Privacy Policy

Information on the processing of your personal data

/

The protection of your personal data is important to us. With this privacy policy, we inform you about what personal data we collect, how we handle this data, and what rights you have regarding your data.

1. Responsible Parties

Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) are:

Labenz

Gorm Labenz

Thaerstraße 46 10249 Berlin Germany

Schwochow Visual Stories GmbH

Jan Schwochow

Dunckerstraße 1a 10437 Berlin Germany

Email: info@in-visuals.org

2. General Information on Data Processing

We process our users' personal data only to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data regularly takes place only with the user's consent or in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

3. Legal Basis for Data Processing

Where we obtain the consent of the data subject for processing operations of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.

If processing is necessary to protect the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the former interest, Article 6(1)(f) GDPR serves as the legal basis for processing.

4. Data Deletion and Storage Duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

5. Types of Data Processed

We process the following categories of personal data:

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email, phone numbers)
  • Content data (e.g., text entries, photographs, videos)
  • Usage data (e.g., websites visited, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses)

6. Registration and User Account

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask, transmitted to us, and stored. The data is not passed on to third parties, with the exception of the services used as part of our order processing (see section 7).

The following data is collected during the registration process:

  • Email address
  • Username
  • Password (stored encrypted)
  • Date and time of registration
  • Optional: Name, profile picture, and other personal information

The legal basis for the processing of data, where user consent exists, is Article 6(1)(a) GDPR. If the registration serves to fulfill a contract to which the user is a party or to carry out pre-contractual measures, the additional legal basis for the processing of the data is Article 6(1)(b) GDPR.

Registration is necessary to provide certain content and services on our website and to manage the projects you submit.

The data will be deleted as soon as it is no longer necessary for achieving the purpose of its collection. This applies to data collected during the registration process when the registration on our website is canceled or modified.

7. Services and Technologies Used

7.1 Hosting

Our website is hosted by Vercel Inc. Vercel may have access to personal data, particularly your IP address and usage data, which must necessarily be processed when you visit our website to ensure the display of the website and the security of our systems.

The legal basis for this processing is Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure and efficient provision of our internet service.

We have concluded a data processing agreement with Vercel that ensures that data is only processed according to our instructions.

7.2 Supabase

For data storage and authentication, we use Supabase, a database service. The Supabase servers are located in Frankfurt, Germany. When registering, logging in, and using our services, personal data is stored in this database.

The legal basis for this processing is Article 6(1)(b) GDPR (contract performance) and Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the secure storage and management of user data.

Supabase processes data in accordance with its privacy policies and, as a provider with servers in the EU, offers a high level of data protection. We ensure that the processing of personal data is in accordance with the requirements of the GDPR.

7.3 Cookies and Local Storage

On our website, we use only technically necessary cookies and local storage (localStorage), which are essential for the functioning of the website. Cookies are small text files that are stored on your device. Local storage allows web applications to store data locally on your device.

These technically necessary cookies and storage mechanisms are used to:

  • Enable login (session management)
  • Store basic user settings
  • Ensure the functionality and security of the website

The legal basis for the processing of personal data using technically necessary cookies and local storage is Article 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in providing a functioning and user-friendly website.

Most browsers allow you to control cookies in the settings. You can configure your browser to inform you when cookies are set, or to accept cookies only in certain cases or to reject them generally. Please note that if technically necessary cookies are deactivated, the full functionality of this website cannot be guaranteed.

7.4 Web Frameworks and Libraries

Our website uses modern web frameworks and libraries such as Next.js, React, and Tailwind CSS. These technologies are used exclusively for the display and functionality of our website and do not transmit any personal data to third parties.

8. Transfer of Data to Third Parties

Your personal data will not be transferred to third parties for purposes other than those listed below.

We will only share your personal data with third parties if:

  • You have given your express consent pursuant to Article 6(1)(a) GDPR,
  • The disclosure pursuant to Article 6(1)(f) GDPR is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
  • In the event that there is a legal obligation for the disclosure pursuant to Article 6(1)(c) GDPR, and
  • It is legally permissible and required pursuant to Article 6(1)(b) GDPR for the processing of contractual relationships with you.

9. Rights of the Data Subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

9.1 Right to Information

You may request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing is taking place, you can request information from the controller about the following:

  • The purposes for which the personal data is processed;
  • The categories of personal data that are processed;
  • The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed;
  • The planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage duration;
  • The existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller, or a right to object to such processing;
  • The existence of a right to lodge a complaint with a supervisory authority;
  • All available information on the source of the data if the personal data is not collected from the data subject;
  • The existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) GDPR and, at least in these cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information about whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you can request to be informed of the appropriate safeguards pursuant to Article 46 GDPR in connection with the transfer.

9.2 Right to Rectification

You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is inaccurate or incomplete.

9.3 Right to Restriction of Processing

You can request the restriction of the processing of the personal data concerning you under the following conditions:

  • If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of the use of the personal data instead;
  • The controller no longer needs the personal data for the purposes of processing, but you need it for the establishment, exercise, or defense of legal claims; or
  • If you have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the legitimate grounds of the controller override your grounds.

9.4 Right to Erasure

You can request the controller to erase the personal data concerning you without undue delay, and the controller is obligated to erase this data without undue delay where one of the following grounds applies:

  • The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.
  • You withdraw your consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal ground for the processing.
  • You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR.
  • The personal data concerning you has been unlawfully processed.
  • The personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data concerning you has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

9.5 Right to Notification

If you have exercised your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to communicate this rectification or erasure of data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients by the controller.

9.6 Right to Data Portability

You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data has been provided, where the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and the processing is carried out by automated means.

9.7 Right to Object

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

9.8 Right to Withdraw Data Protection Consent

You have the right to withdraw your data protection consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9.9 Automated Individual Decision-Making, Including Profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between you and the controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

9.10 Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.

10. Currency and Amendment of this Privacy Policy

This privacy policy is currently valid and has the status of May 2025.

Due to the further development of our website and offers or due to changed legal or official requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed by you at any time on the website.

11. Data Protection Officer

If you have any questions regarding data protection, please contact us directly:

Email: info@in-visuals.org

Last updated: 01.05.2025