​

Privacy Overview

Thank you for your interest in our website. The protection of your personal information is very important to us. This privacy policy provides you with a comprehensive overview of how we handle your data, what rights you have, and how you can exercise them.

​

Who is responsible for your data?

The controller in terms of data protection laws is:

Jan Christiansen
Tarpenbekstraße 13
22848 Norderstedt
Germany

​

Contact options:
Phone: +49 172 2774215
Email: jan@spac.design

​

What happens when you visit our website?

Automatically collected data

When you visit our website without contacting us, we only collect technically necessary data. This information includes:

• Your browser type

• The operating system used

• Date and time of access

• The amount of data transferred

• The previously visited website (referrer)

• Your IP address (possibly in anonymized form)

We collect this data to ensure a smooth connection and to make the use of our website comfortable. The legal basis for this is our legitimate interest (Art. 6(1)(f) GDPR) in the technical optimization and security of our offering.

We do not analyze this data for marketing purposes and do not share it with third parties, but we reserve the right to review the data retrospectively if there are specific indications of illegal use.

​

Data security

All data transmitted between your browser and our server is encrypted via HTTPS. You can recognize this by the URL with "https://" and the lock symbol in your browser's address bar.

​

How do we use cookies?

Our website uses cookies – small text files stored on your device. These help us make your visit more pleasant and enable certain functions.

We distinguish between:

• Technically necessary cookies that are essential for the basic functions of the website

• Preference cookies that store your personal settings

• Analytics cookies that help us improve our services

• Marketing cookies that can be used for targeted advertising

Processing takes place on the basis of:

• Your consent (Art. 6(1)(a) GDPR)

• Our legitimate interest in a user-friendly website (Art. 6(1)(f) GDPR)

• The fulfillment of a contract or pre-contractual measures (Art. 6(1)(b) GDPR)

Through our cookie banner, you can decide which cookie categories you want to allow. You can adjust your consent at any time in the cookie settings or configure your browser to inform you about the setting of cookies or generally reject them. Please note that this may mean that not all functions of our website are available.

​

Who hosts our website?

Our website is hosted and technically maintained by external service providers:

 

Amazon Web Services (AWS)

Provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

AWS provides the server infrastructure for parts of our website. When data is transferred to the USA, an adequate level of protection is ensured through participation in the EU-US Data Privacy Framework.

​

Wix

Provider:

• Wix HQ, Nemal Tel Aviv St 40, Tel Aviv-Yafo 6350671, Israel

• Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA

Wix provides the content management system for our website. For data transfers to Israel, an adequate level of protection exists based on an adequacy decision by the EU Commission. For US transfers, protection is provided by the EU-US Data Privacy Framework.

​

Google Cloud CDN

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This Content Delivery Network ensures faster delivery of our media content. Data may also be transferred to Google LLC in the USA, with protection ensured by the EU-US Data Privacy Framework.

We have concluded data processing agreements with all mentioned providers to ensure that your data is only processed according to our instructions.

​

Which external services do we use?

Polyfill Service

Provider: The Financial Times Ltd., Bracken House, 1 Friday Street, London, EC4M 9BT, UK

This service enables the correct display of our website in older browsers. Technical information such as browser details is transmitted to provide the appropriate polyfill files. Processing is based on our legitimate interest in optimal presentation of our website (Art. 6(1)(f) GDPR).

​

Google reCAPTCHA

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

ReCAPTCHA protects our website from automated access and spam. The service checks whether inputs are made by a human or a bot. For this purpose, data such as IP address and browser information are transmitted to Google.

Processing takes place either:

• Based on your consent (Art. 6(1)(a) GDPR) for cookie-based functions

• Or as part of our legitimate interest in the security of our website (Art. 6(1)(f) GDPR)

Data may be transferred to Google LLC in the USA, with protection ensured by the EU-US Data Privacy Framework.

Further information: Google Privacy Center

​

Video Conference Services

For online meetings and video conferences, we use:

Google Meet

Provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Zoom

Provider: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA

When using these services, various data is processed depending on the extent of use:

• Registration data (name, email, phone number, password)

• Participant data (IP address, device information)

• Content (audio, video, chat, shared documents)

Processing takes place on the basis of:

• Fulfillment of a contract (Art. 6(1)(b) GDPR)

• Your consent (Art. 6(1)(a) GDPR)

• Our legitimate interest in efficient communication (Art. 6(1)(f) GDPR)

Adequate data protection guarantees through the EU-US Data Privacy Framework apply to both services.

​

What happens when you contact us?

When you contact us (by email, contact form, or phone), we use your data exclusively to process your request.

The data you provide (name, email, phone number, message content) is only stored and processed for communication with you. The legal basis for this is:

• Our legitimate interest in processing your request (Art. 6(1)(f) GDPR)

• For contract-related inquiries, the initiation of a contract (Art. 6(1)(b) GDPR)

After the communication is concluded, your data will be deleted unless there are legal retention obligations or further storage is necessary for other legal reasons.

​

Cookie Consent Management

For managing your cookie settings, we use a special tool that allows you to manage your consents yourself. This tool sets technically necessary cookies to store your preferences.

The use of this tool is based on:

• Our legal obligation to obtain your consent for certain data processing (Art. 6(1)(c) GDPR)

• Our legitimate interest in legally compliant and user-friendly consent management (Art. 6(1)(f) GDPR)

You can find more information directly in the cookie banner on our website.

​

What rights do you have?

As a data subject, you have comprehensive rights regarding the protection of your personal data:

• Right of access: You can request information about your stored data (Art. 15 GDPR)

• Right to rectification: You can request correction of incorrect data (Art. 16 GDPR)

• Right to erasure: You can request deletion of your data under certain circumstances (Art. 17 GDPR)

• Right to restriction: You can request restricted processing of your data (Art. 18 GDPR)

• Data portability: You can receive your data in a common format (Art. 20 GDPR)

• Right to withdraw consent: You can withdraw given consent at any time (Art. 7(3) GDPR)

• Right to lodge a complaint: You can complain to a supervisory authority (Art. 77 GDPR)

​

Special note on the right to object

You have the right to object to the processing of your personal data at any time if the processing is based on legitimate interests (Art. 21 GDPR).

If you object to the processing, we will no longer process your data unless:

• We can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms

• The processing serves to establish, exercise, or defend legal claims

For data processing for direct marketing purposes, you have an unconditional right to object at any time without giving reasons, which leads to the immediate termination of processing for this purpose.

​

How long is your data stored?

The storage duration of your data depends on the purpose of processing and legal requirements:

• For consent-based processing: Until you withdraw your consent

• For contract-based processing: For the duration of the contractual relationship and subsequent legal retention periods

• For legitimate interest: Until successful objection or until the purpose no longer applies

• For legal obligation: According to the prescribed retention periods

As soon as the purpose of storage no longer applies and no legal retention periods remain, your data will be deleted or anonymized.

​

Last updated: May 8, 2025