PRIVACY POLICY
1. General Information and Principles of Data Processing
We are pleased that you are visiting our website. The protection of your privacy and your personal data is very important to us.
“Personal data” means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR). This includes, for example, your first and last name, address, telephone number, email address, and your IP address.
Data that cannot be linked to you personally (e.g. anonymised information) is not considered personal data. Any processing of personal data (e.g. collection, storage, use, transmission, deletion) requires a legal basis under Art. 6 GDPR or your consent. Once the purpose of processing has been fulfilled and any statutory retention obligations no longer apply, your personal data will be deleted.
In this Privacy Policy, we inform you about how we process personal data when you visit and use our website, which types of data we process, for which purposes, on which legal bases and for how long.
This Privacy Policy applies only to this website. It does not apply to third-party websites that we merely link to via hyperlink. We have no influence on whether such third-party providers comply with data protection regulations. Please refer to the privacy policies on those websites for information on how they handle your personal data.
2. Controller
The controller responsible for the processing of personal data on this website within the meaning of Art. 4(7) GDPR is (see imprint / legal notice):
UNVAIN Studios
Owner: Robert Friedrichs
Wilhelmine-Gemberg-Weg 6
10179 Berlin
Germany
Email: support@unvainstudios.de
3. Provision and Use of the Website / Server Log Files
a) Type and scope of data processing
If you use our website purely for informational purposes (i.e. without registering or otherwise transmitting information), we automatically collect the following data, which your browser transmits to our server and which is stored in so-called server log files:
- IP address
- Date and time of the request
- Name and URL of the file accessed
- Website from which the request originates (referrer URL)
- Access status / HTTP status code
- Browser type
- Language and version of the browser software
- Operating system
b) Purpose and legal basis
The processing of this data is technically necessary so that we can display our website to you and ensure the stability and security of our systems.
The legal basis is Art. 6(1)(f) GDPR. The processing of this data is necessary for the provision of our website and therefore serves our legitimate interests in the proper operation of the website.
c) Storage period
The aforementioned personal data will be deleted as soon as it is no longer required for displaying the website. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website; there is therefore no possibility for you to object in this respect.
Further storage may take place in individual cases if required by law.
4. Use of Cookies
a) Type, scope and purpose of data processing
We use cookies on our website. Cookies are small text files that are stored on your end device by your browser when you visit our website.
Some cookies are technically necessary to provide certain functions of our website (e.g. shopping cart, language settings). Other cookies allow us to perform various analyses. For example, certain cookies can recognise your browser when you visit our website again and transmit information such as your preferred settings to us. Cookies can also help us make our website more user-friendly and effective overall.
If third parties process information via cookies, this information is collected directly from your browser. Cookies do not cause any damage to your device and do not contain viruses or harmful software.
We use the following types of cookies:
- Temporary cookies / session cookies
These cookies are automatically deleted when you close your browser. They allow us to recognise your browser within a single session and assign multiple requests to a shared session.
- Permanent cookies
These cookies remain stored in your browser for a longer period of time and can transmit information to us. The exact storage period depends on the individual cookie. You can delete permanent cookies at any time in your browser settings.
- Third-party cookies
We may use cookies from third-party providers, for example for anonymised analysis of user behaviour (analytics cookies), for advertising and targeted marketing (advertising cookies), or to enable interaction with social networks (social media cookies).
Browser settings configuration
Most browsers are configured by default to accept cookies automatically. However, you can configure your browser to accept only certain cookies or to reject all cookies. Please note that if you deactivate cookies, you may not be able to use all functions of our website in full.
You can also delete cookies already stored in your browser at any time. In addition, you can set your browser to notify you before cookies are stored. Please use the help functions of your browser for detailed configuration options, as the settings differ between browsers.
If you deactivate cookies, a so-called “opt-out cookie” may be set, which we need to save your choice. If you delete this cookie, you may have to deactivate cookies again.
b) Legal basis
The legal basis for the use of technically necessary cookies is Art. 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free and optimised provision of our website.
The legal basis for the use of cookies that are not technically necessary (e.g. for analysis, marketing, social media) is your consent pursuant to Art. 6(1)(a) GDPR, which we obtain via a cookie banner/consent tool when you visit our website. You can withdraw your consent at any time with effect for the future.
c) Storage period
Data transmitted via cookies is deleted as soon as it is no longer required for the purposes described or you withdraw your consent. Further storage may take place if required by law.
5. Data Collection for Pre-Contractual Measures and Contract Fulfilment
a) Type and scope of data processing
In the context of pre-contractual enquiries and when concluding contracts via our online shop (e.g. when placing an order), we process personal data, such as:
- First and last name
- Billing and shipping address
- Email address
- Telephone number
- Payment and bank details
- Ordered products and order history
b) Purpose and legal basis
We process this data exclusively to perform pre-contractual measures at your request and to fulfil the purchase contract (Art. 6(1)(b) GDPR).
c) Storage period
We delete this data as soon as it is no longer required for the fulfilment of the contract and no statutory retention obligations (e.g. under commercial or tax law) apply.
If such retention obligations exist (e.g. according to the German Commercial Code (HGB) or the German Fiscal Code (AO)), we restrict processing and delete the data once the retention obligation has expired.
6. Order Form
a) Type and scope of data processing
If we provide a special order or pre-order form on our website, the data collected is limited to the following:
- First and last name
- Telephone number
- Email address
- Payment / account data (where applicable)
- Product details
b) Purpose and legal basis
The purpose of processing is to handle and process your order or pre-order correctly.
The legal basis is Art. 6(1)(b) GDPR, as the processing is necessary for the performance of a contract or pre-contractual measures at your request.
c) Storage period
The data is deleted when it is no longer required for the contract or pre-contractual purposes. Legal retention obligations remain unaffected.
7. Registration Function
a) Type and scope of data processing
You may have the option to register on our website (e.g. for a customer account). In this case, we collect and store the data you provide in the registration form (such as name, address, email address).
Your data will not be passed on to third parties except where necessary for contract performance (e.g. payment providers, shipping service providers).
b) Purpose and legal basis
Registration may be required to use certain content or services on our website or to simplify future orders.
The legal basis for processing is your consent in accordance with Art. 6(1)(a) GDPR, where given, and additionally Art. 6(1)(b) GDPR if registration is carried out for the purpose of concluding or fulfilling a contract.
You may change or delete your data at any time via your customer account or by contacting us.
c) Storage period
Data collected during registration will be stored for as long as you maintain a registered account. Once your account is deleted, we will delete your data unless statutory retention periods apply.
8. Data Transmission
We only transfer your personal data to third parties if:
a) you have given your explicit consent pursuant to Art. 6(1)(a) GDPR;
b) this is legally permissible and necessary pursuant to Art. 6(1)(b) GDPR for the performance of a contract or to carry out pre-contractual measures;
c) there is a legal obligation to disclose data pursuant to Art. 6(1)(c) GDPR (e.g. to tax authorities, social insurance authorities, supervisory authorities, law enforcement agencies);
d) the disclosure is necessary for the purposes of legitimate interests pursuant to Art. 6(1)(f) GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (e.g. assertion, exercise or defence of legal claims); or
e) we use external service providers (processors) pursuant to Art. 28 GDPR who are carefully selected and contractually obligated to handle your data in accordance with data protection regulations (e.g. providers in the areas of IT, hosting, logistics, telecommunications).
If personal data is transferred to recipients in third countries (outside the EU/EEA), we ensure that these recipients guarantee an adequate level of data protection, e.g. via adequacy decisions of the EU Commission or standard contractual clauses and additional safeguards.
9. Applications
a) Type and scope of data processing
You may apply to us via our website or by email. In doing so, we process the data you provide (e.g. name, contact details, CV, references).
b) Purpose and legal basis
We process your data exclusively for the purpose of handling your application and the decision on the establishment of an employment relationship.
The legal basis is Art. 88(1) GDPR in conjunction with § 26 BDSG and additionally Art. 6(1)(b) GDPR. If you consent to us retaining your data in an applicant pool, the legal basis is Art. 6(1)(a) GDPR.
c) Storage period
If we are unable to offer you a position, your data will generally be stored for up to six months after the end of the application process, taking into account statutory time limits (e.g. § 61b ArbGG in conjunction with § 15 AGG).
If you have consented to inclusion in our applicant pool, we store your data for up to two years or until you withdraw your consent.
d) Data transmission
Your data is transmitted only to internal departments involved in the decision-making process (e.g. HR, management).
Disclosure to public authorities may occur where we are legally obliged to do so. Data may also be transferred to other recipients if you have expressly consented.
10. Comment Function
a) Type and scope of data processing
If a comment function is provided (e.g. for posts or products), and you use it, we process the data you enter, such as:
- Comment content
- Chosen username/pseudonym
- Date and time of the comment
- IP address assigned by your internet service provider
b) Purpose and legal basis
The data is processed for the purpose of displaying your comment and to protect us and third parties from illegal content (e.g. insults, hate speech).
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR, where given, and our legitimate interest pursuant to Art. 6(1)(f) GDPR in being able to identify the author in cases of legal violations.
c) Storage period
Comments and the associated data (e.g. IP address) are stored and remain on the website until the commented content is removed or must be deleted for legal reasons.
11. Contact Form
a) Type and scope of data processing
If you contact us via a contact form on our website, we process the data you enter in the form (typically name, email address and the content of your message).
b) Purpose and legal basis
The data is processed solely for the purpose of handling your enquiry.
The legal basis is your consent (Art. 6(1)(a) GDPR) and/or our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR) or, where applicable, Art. 6(1)(b) GDPR if the contact relates to an existing or potential contractual relationship.
c) Storage period
The data will be stored for as long as necessary to process your enquiry. It will be deleted once your request has been fully dealt with and no statutory retention obligations exist.
12. Contact by Email
You can also contact us directly by email.
a) Type and scope of data processing
In this case, we process your email address as well as the information you provide in the email (e.g. name, content of your message).
b) Purpose and legal basis
The purpose of the processing is to handle your request. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in proper communication and processing of your request) or Art. 6(1)(b) GDPR if the contact relates to a contract.
c) Storage period
The storage period depends on the content of your request. As soon as the purpose of the communication ceases to apply and no legal retention obligations exist, the data is deleted.
13. Newsletter
a) Type and scope of data processing
You can subscribe to a free email newsletter on our website. To send the newsletter, we require your email address.
We use the double opt-in procedure: after registering, you will receive an email in which you must confirm your subscription by clicking a link. Only after this confirmation will the newsletter be sent to you.
We store the data you enter during registration (e.g. name, email address), as well as your IP address and the date and time of registration and confirmation, in order to document your consent and to be able to trace any misuse.
b) Purpose and legal basis
We process your data for the purpose of sending you the newsletter and addressing you in an advertising manner.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and § 7(2) No. 3 UWG. We also have a legitimate interest pursuant to Art. 6(1)(f) GDPR in documenting proof of your consent.
You can withdraw your consent at any time with effect for the future by clicking the “unsubscribe” link in any newsletter or by contacting us directly.
c) Storage period
Your data will be stored for as long as you are subscribed to the newsletter. After unsubscribing, your email address will be deleted unless you have expressly consented to further use of your data.
14. Tracking and Analysis Tools
Details on the specific web analytics, marketing and social media tools used on this website (e.g. Shopify Analytics, Klaviyo, Meta Pixel, etc.), the type and scope of data processing, purposes, legal bases and options for objection/withdrawal can be found in a separate overview on this website or in the corresponding sections of this Privacy Policy.
15. Data Security and Security Measures
We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures are continuously improved in line with technological developments. This includes, in particular, the use of recognised encryption procedures (e.g. SSL or TLS) for data transmission.
Please note that data transmitted unencrypted over the internet (e.g. by email) may be accessed by third parties. It is your responsibility to protect data you provide by appropriate measures.
16. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy at any time to reflect changes in legal requirements or in our data processing activities. The current version is always available on our website.
17. Your Rights
You have the following rights under the GDPR with regard to your personal data (Arts. 7, 15–22, 77 GDPR). You can contact the controller named in section 2 at any time to exercise your rights.
1. Right to withdraw consent (Art. 7(3) GDPR)
You may withdraw your consent to the processing of your personal data at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
2. Right of access (Art. 15 GDPR)
You have the right to obtain confirmation as to whether we process personal data concerning you. If so, you have the right to access this personal data and obtain further information (e.g. purposes of processing, categories of data, recipients, storage period).
3. Right to rectification (Art. 16 GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data and to have incomplete data completed.
4. Right to erasure (Art. 17 GDPR)
You have the right to obtain the erasure of your personal data where one of the grounds set out in Art. 17 GDPR applies (e.g. data no longer necessary, withdrawal of consent, unlawful processing), unless an exception applies (e.g. statutory retention obligations).
5. Right to restriction of processing (Art. 18 GDPR)
You have the right to obtain restriction of processing under the conditions of Art. 18 GDPR (e.g. if you contest the accuracy of the data or have objected to processing).
6. Right to data portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller where technically feasible.
7. Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing, including profiling related to direct marketing.
8. Right not to be subject to automated decision-making (Art. 22 GDPR)
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you, unless one of the exceptions in Art. 22 GDPR applies.
We do not use automated decision-making including profiling that produces such effects.
9. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.
© 2025 - UNVAIN