Privacy notice

1. Controller

The controller responsible for processing personal data on this website is:

contact@digital-913.com

2. Website delivery and security

This website is hosted by Vercel Inc. When you open a page, technically necessary connection data may be processed, including your IP address, date and time, requested URL, referrer, browser and device information, and server or security logs.

The purpose is to deliver the website reliably, maintain technical security, and prevent misuse. Processing is based on Article 6(1)(f) GDPR. Our legitimate interests are the secure, stable, and efficient operation of this website.

3. Enquiries and contact form

If you contact us by form or email, we process the information you provide to answer your enquiry and, where requested, to prepare or perform a contract. The data comes directly from you.

Processing is based on Article 6(1)(b) GDPR where it concerns pre-contractual steps or a contract, and otherwise on Article 6(1)(f) GDPR based on our legitimate interest in answering business enquiries. Abuse-prevention data is processed on the same legitimate-interest basis.

Fields marked as required are needed so that we can understand and answer the enquiry. Providing the data is neither legally nor contractually required, but without it we may be unable to respond. The business-name field is optional.

• name and, if supplied, business name
• email address
• selected area of interest, language, and message content
• IP address and submission time for short-lived abuse prevention

4. Service providers and international transfers

Vercel processes technical website data on our behalf. Contact-form messages are transmitted using Resend (Plus Five Five, Inc.) and delivered to the email provider used for our contact mailbox. These providers receive only the data needed to provide their services.

Vercel and Resend are based in the United States. Personal data may therefore be processed outside the European Economic Area. Transfers are protected, as applicable, by an adequacy decision such as the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. Further information is available in the providers’ privacy and data-processing terms.

5. Retention

Abuse-prevention entries held by this website expire after approximately ten minutes. Technical logs are retained according to the hosting provider’s applicable retention periods and only for as long as required for operation and security.

We generally delete enquiry correspondence no later than twelve months after the last substantive contact if no business relationship results. If an enquiry leads to a contract, we retain relevant correspondence for the duration of the relationship and any applicable statutory retention or limitation periods.

6. Cookies and analytics

This website currently uses no analytics, advertising trackers, third-party marketing pixels, or non-essential cookies or browser storage. No consent banner is therefore required for the present website configuration.

When you choose a language, we store the strictly functional cookie digital913_locale for up to one year so that your explicit selection takes priority over your browser language. It contains only the selected language code (en, de, or es), is not used for tracking, and is required to provide the language version you requested. The legal basis for access to your device is Section 25(2)(2) TDDDG and, where the GDPR applies, Article 6(1)(f) GDPR.

7. Your rights

Subject to the legal requirements, you have the following rights:

• access to your personal data (Article 15 GDPR)
• rectification of inaccurate data (Article 16 GDPR)
• erasure (Article 17 GDPR)
• restriction of processing (Article 18 GDPR)
• data portability where applicable (Article 20 GDPR)
• objection to processing based on legitimate interests (Article 21 GDPR)
• withdrawal of consent at any time where processing is based on consent, without affecting prior lawful processing

8. Right to complain

You may lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for our location is:

9. Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.

OpenAI is used only as an authoring tool to translate static website copy. Visitor and enquiry data is not sent to OpenAI by this website.