Privacy Notice

1. Controller
247Studio Munich
Owner: Stefan Imielski
Frankfurterring 247
80807 Munich, Germany
Phone: +49 155 666 14 450
Email: info@247studio.de

2. General Information on Data Processing
We take the protection of your personal data very seriously. Your personal data is processed in accordance with the GDPR and other applicable data protection regulations.

We only process data necessary to provide our website, process bookings and payments, and communicate with our customers.

3. Collection and Storage of Personal Data
We process the following data when you use our website or booking system:
- Name, company, address, phone number, email
- Booking and payment details (date, time, service, payment status)
- Technical information (IP address, browser, OS, access time, referrer)
- Consent and cookie preferences

4. Purpose and Legal Basis of Processing
Data is processed on the following legal bases:
- Art. 6(1)(b) GDPR: performance of a contract (bookings, payments)
- Art. 6(1)(a) GDPR: consent (analytics, advertising cookies)
- Art. 6(1)(f) GDPR: legitimate interest (secure and efficient operation)

5. Hosting and Server Log Files
Our website is hosted on servers in Germany. Log files (IP address, browser type, time, referrer URL) are stored for security and deleted after 14 days.

6. Cookies and Consent Management
We use cookies to ensure website functionality and analyze usage. You can manage or withdraw your consent at any time via our cookie banner.

7. Google Tag Manager
We use Google Tag Manager (Google Ireland Ltd., Dublin). It manages other scripts and does not itself store personal data. However, it may trigger tags that collect data (see Analytics and Ads below).

8. Google Analytics 4
We use Google Analytics 4 (GA4) for statistical analysis. IPs are anonymized. Processing occurs based on consent (Art. 6(1)(a) GDPR). Data may be transferred to the USA under the EU-US Data Privacy Framework.
More info: https://policies.google.com/privacy

9. Google Ads and Enhanced Conversions
We use Google Ads to measure and optimize campaign performance. Data such as anonymized email or transaction IDs may be transmitted to Google in encrypted form for conversion tracking, only with prior consent.

10. PayPal
If you pay via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg. Legal basis: Art. 6(1)(b) GDPR. More info:
PayPal Privacy Policy

11. Contact Form and Email Communication
When you contact us via form or email, we store your inquiry and contact details to process your request. Legal basis: Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding). Data will be deleted once processing is complete unless statutory retention obligations apply.

12. Data Processing Agreements
We have concluded legally required Data Processing Agreements (DPAs) with our hosting provider and with Google to ensure that personal data is processed exclusively according to our instructions and in compliance with the GDPR.

13. Data Storage and Deletion
Personal data is stored as long as necessary for the stated purposes or required by law. Booking and payment data are retained for up to 10 years (tax and commercial law).

14. SSL Encryption
Our website uses SSL/TLS encryption for secure data transmission. You can identify encrypted connections by the padlock icon in your browser’s address bar.

15. Rights of Data Subjects
You have the following rights under GDPR:
- Access (Art. 15)
- Rectification (Art. 16)
- Erasure (Art. 17)
- Restriction (Art. 18)
- Data portability (Art. 20)
- Objection (Art. 21)
Please contact: info@247studio.de

16. Right to Lodge a Complaint
You may lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA).

17. Updates
We may update this policy at any time to comply with legal or technical changes. The latest version is always available on our website.