Privacy Notice Regarding Job Applications
Danthree Studio, Daniel Schuster, Panoramastraße 18, 73084 Salach, processes your information and documents to handle your application. Providing your phone number is optional. We use Webflow, Make, Google Sheets, and Microsoft 365 for data transmission and management. You will only be added to our applicant pool with your separate, voluntary consent.
With your voluntary consent, we will store your application and portfolio for twelve months from the date of receipt and contact you if suitable positions or projects become available. You may revoke this consent at any time, effective for the future, by sending an email to info@danthree.com. You will not face any disadvantages in connection with your application if you do not provide consent. Inclusion in the applicant pool is separate from the processing of your current application. Information about your data protection rights and our service providers can be found in the following sections of this Privacy Policy.
Data Controller
DanthreeStudio
Owner: Daniel Schuster
Panoramastraße 18
73084 Salach
Phone: +49 (0) 7161 62728 50
Email: info@danthree.com
Privacy Policy of www.danthree.studio
Thiswebsite collects personal data from its users.
This document contains a section dedicated to users in the United States and their privacy rights.
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. For detailed information, please refer to the individual sections of this privacy policy.
Types of Data Collected
The personal data that this website processes—either on its own or through third parties— includes: first name; last name; company name; email address; user ID; tracker; usage data; Universally Unique Identifier (UUID); number of users; city; device information; session statistics; latitude (of the city); longitude (of the city); browser information; data transmitted while using the service; data transmitted for the purpose of using the service. To the extent that we do not collect personal data directly from you, it is derived from the following categories of sources:
- publicly available sources (e.g., commercial and association registries, public websites, social networks),
- business partners and service providers with whom we have a business relationship,
- data brokers or providers of address or contact information,
- government agencies and other public authorities, to the extent that disclosure is permitted by law.
Full details regarding each type of personal data processed are provided in the relevant sections of this Privacy Policy or, in specific cases, through explanatory texts displayed prior to data collection.
Personal data may be provided voluntarily by the user or, in the case of usage data, collected automatically when this website is used.
Unless otherwise specified, the provision of all data requested by this website is mandatory. If the user refuses to provide the data, this may result in this website being unable to provide its services to the user. In cases where this website
explicitly states that the provision of personal data is voluntary, users may choose not to provide such data without any consequences for the availability or functionality of the service.
Users who are unsure which personal data is mandatory may contact the provider.
Any use of cookies—or other tracking tools—by this website or by third-party service providers used by this website is intended to provide the service requested by the user and for all other purposes described in this document and in the Cookie Policy.
Users are responsible for all personal data of third parties that is collected, published, or disclosed through this website.
Methods and location of data processing: processing methods
The provider processes users’ personal data in a proper manner and takes appropriate security measures to prevent unauthorized access and the unauthorized disclosure, alteration, or destruction of data.
Data processing is carried out using computers or IT-based systems in accordance with organizational procedures and practices specifically tailored to the stated purposes. In addition to the data controller, other individuals—whether internal (human resources, sales, marketing, legal department, system administrators) or external—may also operate this website and thus have access to the data; in such cases, the data controller may designate them as data processors as necessary (such as technical service providers, delivery companies, hosting providers, IT companies, or communications agencies). An up-to-date list of these parties may be requested from the provider at any time.
Our website uses SSL or TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by “https://” and the padlock icon in the browser address bar.
Location
Thedata is processed at the provider’s branch office and at all other locations where the entities involved in data processing are located.
Depending on the user’s location, data transfers may involve the transfer of the user’s data to a country other than their own. To learn more about where the transferred data is processed, users can consult the section containing detailed information on the processing of personal data.
Retention Period
Unlessotherwise specified in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may, where applicable, be retained for a longer period due to a legal obligation that must be fulfilled or based on the user’s consent.
Purposes of Processing
Personaldata about the user is collected so that the provider can provide the service and, furthermore, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of the user or third parties), and detect malicious or fraudulent activities. In addition, data is collected for the following purposes: contacting the user, tag management, displaying content from external platforms, analytics, platform services and hosting, hosting and backend infrastructure, monitoring the infrastructure, and optimizing and distributing traffic.
The provision of your personal data may in some cases be required by law (e.g., due to tax regulations) or result from contractual provisions (e.g., information about the contracting party). In certain cases, it is necessary for you to provide us with personal data so that a contract can be concluded or performed.
If you do not provide the required data, this may result in our inability to conclude or perform the contract with you or to fulfill certain legal obligations. For data that is not strictly necessary, we expressly note that providing it is voluntary and that failure to do so will not result in any negative consequences for you.
Users can find further detailed information on these processing purposes and the personal data used for each purpose in the “Detailed Information on the Processing of Personal Data” section of this document.
Automated decision-making, including profiling
As a general rule, we do not engage in any exclusively automated decision-making pursuant to Art. 22 of the GDPR that produces legal effects concerning you or similarly significantly affects you.
Should we use automated decision-making processes (including profiling) in individual cases, we will inform you of this separately. In such cases, this includes meaningful information about the logic involved, as well as the scope and intended effects of such processing.
An example of such a process could be an automated credit assessment, in which your ability to pay is evaluated using mathematical and statistical methods. Possible consequences of such processing could include, for example, a contract not being concluded at all or only under restricted conditions.
Detailed information on the processing of personal data
Personaldata is collected for the following purposes using the following services:
- Analytics
Theservices listed in this section enablethe provider tomonitor and analyze data traffic and track user behavior.
Google Analytics 4 (Google LLC)
GoogleAnalytics 4 is a web analytics service provided by Google LLC or Google Ireland Limited, depending on how the provider manages data processing (“Google”).
Google uses the collected data to track and analyze how this website is used, to compile reports on its activity, and to share this information with other Google services.
Google may use the collected data to contextualize and personalize the ads in its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in a data center or on a server. Users can learn more by consulting Google’s official documentation. Further information on Google’s use of data can be found in Google’s Partner Policy.
Processed personal data: Number of users; latitude (of the city); browser information; device information; longitude (of the city); usage data; session statistics; city; trackers.
Location of processing: United States – Privacy Policy – Opt Out;
Ireland –Privacy Policy – Opt Out.
Category of personal information collected under the CCPA: identifiers; information about activities on the Internet or other digital networks; geolocation data.
This data processing constitutes the following:
- a data sale in California
Display of content from external platforms
Thistype of serviceallowsusers to view and interact with content hosted on external platforms directly through this website.
This type of service may still collect web traffic data for the pages on which the service is installed, even if users do not use it.
YouTube Video Widget (Enhanced Privacy Mode) (Google LLC)
YouTube is a service provided by Google LLC or Google Ireland Limited—depending on how the provider manages data processing—for displaying video content, which allows this website to embed such content on its pages.
According to YouTube, privacy-enhanced mode limits the use of video playback for personalization. It does not mean that no personal data is processed when the embedded player loads.
Processed personal data: usage data; trackers; Universally Unique Identifier (UUID).
Location of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Category of personal information collected under the CCPA: identifiers; information about activities on the Internet or other digital networks.This data processing constitutes the following:
- a data sale in California
YouTube video widget (Google LLC)
YouTube is a service provided by Google LLC or Google Ireland Limited, depending on how the provider manages data processing, for the visualization of video content, which allows this website to embed such content on its pages.
Processed personal data: usage data; trackers.
Location of processing: United States – Privacy Policy; Ireland – Privacy Policy.
Category of personal information collected under the CCPA: Information about activities on the Internet or other digital networks.
This data processing constitutes the following:
- a data sale in California
YouTube Data API (Google LLC)
YouTube Data API is a video service offered by Google LLC or Google Ireland Limited, depending on how the provider manages data processing, through which functions normally available on YouTube can be performed via this website, allowing users to search for, view, and manage YouTube content via this website.
Through this service, this website may collect data directly or indirectly on or from the user’s device, including through the use of trackers. Users can restrict access to their data via Google’s security settings. Users can contact the provider at any time using the contact information provided in this document to request further information regarding privacy settings.
Data collected through the service may also be used by third parties to deliver interest-based advertising. Users can opt out of third-party interest-based advertising via their device settings or through the Network Advertising Initiative’s opt-out page.
Personal data processed: User ID; data transmitted to use the service; usage data; trackers; data transmitted while using the service.
Location of processing: United States – Privacy Policy – Opt-out; Ireland – Privacy Policy – Opt-out.
Categories of personal information collected under the CCPA: Identifiers; information about activities on the Internet or other digital networks.
This data processing involves the following:
- a data sale in California
Hosting and backend infrastructure
These types of services are intended to host data and files so that this website can be managed and used. Furthermore, these services may provide a pre-built infrastructure that handles specific functions or entire components of this website.
Some of the services listed below may, but are not required to, operate via geographically distributed servers, which makes it difficult to determine the actual location where personal data is stored.
Amazon Web Services (AWS) (Amazon Web Services, Inc.)
We use Amazon Web Services (AWS) to host our own web applications, including our 3D viewer. Amazon CloudFront delivers the application files through a globally distributed network.
Loading the application involves processing technical connection data, particularly the IP address and information about the requested resource. Delivering the application is distinct from processing model files opened locally in the browser.
Processing locations: the hosting region and CloudFront’s worldwide delivery locations may differ. Processing is therefore not necessarily limited to Germany. Further information: Privacy Policy.
Category of personal information collected under the CCPA: Information about activities on the Internet or other digital networks.
This data processing involves the following:
- Contacting the user
Contact form (this website)
When you send us an inquiry through a contact form or one of our planning tools, we process your contact details, message and project information to handle your inquiry and communicate with you. Webflow receives the form data. Make forwards it to our inquiry log in Google Sheets and manages the receipt confirmation. We use Microsoft 365 for email.
The same applies to inquiries by email or phone. If your inquiry concerns entering into or performing a contract with you, we process the necessary information under Article 6(1)(b) GDPR. For other business inquiries, particularly when you act on behalf of a company, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is responding to the inquiry and conducting business communications.
Data processed: depending on the form, email address, name, company, website, optional phone number, message and project details. This also includes the form page and, where applicable, referral and campaign information and technical identifiers, as described in the section on inquiry attribution.
Category of personal information collected under the CCPA: identifiers; commercial information.
This data processing constitutes the following:
- Optimization and distribution of data traffic
These types of services allow this website to distribute its content via servers located in various countries and to optimize its performance.
The personal data processed depends on the characteristics and nature of the services, which are designed to filter the communications that take place through this website and the user’s browser.
Given the widespread use of this system, it is difficult to determine the locations to which content containing users’ personal data is transmitted.
Platform Services and Hosting
Theseservices are intended to host and operate key components of this website’s application so that the website can be delivered from a unified platform. Such platforms provide the provider with a wide range of tools—for example, analytics and commenting features, user and database management, e-commerce, and payment processing—which involve the processing of personal data.
Some of these services use geographically distributed servers, making it difficult to determine the location where personal data is stored.
Webflow (Webflow, Inc.)
Webflowis a platform provided by Webflow, Inc. that allows the owner to build, host, and operate this website. Webflow is highly customizable and can host websites with content ranging from simple blogs to complex e-commerce platforms. Our website is hosted by Webflow. The provider is Webflow, Inc., San Francisco, USA. Webflow is certified under the EU-US Data Privacy Framework (DPF), and a Data Processing Agreement (DPA) is in place. For more information, please see Webflow’s Privacy Policy: https://webflow.com/legal/eu-privacy-policy.
Personal data processed: Usage data; trackers.
Location of processing: United States – Privacy Policy – Opt-out.
Category of personal information collected under the CCPA: Information about activities on the Internet or other digital networks.
This data processing involves the following:
- Tag management
Thesetypes of services help the provider centrally manage the tags or scripts required for this website.
As a result, the user’s data flows through these services and may be stored.
Google Tag Manager (Google Ireland Limited)
GoogleTag Manager is a tag management service provided by Google Ireland Limited.
Personal data processed: Trackers. Place of processing: Ireland – Privacy Policy.
Category of personal information collected under the CCPA: Information about activities on the Internet or other digital networks.
This data processing constitutes:
- a sale of personal information in California
Infrastructure monitoring
Thistype of serviceallowsthis websitetomonitor the usage and behavior of its individual components to improve performance, operation, maintenance, and troubleshooting.
The personal data processed depends on the characteristics and nature of the services, which are designed to filter the activities taking place on this website.
Google Tag Manager (Google Ireland Limited)
Google Tag Manager, provided by Google Ireland Limited, manages and triggers website tags. The services integrated through it and their purposes are described separately. Technical connection data may be processed when it is loaded. Google describes HTTP request logs that are deleted within 14 days, as well as aggregated diagnostic data about tag firing.
Personal data processed: various types of data, as described in the service’s privacy policy.
Location of processing: Ireland – https://policies.google.com/privacy.
Google Analytics, including Google Signals and Customer Match (Google Ireland Limited)
Google Analytics is a web analytics service provided by Google Ireland Limited. Google uses the collected data to evaluate the use of this website and to generate reports on website activity. When features such as Google Signals and Customer Match are enabled, additional data (e.g., cross-device usage information, audience profiles, information matched with customer data) may be processed.
Personal data processed: various types of data, as described in the service’s privacy policy (e.g., IP address, device and usage data).
Location of processing: Ireland and, where applicable, other locations worldwide – https://policies.google.com/privacy.
Google Ads Remarketing (Google Ireland Limited)
Google Ads Remarketing is an online advertising service provided by Google Ireland Limited. The service uses cookies and similar technologies to display personalized ads to users who have visited this website on other websites or in other apps.
Personal data processed: various types of data, as described in the service’s privacy policy.
Processing location: Ireland and, where applicable, other locations worldwide – https://policies.google.com/privacy.
Meta Pixel (Meta Platforms Ireland Limited)
Meta Pixel is an analytics service provided by Meta Platforms Ireland Limited. The pixel makes it possible to track the effectiveness of advertising campaigns by measuring user actions after clicking on a Facebook or Instagram ad. Data is also used to optimize ads and target audiences.
Personal data processed: various types of data, as described in the service’s privacy policy (e.g., IP address, device information, user actions).
Location of processing: Ireland – Meta Privacy Policy – How Meta collects and uses user data | Privacy Center | Manage your privacy on Facebook, Instagram, and Messenger | Facebook Privacy.
Cookiebot (Consent Management)
Purpose: We use the consent management tool “Cookiebot” to obtain and manage the legally required consents for the use of cookies and tracking technologies.
Data Processed: IP address, date and time of consent, browser information, an anonymized, randomly generated key (Consent ID), and the consent status. This data is stored in a technically necessary cookie (CookieConsent).
Legal Basis: Processing is carried out to fulfill a legal obligation pursuant to Art. 6(1)(c) GDPR in conjunction with § 25(2) TDDDG (proof of consent granted).
Provider: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
For more information on data protection at Cookiebot, see: https://www.cookiebot.com/de/privacy-policy
Weglot (Website Translation)
Purpose: To offer our website in multiple languages, we use the Weglot translation service. The tool detects your browser’s preferred language and provides the corresponding translated content.
Data Processed: IP address, browser language used, URL accessed, and technical cookies to store the selected language.
Legal Basis: Use is based on our legitimate interest in providing our website in an error-free and user-friendly manner to an international (B2B) audience in accordance with Art. 6(1)(f) of the GDPR.
Provider: Weglot SAS, 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France.
For more information on data protection at
Weglot, please visit: https://weglot.com/privacy
VideoAsk (Interactive Contact Form)
Purpose: We integrate the VideoAsk tool into our website to offer you an interactive and personalized way to contact us (e.g., for project inquiries) via video, audio, or text.
Data Processed: IP address, device information, usage data, and all data (name, email, video messages, text messages) that you voluntarily enter into the widget.
Legal Basis: If cookies or tracking technologies are used, this is based on your consent (Art. 6(1)(a) GDPR). If you use the tool to initiate a contract, the legal basis is Article 6(1)(b) of the GDPR (precontractual measures).
Provider: Typeform S.L., C/ Can Rabia 3-5, 4th floor, 08017 Barcelona, Spain.
For more information on data protection at VideoAsk / Typeform, please visit: https://www.typeform.com/help/a/privacy-policy-360029564271
Ahrefs Analytics (Website Analytics)
Purpose: We use Ahrefs Analytics to evaluate our website’s performance and for search engine optimization (SEO). The tool collects aggregated data on visitor behavior on our website without creating individual profiles.
Data Processed: IP address (usually processed in an anonymized form), pages viewed, referrer URLs, and time spent on the site.
Legal Basis: The use of this analytics tool is based solely on your prior, explicit consent in accordance with Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You can revoke this consent at any time via our consent banner (Cookiebot).
Provider: Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581.
For more information on data protection at Ahrefs, please visit: https://ahrefs.com/privacy
Server-side tracking (Stape)
Purpose: We use server-side tagging through Stape and the subdomain sst.danthree.studio to transmit analytics and marketing events. Data is first sent to this infrastructure and then, depending on the configured tags, to the relevant analytics or advertising services.
Data processing: Server-side tagging alone does not anonymize personal data or rule out transfers to other providers. Depending on the event, technical connection data, device and usage data, and identifiers may be processed.
Legal Basis: The use of server-side tracking and the underlying analytics tools is based on your consent (Art. 6(1)(a) GDPR) via our cookie banner.
Server Hosting Provider: Stape Europe OÜ, Sepapaja 6, Tallinn 15551, Estonia (Data processing takes place on servers within the European Union).
For more information on data protection at Stape, please visit: https://stape.io/privacy-policy
Microsoft Clarity
We use Microsoft Clarity to analyze website usage and improve usability. Clarity collects information including page views, clicks, scrolling, technical device and browser information, and user and session identifiers. Interaction data and the way pages are displayed are used to create heatmaps and session replays. This processing is not equivalent to fully anonymous statistics.
Our tag configuration enables Clarity only with consent to statistics. The legal basis for this analysis is Article 6(1)(a) GDPR. Section 25(1) TDDDG applies to storage and access on your device that require consent. You can withdraw your consent at any time, with future effect, through the cookie settings in the footer.
Microsoft identifies Microsoft Ireland Operations Limited as the contracting entity for EU customers. Processing by Microsoft Corporation in the United States is possible. Microsoft describes Standard Contractual Clauses between the entities concerned for this purpose. According to current Clarity documentation, replay data is stored for 30 days, while tagged or favorited sessions and heatmap and click data are stored for nine months.
Further information: Clarity data retention, Clarity privacy information and Microsoft Privacy Statement.
Social Media:
We maintain online presences on the following social networks:
Facebook (Meta Platforms Ireland Ltd.)
Instagram (Meta Platforms Ireland Ltd.)
LinkedIn (LinkedIn Ireland Unlimited Company)
Pinterest (Pinterest Europe Ltd.)
When you visit our social media pages, personal data is processed by the platform operators. To the extent applicable, we are joint controllers with Meta (Facebook, Instagram) pursuant to Art. 26 of the GDPR (Joint Controller Addendum).
Category of personal information collected under the CCPA: Identifiers. This data processing constitutes the following:
Cookie Policy
Thiswebsite uses trackers. Further information can be found in the Cookie Policy.
Additional Information for Users
Legal Bases for Processing
Theprovider may only process users’ personal data if one of the following applies:
- Users have given their consent for one or more specific purposes.
- The data collection is necessary for the performance of a contract with the user and/or for pre-contractual measures arising therefrom;
- Processing is necessary for compliance with a legal obligation to which the provider is subject;
- Processing is related to a task carried out in the public interest or in the exercise of official authority vested in the provider;
- Processing is necessary to safeguard the legitimate interests of the provider or a third party.
In any case, the Provider will be happy to provide information regarding the specific legal basis on which the processing is based, in particular whether the provision of personal data constitutes a statutory or contractual obligation or a prerequisite for entering into a contract.
Further information on the retention period
Unlessotherwise specified in this document, personal data will be processed and stored for as long as required by the purpose for which it was collected and may, if necessary, be retained for a longer period due to a legal obligation that must be fulfilled or based on the user’s consent.
Therefore, the following applies:
- Personal data collected for the purpose of fulfilling a contract concluded between the provider and the user will be stored until the contract has been fully fulfilled.
- Personal data collected to safeguard the provider’s legitimate interests will be retained for as long as necessary to fulfill these purposes. Users can obtain further information about the provider’s legitimate interests in the relevant sections of this document or by contacting the provider.
In addition, the provider is permitted to store personal data for a longer period if the user has consented to such processing, as long as the consent is not revoked. Furthermore, the provider may be required to retain personal data for a longer period if this is necessary to comply with a legal obligation or pursuant to an order from a government authority.
Unless a more specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was processed no longer applies or until you submit a valid request for deletion. Statutory retention periods (e.g., under commercial or tax law) remain unaffected.
You can exercise your data protection rights regardless of whether a stated retention period has expired. Whether and to what extent we can comply with a request depends on the applicable legal conditions and the data we still process. We cannot provide data that has already been completely deleted.
Users’ rights under the General Data Protection Regulation (GDPR)
Users may exercise certain rights regarding their data processed by the provider.In particular, to the extent permitted by law, users have the right to do the following:
Withdraw their consent at any time (Art. 7(3) GDPR).
If the user has previously consented to the processing of personal data, they may withdraw their consent at any time.
- Object to the processing of their data (Art. 21 GDPR). The user has the right to object to the processing of their data if the processing is based on a legal basis other than consent.
- Obtain information regarding their data. The user has the right to know whether the provider is processing their data, to receive information about specific aspects of the processing, and to receive a copy of the data.
- Have their data verified and corrected. The user has the right to verify the accuracy of their data and to request that it be updated or corrected.
- Request restriction of the processing of their data (Art. 18 GDPR). Users have the right to restrict the processing of their data. In this case, the provider will not process the data for any purpose other than storage.
- Request erasure or other removal of personal data. Users have the right to request that the provider erase their data.
- Receive their data and have it transferred to another controller (Art. 20 GDPR). Users have the right to receive their data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transmitted without hindrance to another controller.
Competent supervisory authority
The competent data protection supervisory authority for Baden-Württemberg is the
State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BW) Mailing address: P.O. Box 10 29 32, 70025 Stuttgart
Street address: Lautenschlagerstraße 20, 70173 Stuttgart
Phone: +49 (0)711 61 55 41-0
Fax: +49 (0)711 61 55 41-15
Email: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de
Data subjects have the right to lodge a complaint with this supervisory authority at any time.
Users also have the right to receive information about the legal basis for the transfer of data abroad or to an international organization governed by international law or established by two or more countries, such as the UN, as well as about the security measures taken by the provider to protect their data.
Details on the Right to Object to Processing
If personal data is processed in the public interest, in the exercise of official authority vested in the provider, or to safeguard the provider’s legitimate interests, the user may object to such processing by providing a justification based on his or her specific situation.
Users are informed that they may object to the processing of their personal data for direct marketing purposes at any time, free of charge, and without providing a reason. If the user objects to processing for direct marketing purposes, the personal data will no longer be processed for those purposes. Users can determine whether the provider processes personal data for direct marketing purposes by referring to the relevant sections of this document.
How to Exercise Your Rights
All requests to exercise user rights may be directed to the owner using the contact information provided in this document. These requests may be submitted free of charge and will be answered by the provider as soon as possible—no later than one month—and the information required by law will be provided to users. The provider will notify all recipients to whom personal data has been disclosed—if any—of any correction or deletion of personal data or any restriction on processing, unless this proves impossible or involves a disproportionate effort. The provider will inform the user about these recipients if the user requests it.
Source of your request
With your consent to statistics, we store the first page you visited and the referring page in your browser. This helps us understand how prospective clients find us.
We store and transmit advertising and campaign identifiers only with your marketing consent. We include an existing Stape user identifier in the form only if you have consented to both statistics and marketing.
Without the relevant consent, these additional attribution fields remain empty. The current form page is still transmitted for routing and language selection. Our own source_url field contains no URL parameters.
Webflow may also collect its own technical submission data, including the full address of the form page. Removing parameters from our source_url field does not remove this information from Webflow’s own metadata.
When you submit a form, the referral information it contains is processed with your inquiry through Webflow and Make in our inquiry log in Google Sheets. It may also appear in notifications sent through Microsoft 365. This helps us understand where inquiries come from.
The referral and campaign values we store in your browser are used for no longer than 90 days. They are removed on your next visit after that period expires. Our website code cannot delete them if you do not return.
You can change your choice at any time through the cookie settings in the footer. If you withdraw consent, our attribution script removes the associated values it stored in your browser as soon as the updated choice is available. You can also delete them through your browser settings. Processing based on consent relies on Article 6(1)(a) GDPR and, for storage and access on your device, section 25(1) of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG).
Additional Information for Users in the United States
This section of the document integrates with and supplements the information contained in the rest of the privacy policy and is provided by the company operating this Website and, where applicable, its parent company, subsidiaries, and affiliates (referred to collectively as “we,” “us,” and “our” for the purposes of this section).The information contained in this section applies to all Users (referred to below simply as “you,” “your,” “yours”) who are residents of the following states: California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, and Montana.
For such Users, this information supersedes any other potentially divergent or conflicting provisions contained in the privacy policy.
This part of the document uses the term “Personal Information.”
Notice at Collection
The following Notice at Collection provides you with timely notice regarding the categories of Personal Information collected or disclosed in the past 12 months so that you can exercise meaningful control over our use of that Information.While this categorization of Personal Information is primarily based on California privacy laws, it can also be helpful for anyone who is not a California resident to gain a general understanding of the types of Personal Information that are collected.
- Identifiers
Personal Information collected or disclosed: First Name, Last Name, Company Name, Email, User ID, Usage Data, Trackers, Universally Unique Identifier (UUID), Number of Users, City, Device Information, Session Statistics, Latitude (of the city), Longitude (of the city), browser information, data transmitted while using the service, data transmitted for the purpose of using the service, various types of data as described in the service’s privacy policy
Purposes:
- Contacting the user
- Displaying content from external platforms
- Analytics
- Monitoring the infrastructure Retention period: for the time necessary to fulfill the purpose
Sold or Shared: Yes
Targeted Advertising: Yes
Third parties: Google LLC, Datadog, Inc.
Service providers or contractors: this Website - Commercial information
Personal Information collected or disclosed: First Name, Last Name, Company Name, Email, User ID
Purposes:
- Contacting the user
Retention period: for the time necessary to fulfill the purpose
Sold or Shared:Yes Targeted Advertising: Yes
Service providers or contractors: this Website
- Internet or other electronic network activity information
Personal Information collected or disclosed: Trackers, usage data, various types of data as described in the service’s privacy policy, Universally Unique Identifier (UUID), number of users, city, device information, session statistics, latitude (of the city), longitude (of the city), browser information, data transmitted while using the service, data transmitted to use the service, user ID
Purposes:
- Tag management
- Displaying content from external platforms
- Analytics
- Platform services and hosting
- Hosting and backend infrastructure
- Traffic optimization and distribution
Retention period: for the time necessary to fulfill the purpose
Sold or Shared: Yes
Targeted Advertising: Yes
Third parties: Google Ireland Limited, Webflow, Inc., Amazon Web Services, Inc., Google LLC, jsdelivr.com
- Geolocation data
Personal Information collected or disclosed: Tracker, usage data, number of users, city, device information, session statistics, latitude (of the city), longitude (of the city), browser information
Purposes:- Analytics
Retention period: for the time necessary to fulfill the purpose
Sold or Shared: Yes
Targeted Advertising: Yes
Third parties: Google LLC
You can find the definitions of these terms in the“Definitions and Legal References” sectionof the privacy policy.
To learn more about your rights, particularly regarding opting out of certain processing activities, please refer to the“Your Privacy Rights Under U.S. StateLaws” section of our privacy policy.
Formore details on the collection of Personal Information, please read the section“Detailed Information on the Processing of Personal Data”in our privacy policy.
We will not process your information for unexpected purposes, or for purposes that are not reasonably necessary for and compatible with the purposes originally disclosed, without your consent.
Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Where possible, we specify clear retention periods by category of personal data: - Customer contact information (e.g., name, address, email, phone): retained for 10 years after the end of the contractual relationship in order to comply with statutory record-keeping and statute-of-limitations periods.
- Contract and transaction data: retained for 10 years in accordance with statutory commercial and tax retention obligations.
- Marketing data (e.g., newsletter sign-ups, tracking data): retained for 3 years after the last interaction, unless you withdraw your consent earlier.
- Website usage data and technical logs: retained for up to 2 years, unless a longer retention period is required for security, compliance, or dispute resolution.
- Other personal data: retained only for as long as required by the specific purpose for which it was collected.
- After the applicable retention period has expired, we will delete or anonymize the relevant personal data, unless further retention is required by law or for the establishment, exercise, or defense of legal claims.
Sensitive and Special Category Data
Certain types of personal information are considered particularly sensitive and are subject to enhanced protection under applicable privacy laws.
Under the EU General Data Protection Regulation (GDPR), we may process special categories of personal data only under strict conditions (for example, with your explicit consent or where another legal basis applies). These special categories include:
- Racial or ethnic origin
- Religious or philosophical beliefs
- Health data (including mental or physical conditions and diagnoses)
- Sexual orientation or sex life
- Genetic data
- Biometric data used for the purpose of uniquely identifying an individual
Under certain U.S. state privacy laws (such as those in Virginia, Colorado, Connecticut, Oregon, and New Jersey), the term “sensitive personal data” also covers the above categories and, in addition, may include:
- Precise geolocation data
- Citizenship or immigration status
- Personal data collected from a known child (under 13 under U.S. federal law, or under 16 under certain state laws)
We do not use sensitive or special category data for targeted advertising, sale, or profiling that produces legal or similarly significant effects without your consent. Where required by law, we will request your consent (or, in the case of children’s data, the consent of a parent or legal guardian) before processing this type of data.
What are the sources of the Personal Information we collect?
We collect the above-mentioned categories of Personal Information, either directly or indirectly, from you when you use this Website. For example, you directly provide your Personal Information when you submit requests via any forms on this Website.
You also provide Personal Information indirectly when you navigate this Website, as Personal Information about you is automatically observed and collected.
Finally, we may collect your Personal Information from third parties that work with us in connection with the Service or with the functioning of this Website and its features.
Your privacy rights under U.S. state laws
You may exercise certain rights regarding your Personal Information. In particular, to the extent permitted by applicable law, you have:
- the right to access Personal Information: the right to know. You have the right to request that we confirm whether or not we are processing your Personal Information. You also have the right to access such Personal Information;
- the right to correct inaccurate Personal Information. You have the right to request that we correct any inaccurate Personal Information we maintain about you;
- the right to request the deletion of your Personal Information. You have the right to request that we delete any of your Personal Information;
- the right to obtain a copy of your Personal Information. We will provide your Personal Information in a portable and usable format that allows you to easily transfer the data to another entity—provided that this is technically feasible;
- the right to opt out of the sale of your Personal Information; We will not discriminate against you for exercising your privacy rights.
- the right to non-discrimination.
- The right to appeal: If we deny your request to exercise any of your privacy rights, you have the right to appeal that decision. You may do so within 30 days of receiving our denial by contacting us using the contact details provided in this Privacy Policy and clearly stating that you wish to appeal. We will review your appeal and respond in writing within 60 days (or a shorter period if required by applicable law). Our response will include the outcome of the appeal and the reasons for our decision. If your appeal is denied, we will provide you with information on how to contact your state Attorney General or other applicable supervisory authority to file a complaint.
Additional rights for Users residing in California
In addition to the rights listed above that apply to all Users in the United States, as a User residing in California, you have
- The right to opt out of the sharing of your Personal Information for cross-context behavioral advertising;
- The right to request that we limit our use or disclosure of your Sensitive Personal Information to only that which is necessary to perform the services or provide the goods, as reasonably expected by an average consumer. Please note that certain exceptions outlined in the law may apply, such as when the collection and processing of Sensitive Personal Information is necessary to verify or maintain the quality or safety of our service.
Additional rights for Users residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, and Montana
In addition to the rights listed above that are common to all Users in the United States, as a User residing in Virginia, Colorado, Connecticut, Texas, Oregon, Nevada, Delaware, Iowa, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, and Montana, you have
- The right to opt out of the processing of your personal information for targeted advertising or profiling in connection with decisions that produce legal or similarly significant effects concerning you;
- The right to freely give, deny, or withdraw your consent for the processing of your sensitive personal information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of sensitive personal information is necessary for the provision of a product or service specifically requested by the consumer.
In Minnesota, users also have the right to obtain a list of the specific third parties to which the controller has disclosed the consumer’s personal data
* Note that in some states, such as Minnesota, you have the following specific rights related to profiling:- The right to challenge the results of the profiling;
- The right to be informed of the reason the profiling led to the decision; if feasible,
- The right to be informed of what actions the consumer could have taken to secure a different decision and the actions the consumer could take to secure a different decision in the future; - The right to review the personal data used in the profiling;
- If inaccurate, the right to have the data corrected and the profiling decision reevaluated based on the corrected data;
Additional rights for users residing in Utah and Iowa
In addition to the rights listed above that are common to all Users in the United States, as a User residing in Utah and Iowa, you have
- The right to opt out of the processing of your Personal Information for targeted advertising;
- The right to opt out of the processing of your Sensitive Personal Information. Please note that certain exceptions outlined in the law may apply, such as, but not limited to, when the collection and processing of Sensitive Personal Information is necessary for the provision of a product or service specifically requested by the consumer.
How to exercise your privacy rights under U.S. state laws
Toexercise the rights described above, you must submit your request to us by contacting us using the contact information provided in this document.
In order for us to respond to your request, we must know who you are. We will not respond to any request if we are unable to verify your identity and, therefore, confirm that the Personal Information in our possession pertains to you. You are not required to create an account with us to submit your request. We will use any Personal Information collected from you in connection with the verification of your request solely for verification purposes and shall not further disclose the Personal Information, retain it longer than necessary for verification purposes, or use it for unrelated purposes.
If you are an adult, you can make a request on behalf of a child under your parental authority.
How to exercise your rights to opt out
In addition to what is stated above, to exercise your right to opt out of the Sale or Sharing of your personal information and Targeted Advertising, you can also use the privacy choices link provided on this Website.
If you wish to submit requests to opt out of the sale or sharing of your personal information and targeted advertising activities via a user-enabled global privacy control, such as the Global Privacy Control (“GPC”), you are free to do so, and we will comply with such requests seamlessly.
How and when we are expected to handle your request
We will respond to your request without undue delay, but in all cases within the timeframe required by applicable law. If we need more time, we will explain to you the reasons why and how much additional time we need.
If we deny your request, we will explain the reasons for our denial (where permitted by applicable law, you may then contact the relevant authority to file a complaint).
We do not charge a fee to process or respond to your request unless such request is manifestly unfounded or excessive, or in any other cases where permitted by applicable law. In such cases, we may charge a reasonable fee or refuse to act on the request. In either case, we will communicate our decisions and explain the reasons behind them.
Further information on the collection and processing of data
Legal actions
The user’s personal data may be processed by the provider for the purposes of law enforcement within or in preparation for legal proceedings arising from the improper use of this website or the associated services.
The user acknowledges that the provider may be required by authorities to disclose personal data.
Additional Information Regarding the User’s Personal Data
In addition to the information provided in this Privacy Policy, this website may, upon request, provide the user with further context-specific information regarding specific services or the collection and processing of personal data.
System Logs and Maintenance
This website and third-party services may, for operational and maintenance purposes, collect files that record interactions occurring through this website (system logs) or use other personal data (e.g., IP address) for this purpose.
Information Not Included in This Privacy Policy
Furtherinformation regarding the collection or processing of personal data may be requested from the provider at any time using the contact information provided.
Changes to This Privacy Policy
Theprovider reserves the right to make changes to this privacy policy at any time by informing users on this page and, if necessary, via this website and/or—to the extent technically and legally possible—by sending a notification to the users’ contact information on file with the provider. Users are therefore advised to visit this page regularly and, in particular, to check the date of the last update indicated at the bottom of the page.
If changes affect data usage based on the user’s consent, the provider will—where necessary—obtain new consent.
Definitions and Legal Notices
Personal Data (or Data) / Personal Information (or Information)
Anyinformation that, either directly or in combination with other information, identifies or can identify a natural person.
Sensitive Personal Information
Sensitivepersonal information is personal information that is not publicly available and contains information that is considered sensitive under applicable data protection laws.
Usage Data
Informationthat this website (or third-party services used by this website) collects automatically, such as: the IP addresses or domain names of users’ computers accessing this website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to submit the request to the server, the size of the response file received, the numeric code indicating the status of the server’s response (successful, error, etc.), the country of origin, the features of the browser and operating system used by the user, various time-related data per visit (e.g., how much time was spent on each page of the application), and information about the path followed within an application—in particular, the sequence of pages visited—as well as other information about the device’s operating system and/or the user’s IT environment.
User
Theperson using this website, who, unless otherwise specified, is the same as the data subject.
Data Subject
Thenatural person to whom the personal data relates.
Processor (or data processor)
A naturalor legal person, public authority, agency, or other body that processes personal data on behalf of the controller, as described in this Privacy Policy.
Data Controller (or Provider, sometimes also Owner)
The natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data, as well as the measures used for this purpose, including security measures regarding the operation and use of this website. Unless otherwise specified, the data controller is the natural or legal person through whom this website is provided.
This website (or this application)
The hardware or software tool used to collect and process the user’s personal data.
Service
The service offered by this website, as described in the applicable Terms of Service (if any) and on this website/application.
Data Sale
“Data sale” refers to any exchange of personal information by the owner to a third party in exchange for money or other valuable consideration, as defined by applicable state data protection law. Please note that the exchange of personal information with a service provider under a written contract that meets the requirements of applicable law does not constitute a sale of your personal information.
Data Sharing
Data sharing means any transfer, rental, release, disclosure, dissemination, provision, transmission, or other oral, written, electronic, or other transmission of a consumer’s personal information by the Company to a third party for cross-context behavioral advertising, whether in exchange for money or other valuable consideration, including transactions between the Company and a third party for cross-context behavioral advertising on behalf of the Company in which no money is exchanged, as defined in California privacy laws. Please note that the sharing of personal information with a service provider under a written contract that meets the requirements of California privacy laws does not constitute a disclosure of your personal information.
Targeted Advertising
Targeted advertising means displaying advertisements to a consumer that are selected based on personal information derived from the consumer’s activities over time and across non-affiliated websites or online applications to predict the consumer’s preferences or interests, as defined by applicable state privacy law.
European Union (or EU)
Unless otherwise specified, all references in this document to the European Union refer to all current member states of the European Union and the European Economic Area (EEA).
Cookie
Cookies are trackers consisting of a small data file stored in the user’s browser.
Trackers
The term “tracker” refers to any technology—e.g., cookies, unique identifiers, web beacons, embedded scripts, e-tags, or fingerprinting—that can be used to track users, for example, by enabling access to or the storage of information on the user’s device.
Legal Notice
This Privacy Policy was drafted based on provisions of various laws.
This Privacy Policy applies exclusively to this website, unless otherwise specified in this document.
Last updated: September 28, 2026
