Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation is:
Viktoriia Moshkivska
Im Gensem 28, 53225 Bonn
Email: [email protected]

2. General information on data processing

We process personal data only where this is necessary for the operation of this website, for communication with visitors, for handling business enquiries, for initiating and performing business relationships, and for providing our services.

We process personal data in accordance with the requirements of the General Data Protection Regulation and other applicable data protection law.

3. Hosting, domain, media and server log files

This website is provided via Cloudflare Pages (Cloudflare, Inc.) and further services of Cloudflare, Inc.

When our website is accessed, Cloudflare processes technically necessary connection data. This may include in particular the IP address, the date and time of the request, the resource requested, the HTTP status code, the referrer, and browser and device information, in so far as these are transmitted technically.

The processing takes place in order to deliver the website, to ensure its security, to defend against attacks and to enable technically stable operation.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our online offering.

The domain and DNS infrastructure of our website is also operated via Cloudflare.

Larger self-hosted media files are delivered via our media domain media.eierkuchendepartment.com, which uses Cloudflare R2. The technically necessary connection data is processed in the course of this. These self-hosted media files do not establish any connection to an external video service.

Incoming emails to our domain may be forwarded via Cloudflare Email Routing. In doing so, Cloudflare processes the communication data required for the technical forwarding.

Further information can be found in the Cloudflare privacy policy.

4. Contacting us and project enquiries

If you contact us by email, we process the information you send us in order to handle and answer your enquiry and to prepare for possible cooperation.

The legal basis is Art. 6(1)(b) GDPR, in so far as your contact serves to initiate or perform a contractual relationship.

In other cases the processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business communication addressed to us.

If you use the enquiry form on our website, we process the information you enter there.

This includes in particular your name, email address, information about the product and the project, the desired form of cooperation, the number of videos and the time frame.

Where provided voluntarily, we also process information about your company or brand, website or social media profile, budget, and how you became aware of us.

We use this information exclusively to handle your enquiry, to prepare for possible cooperation and for the related communication.

Consent is generally not required for this.

The technical transmission of the form takes place via our infrastructure operated at Cloudflare.

SMTP2GO may additionally be used to send the email notifications generated by the form. Further information on this is set out in section 5.

The enquiry is then delivered to our business email accounts, which are operated via Gmail by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

In doing so, Google processes the content of the communication as well as the technical data required to provide the email service.

We store enquiries for as long as this is necessary for handling them and for possible follow-up communication.

If cooperation comes about, the further storage period is governed by the contractual relationship and by statutory retention obligations.

If no cooperation comes about, we delete the data as soon as the matter is concluded and no statutory or other legitimate grounds require further storage.

5. Email delivery via SMTP2GO

We use SMTP2GO for the technical delivery of certain business emails.

SMTP2GO is a service of
Sand Dune Mail Ltd
96-106 Manchester Street
Christchurch 8011
New Zealand

SMTP2GO may be used in particular to send notifications from our contact form and for the technical delivery of outgoing business emails.

In the course of this, the sender and recipient addresses, subject, message content, email headers, delivery status and further technical data required for delivery and security may be processed.

The processing takes place in order to deliver our business communication and to ensure reliable email delivery.

The legal basis is Art. 6(1)(b) GDPR, in so far as the communication serves to initiate or perform a contract.

In other cases the processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in reliable and secure business communication.

According to its own information, SMTP2GO provides European infrastructure with a data centre in Amsterdam for customers in Europe and offers a data processing agreement.

The provider Sand Dune Mail Ltd is based in New Zealand. An adequacy decision of the European Commission under Art. 45 GDPR exists for New Zealand.

SMTP2GO may engage further sub-processors in order to provide its services. In so far as processing takes place in a third country, it is carried out in accordance with the applicable data protection requirements.

Further information is available in the SMTP2GO privacy policy at smtp2go.com/privacy/.

6. Business communication and business development

In the course of our business activity we may process the business contact details of contact persons at companies.

This may include in particular name, professional role, company, business email address, and information about the business context and the source of the contact.

In so far as we do not receive this information directly from the data subject, it may originate from publicly accessible professional sources, for example company websites, publicly accessible job advertisements, professional networks or other business publications.

The processing takes place for the purpose of identifying suitable business contacts, of business development and of communication about possible cooperation.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in developing and maintaining business relationships.

In so far as contact has a promotional character, it takes place exclusively within the requirements of the applicable competition law. The data protection legal basis does not replace any consent required under competition law.

We do not carry out any automated decision-making with legal effect regarding such contacts.

Personal data for business development is not stored for longer than is necessary for the respective business purpose.

If you object to processing for direct marketing purposes, we will no longer use your data for that purpose. Where necessary, minimal contact data may remain stored so that a declared objection can be permanently observed.

7. YouTube videos

Videos from YouTube may be embedded on this website.

When a page containing such a video is first opened, only a locally stored preview image is displayed. At that point no connection to YouTube is established.

Only when you expressly click “Load YouTube video” is the external video activated and a connection to YouTube or Google servers established.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As a result of the activation, your IP address, browser information and further technical data in particular may be transmitted to Google or YouTube.

Processing may also take place outside the European Economic Area.

For embedded videos we use the privacy-enhanced domain youtube-nocookie.com in so far as this is technically provided for. However, this does not necessarily prevent every processing of personal data.

The legal basis for the activation is your voluntary consent under Art. 6(1)(a) GDPR.

In so far as YouTube stores information on your device or reads information already stored there, this likewise takes place on the basis of your consent under § 25 Abs. 1 TDDDG.

Your consent is given only by the deliberate click on “Load YouTube video”.

The activation is not stored permanently by our website and applies only to the respective page view. You can therefore reset your decision by reloading the page.

Further information can be found in the Google privacy policy.

8. Local fonts

Our website uses locally embedded fonts.

The font files used are provided via our own website infrastructure.

When the fonts are loaded, no connection is established to Google Fonts or to any other external font provider.

9. Cookies and similar technologies

Prior to an express interaction with an external service, our website does not use any non-essential cookies or comparable storage technologies.

We currently do not use any analytics, marketing or tracking cookies.

For this reason no general cookie consent banner is currently required.

If the technologies used change, this privacy policy will be adapted accordingly and, where necessary, a consent solution will be introduced.

10. Legal bases

Depending on the processing operation, we base the processing of personal data in particular on the following legal bases:

• Art. 6(1)(a) GDPR where consent has been given voluntarily.
• Art. 6(1)(b) GDPR for pre-contractual measures and for the performance of a contract.
• Art. 6(1)(f) GDPR for legitimate interests, in particular for the secure operation of the website, the handling of business communication and business development.

In so far as information is stored on a device or read from it, the requirements of the TDDDG apply in addition.

11. Storage period

We store personal data only for as long as this is necessary for the respective processing purpose.

In addition, statutory retention obligations may make longer storage necessary.

Where processing is based on consent, we delete the data concerned or cease the processing if the consent is withdrawn and no other legal basis exists for further processing.

In the case of a justified objection to direct marketing, we cease the corresponding promotional processing.

12. Recipients and processors

In the course of operating our website and our business communication, the following providers in particular may receive personal data or process it on our behalf:

• Cloudflare, Inc. for hosting, domain and DNS infrastructure, media delivery, technical provision of the website and email forwarding.
• Sand Dune Mail Ltd or SMTP2GO for the technical delivery of certain emails.
• Google Ireland Limited for the Gmail accounts we use.
• Google Ireland Limited or YouTube, only after the express activation of an embedded YouTube video.

Beyond this we transmit personal data only where this is necessary for handling an enquiry, for the performance of a contract, for compliance with a legal obligation, or on the basis of another statutory legal basis.

13. Transfers to third countries

Some of the providers we use operate internationally.

Cloudflare is a US provider and may process personal data within its global network outside the European Economic Area as well.

Google may likewise process personal data outside the European Economic Area, in particular when Gmail is used and after the express activation of a YouTube video.

In so far as personal data is transferred to the USA or to other third countries, this takes place on the basis of the applicable data protection mechanisms, in particular an adequacy decision of the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Sand Dune Mail Ltd is based in New Zealand. An adequacy decision of the European Commission exists for New Zealand.

A data transfer to a third country does not mean that personal data is in fact processed outside the European Economic Area during every individual use.

14. Rights of data subjects

Within the statutory requirements you have in particular the right to information about the data stored about you.

You have the right to rectification of inaccurate personal data.

Under the statutory requirements you can request the erasure of your data.

You can request a restriction of processing.

Where the statutory requirements are met, you have a right to data portability.

You can object to processing that is based on Art. 6(1)(f) GDPR.

Where personal data is processed for the purpose of direct marketing, you have the right to object at any time to processing for that purpose.

You can withdraw consent you have given at any time with effect for the future.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

To exercise your rights you can contact us at the email address given above.

15. SSL and TLS encryption

Our website is provided via an encrypted HTTPS connection.

This protects the transmission between your browser and our website.

An HTTPS connection does not, however, prevent subsequent processing by services that you expressly activate yourself or that are necessary for handling your enquiry or our business communication.

16. Status and changes to this privacy policy

Last updated: August 2026

We adapt this privacy policy when our website, the services we use or the legal requirements change substantially.