Privacy policy

This translation is provided for convenience. The German version is legally binding.

Thank you for visiting. This website is deliberately lean: it sets no cookies, uses no tracking or analytics tools and loads no content from third-party servers. Below we explain which data is nevertheless processed for technical reasons and what rights you have.

1. Controller

We have not appointed a data protection officer because the legal requirements for doing so are not met.

The legal bases are the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Hosting and server log files

This website is hosted on a server of Host Europe GmbH, Cologne, Germany, in a data centre in the EU. The hosting provider processes data solely on our behalf and according to our instructions (data processing agreement under Art. 28 GDPR).

Each time a page is accessed, the web server automatically records the following in a log file:

• IP address of the requesting device,
• date and time of access,
• page or file requested and amount of data transferred,
• status code (e.g. whether the request succeeded),
• browser and operating system (user agent),
• the previously visited page (referrer), if your browser sends it.

We need this data to deliver the site, to ensure its security and stability and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and without errors. Log files are deleted automatically after 14 days, unless a specific security incident requires longer retention for investigation. The data is not combined with other sources or analysed for advertising purposes.

The connection to this website is encrypted with TLS (recognisable by “https://” in the address bar).

3. Fonts

The font “Outfit” used on this site is stored on our own server and loaded from there. No connection is made to servers of Google or any other third party.

4. Cookies and tracking

We set no cookies, do not use your browser’s local storage and do not embed any analytics, advertising or social media services. Consent is therefore not required, and there is no cookie banner.

5. Contact by e-mail

If you send us an e-mail, we process your e-mail address, your name (if provided) and the content of your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract or pre-contractual matters, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once it is no longer needed, unless statutory retention obligations (e.g. under commercial or tax law) apply.

Our mailboxes are operated by Neue Medien Münnich (ALL-INKL.COM), Hauptstraße 68, 02742 Friedersdorf, Germany, acting as our processor under Art. 28 GDPR. The servers are located in Germany.

6. Contact form

If you write to us using the contact form, we process your name, your e-mail address, the content of your message and the time of your request in order to answer it. The legal basis is Art. 6(1)(b) GDPR where your request concerns a contract or pre-contractual matters, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Your message is stored on our server (see section 2) and also delivered to us by e-mail via our mailbox at ALL-INKL.COM (see section 5). We keep the request until it has been dealt with and delete it afterwards, unless statutory retention obligations apply. To prevent abuse (e.g. mass submissions), we briefly process the IP address of the sending device; it is deleted after 14 days at the latest. The legal basis for this is Art. 6(1)(f) GDPR.

The form uses no captcha, sets no cookies and contains no tracking. Spam is kept out by a field that is invisible to people and must stay empty. Providing your details is voluntary; without an e-mail address, however, we cannot reply.

7. Link to our Etsy shop

The “Visit our Etsy shop” and “View on Etsy” buttons are plain links. Only when you click one of them do you leave this website and go to Etsy (Etsy Ireland UC, Dublin). From then on, Etsy’s privacy policy applies; we have no influence on the processing there, for example through cookies. As long as you do not click the link, no data is transmitted to Etsy.

8. Your rights

You have the right at any time to

• access the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR).

Right to object (Art. 21 GDPR)

Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

An informal message to hello@softcurvestudio.de is sufficient.

9. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:

10. Changes

We update this policy when the website or the legal situation changes. The current version is always available at softcurvestudio.de/en/privacy.

Last updated: 27 September 2026