Privacy policy

1. Controller

Controller within the meaning of the GDPR:

Digital Creatives Munich
Owner: Maciej Roch Kwiatkowski
(trading name: WebUX Munich)
Schellingstraße 109a
80798 Munich
Germany

E-mail: hello@webuxmunich.de
Phone: +49 163 1857461

2. Hosting and audience measurement

This website is hosted by Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA). When you visit the site, Vercel automatically processes access data (IP address, date and time of the request, page requested, browser type) to deliver the service and to ensure technical security.

We also use Vercel Web Analytics to evaluate the use of the website in aggregated form (page views, visitor counts, countries of origin, referring sites). Vercel Web Analytics uses no cookies and stores no IP addresses. To distinguish visitors, an anonymous hash is derived from the IP address and browser; it is discarded after 24 hours and cannot be traced to a person.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the reliable operation of the website and in measuring its reach). Vercel is certified under the EU-U.S. Data Privacy Framework. Further information: vercel.com/legal/privacy-policy.

3. Fonts (self-hosted)

This website uses the typeface Inter, included locally via the npm package @fontsource-variable/inter and delivered directly from our servers. No connection is made to Google servers or other third-party servers to deliver fonts.

4. Contact forms and enquiries

You can send us an enquiry through the contact forms on this website and through a short questionnaire (“Free assessment”). In doing so we process the details you enter (name, e-mail address, phone number where given, your message or your answers in the questionnaire) together with technical context (page visited, device type, language, time, referring page and – if you reached us through an advertising link – that link’s campaign identifier). Your IP address is not stored.

Your enquiry is sent to our own server at Vercel (see section 2) and from there delivered by e-mail to our mailbox at Hostinger International Ltd. (61 Lordou Vironos Street, 6023 Larnaca, Cyprus; servers within the EU). We keep enquiries in this mailbox and on our own devices only.

Should e-mail delivery be temporarily unavailable, your enquiry is forwarded to us instead through the form service Formspree Inc. (250 Canal Street, Suite 700, New York, NY 10013, USA; certified under the EU-U.S. Data Privacy Framework).

All providers named process your data solely for the technical transmission and storage of your enquiry. No disclosure for the providers’ own purposes takes place.

The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and Art. 6 (1) (f) GDPR (legitimate interest in communicating with prospective clients and in handling enquiries traceably). Your data is used solely to handle your enquiry and is deleted once no longer needed for that purpose, and in any case no later than 24 months afterwards, unless statutory retention obligations require otherwise.

5. Appointment booking (Calendly)

This website contains an external link to the appointment booking platform Calendly LLC (271 17th St NW, Atlanta, GA 30363, USA). Calendly is not embedded in this website. When you click the booking link you are taken to Calendly’s website; only there does processing by Calendly begin. Calendly’s own privacy policy applies exclusively: calendly.com/pages/privacy.

6. Cookies, local storage and consent

This website sets no cookies beyond technically necessary session data, unless you have consented to the use of analytics and marketing services (see section 7).

We store your consent decision in your browser’s local storage (localStorage, key webux-consent-v1) so that we do not have to ask you again on every visit. This storage is technically necessary and permitted without consent under § 25 (2) no. 2 TTDSG. The entry contains only your decision (“granted” or “denied”) and no personal data.

You can change or withdraw your decision at any time by clicking “Cookie settings” at the bottom of the page. Withdrawal takes effect for the future; the lawfulness of processing carried out until then remains unaffected (Art. 7 (3) GDPR).

7. Analytics and marketing services (only with your consent)

The services described in this section are loaded only if you have chosen “Accept all” in our consent banner. Without that consent, none of the scripts named below are run and none of the cookies named are set. If you choose “Essential only”, the website – including all contact forms – works without restriction.

The legal basis for all services in this section is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TTDSG. You can withdraw it at any time via “Cookie settings” at the bottom of the page.

7.1 Google Analytics 4

We use Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies and similar technologies to record how visitors use the website (pages viewed, time on site, approximate location based on the truncated IP address, device and browser, source of the visit, enquiries submitted). Google Analytics 4 truncates IP addresses before storage; full IP addresses are not stored.

The data is transmitted to Google servers, including Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework. The purpose of processing is to evaluate the use of our website in order to improve our offering and to measure the success of our advertising. Further information: policies.google.com/privacy.

7.2 Google Signals and remarketing with Google Ads

The Google Signals feature is enabled in Google Analytics. It supplements the analysis with data from users who are signed in to their Google account and have allowed ads personalisation – in particular the cross-device attribution of visits and approximate demographic and interest data. This data is shown to us in aggregated form only.

On this basis we build audiences in Google Analytics (for example: visitors who have not yet sent an enquiry) and pass them to Google Ads in order to show advertisements again, on Google services, to people who have already visited our website (remarketing). No names or contact details are transmitted. You can disable ads personalisation in your Google account at adssettings.google.com; you withdraw consent for this website via “Cookie settings”.

7.3 Meta Pixel (Facebook / Instagram)

We use the Meta Pixel of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland). The pixel lets us measure the success of our advertisements on Facebook and Instagram – in particular whether an enquiry was submitted through our website after an ad was clicked – and show advertisements to people who have already visited our website.

For this, Meta sets a cookie and records the viewing of our pages and the submission of an enquiry (“Lead” event). We transmit no names, e-mail addresses or phone numbers to Meta; the “automatic advanced matching” feature is disabled. If your browser is logged in to Facebook or Instagram, Meta may associate the visit with your account; we have no influence over this.

The data is transmitted to Meta servers, including Meta Platforms, Inc. in the USA. Meta is certified under the EU-U.S. Data Privacy Framework. For the collection and transmission of the event data, we and Meta are joint controllers within the meaning of Art. 26 GDPR; the agreement is available at facebook.com/legal/controller_addendum. Further information on data processing by Meta: facebook.com/privacy/policy.

8. External links

This website contains links to external services (e.g. Google Maps or Calendly). When you click an external link you leave our website. The operators of the linked pages are solely responsible for the data processing there.

9. Your rights

Under the GDPR you have the following rights:

• –Access to the data stored about you (Art. 15 GDPR)
• –Rectification of inaccurate data (Art. 16 GDPR)
• –Erasure of your data (Art. 17 GDPR)
• –Restriction of processing (Art. 18 GDPR)
• –Data portability (Art. 20 GDPR)
• –Objection to processing (Art. 21 GDPR)
• –Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

To exercise your rights, please contact: hello@webuxmunich.de

You also have the right to lodge a complaint with the competent data protection supervisory authority. For us that is the Bavarian State Office for Data Protection Supervision (BayLDA), www.lda.bayern.de.

10. Changes to this privacy policy

We reserve the right to update this privacy policy as needed to reflect changes in legal requirements or in our services. The current version is always available on this page.