Privacy Policy
1. Data controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Natalia, duck.ink, Friesenstraße 21, 28203 Bremen, Germany, email: hello@duck-ink.de. As the controller, we decide on the purposes and means of processing your personal data and are responsible for it under the GDPR — this responsibility cannot and will not be disclaimed.
2. Contact form
If you send us inquiries via the contact form, we process the data you provide there (name, email address, optionally phone number, your message) solely to process your inquiry and for follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing incoming inquiries). Providing this data is voluntary, but without it we cannot process your inquiry.
3. Retention period
We generally store contact-form inquiries for 12 months from receipt and then delete them automatically, unless a contractual relationship results from them or a legal retention obligation (e.g. under commercial or tax law) applies. The legal basis for this storage limitation is Art. 5(1)(e) GDPR. Earlier deletion at your request is possible at any time (see "Your rights").
4. Cookies and consent
This website uses cookies. Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR. Cookies for statistics and marketing purposes (see below) are only set with your consent under Art. 6(1)(a) GDPR in conjunction with § 25(1) TTDSG. Until you consent, these services stay inactive (Google Consent Mode, default "denied"). You can withdraw your consent at any time via the cookie banner or the "Cookie settings" link in the footer.
5. Google Analytics
Subject to consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of your use of the website. The information generated may also be transmitted to Google servers outside the EU/EEA (including in the US). More information: https://policies.google.com/privacy.
6. Google Ads and conversion tracking
Subject to consent, we use Google Ads to draw attention to our services via ads on external websites, and Google's conversion tracking to determine whether a specific action (e.g. submitting the contact form) occurred. The provider is Google Ireland Limited; data may be transferred to Google LLC (USA). More information: https://policies.google.com/privacy.
7. Meta Pixel (Facebook/Instagram)
Subject to consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland) to measure the effectiveness of our advertising. Data may be transferred to Meta Platforms, Inc. (USA) in this context. More information: https://www.facebook.com/privacy/policy/.
8. Hosting and other processors
This website is hosted by Vercel Inc.; the servers running our application and our database (Neon, Postgres hosting) are pinned to the EU region Frankfurt am Main. For email notifications about new contact inquiries we optionally use Resend. Data processing agreements under Art. 28 GDPR are in place with all processors. Server-side, technical data (including IP address, time of access) is automatically processed in server logs, which is necessary for secure and stable operation of the website (Art. 6(1)(f) GDPR).
9. Your rights
You have the right, at any time, to access (Art. 15 GDPR), rectify (Art. 16), erase (Art. 17), restrict the processing of (Art. 18), receive a copy of (Art. 20), and object to the processing of (Art. 21) your personal data. Any consent given can be withdrawn at any time with future effect. You also have the right to lodge a complaint with a data protection supervisory authority — the competent authority is the Data Protection and Freedom of Information Commissioner of the Free Hanseatic City of Bremen.