lit. c GDPR.

As part of our offerings, we use Google Meet for online meetings, webinars, and video conferences. Google Meet is a service of Google Ireland Ltd, a service company of Google LLC based in the USA.

We point out that the company may transfer data to the USA. However, Google LLC is certified under the EU-US Data Privacy Framework. Data transfer to the USA is therefore currently considered sufficiently secure. To protect your personal data, we have concluded a Data Processing Agreement with Google LLC in accordance with Art. 28 GDPR.

Further information can be found in Google LLC's privacy policy policies.google.com/privacy.

Legal Basis: Your consent pursuant to Art. 6 Para. 1 Lit. a GDPR.

Our website uses YouTube functions. When you visit our site, a connection is established to YouTube's servers. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you allow YouTube to directly associate your user behavior with your personal YouTube profile. You can prevent this by logging out of your YouTube account.

We have no knowledge of further processing or the duration of storage. The service is operated by Google LLC, D/B/A YouTube, 901 Cherry Ave., San Bruno, CA 94066, USA. Google LLC is certified under the EU-US Data Privacy Framework. Data transfer to the USA is therefore currently considered sufficiently secure. We have concluded a Data Processing Agreement with the provider in accordance with Art. 28 GDPR.

Further information on how YouTube handles user data can be found in YouTube's privacy policy at google.de/policies/privacy.

Legal Basis: Your consent pursuant to Art. 6 Para. 1 Lit. a GDPR.

On individual pages of our website, we integrate interactive 3D web experiences from the provider StorySplat.

To protect your personal data, these contents are only loaded after you have agreed to the “Marketing” category via our consent banner. Without your consent, no connection to StorySplat's servers will be established.

After your consent, when you access a corresponding page, a connection to StorySplat's servers is established. The following data, in particular, may be processed:

• IP address
• Date and time of access
• Browser type and browser version
• Operating system
• Referrer URL
• Device information
• Technical connection and log data

StorySplat uses the infrastructure of Google Firebase or Google Cloud to provide its services. Content is delivered via a globally distributed Content Delivery Network (CDN). It cannot be ruled out that personal data may also be processed on servers outside the European Union, particularly in the USA.

Data transfer to third countries only occurs within the framework of data protection regulations in accordance with Art. 44 et seq. GDPR. Where necessary, the transfer relies on appropriate safeguards, in particular the standard contractual clauses approved by the European Commission or – if applicable – a certification under the EU-U.S. Data Privacy Framework.

The legal basis for processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect via the cookie settings on our website.

Further information on data protection can be found at:

• StorySplat: discover.storysplat.com/privacy
• Google: policies.google.com/privacy

We secure our website and other systems through technical and organizational measures against loss, destruction, access, alteration, or distribution of stored data by unauthorized persons. Despite controls, complete protection against all dangers is not possible. Due to the internet connection alone and the resulting technical possibilities, we cannot guarantee that content and information flow will not be viewed and recorded by third parties.

In accordance with the impressum requirement under § 5 DDG, we have published general contact details and an email address on our website. We hereby object to the use of this contact information for unsolicited transmission of informational materials, advertising, or spam emails that we have not explicitly requested.