Privacy Policy

This English page is a courtesy translation; the German version at /de/datenschutz is the legally operative text.

Controller

spirit2design, Gluckstraße 64, 22081 Hamburg, Germany, is the controller responsible for the data processing described on this page. Contact for all privacy matters, including exercising your rights: support@spirit2design.com.

What data we collect

We collect only what's needed to respond to an enquiry, run a scoping call, process a package purchase, or issue an invoice: name, email address, phone number, and postal/billing address. We do not collect payment card data — the checkout on this site is a demonstration flow that does not transmit or store card details, and the real "Request an invoice" option requires no card data at all.

Why we process it

• To respond to your enquiry or contact-form submission — legal basis: your consent to be contacted (Art. 6(1)(a) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
• To process a package order and issue an invoice — legal basis: performance of a contract, or steps taken at your request prior to entering one (Art. 6(1)(b) GDPR).
• To meet our bookkeeping and tax obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).
• To understand how this website is used, via Google Analytics 4 — legal basis: your consent (Art. 6(1)(a) GDPR), given or withheld through the cookie banner. Analytics never runs before you actively opt in, and you can withdraw consent at any time via "Cookie settings" in the footer.

Who receives your data

• The form/checkout provider that transmits your enquiry or order to us (a static-hosting-compatible form endpoint). Data is passed through, not sold or used for the provider's own marketing.
• Google Ireland Limited, only if you consent to analytics cookies, for Google Analytics 4. IP addresses are anonymised before storage. Data may be processed on servers outside the EU/EEA (including in the US); where this occurs, it relies on the EU Commission's Standard Contractual Clauses as the transfer safeguard.
• We do not sell personal data, and we do not share it with any party for their own marketing purposes.

How long we keep it

Enquiry and contact data is kept for as long as needed to respond to you and for a reasonable follow-up period, and is deleted when no longer needed unless a statutory retention period applies. Invoicing data is kept for the statutory German retention period for commercial and tax records (currently ten years under §147 AO / §257 HGB). Analytics data retention follows the setting configured in Google Analytics, capped at 14 months.

Your rights

Under the GDPR, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure; request restriction of processing; receive your data in a portable format; and object to processing based on legitimate interest. To exercise any of these, email support@spirit2design.com. You also have the right to lodge a complaint with a supervisory authority — in Hamburg, this is Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.

Cookies

Full detail on which cookies are set, by whom, and how to control them is in our Cookie Policy.

Security

We take reasonable technical and organisational measures to protect the data described above, including transmitting all data over an encrypted (HTTPS) connection.

Changes to this policy

If how we process data changes, we'll update this page and the "Last updated" date above.