Privacy Policy
1. Data Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Ivan Couselo Myrylko & Behdad Babamiri GbR
Leonhardstraße 2
07973 Greiz
Germany
Email: company@webnorastudio.com
2. General Information on Data Processing
We take the protection of your personal data seriously.
We process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and applicable German data protection legislation.
Personal data means any information relating to an identified or identifiable natural person.
3. Website Hosting
Our website is hosted by STRATO.
When you visit our website, the hosting provider may process technically necessary information. This may include, in particular, your IP address, date and time of access, pages or files accessed, browser type, operating system and other technical information.
This processing is carried out primarily to provide, maintain, secure and ensure the stability of our website.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
STRATO may process personal data as a processor when providing hosting services. Where applicable, the necessary data processing agreement (Data Processing Agreement / AVV) is governed by the relevant contractual arrangements with STRATO.
4. Server Log Files
Whenever our website is accessed, technically necessary information may automatically be recorded in server log files.
This may include:
IP address
Date and time of access
Page or file accessed
Amount of data transferred
Browser type and version
Operating system
Referrer URL
Technical information relating to the request
This processing is carried out to ensure the secure and stable operation of the website and to detect and prevent technical attacks.
The legal basis is Article 6(1)(f) GDPR.
Log data is deleted once it is no longer required for these purposes, unless statutory retention obligations apply.
5. Contact Form
We use WPForms Lite to provide the contact form on our website.
When you contact us through the contact form, we may process the following information:
Name
Email address
Subject
Message
Any additional information you voluntarily provide
This information is processed to respond to your enquiry, communicate with you and, where applicable, take steps prior to entering into a contract.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. In other cases, processing is based on Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries.
The information submitted through the contact form is generally retained only for as long as necessary to process your enquiry, unless statutory retention obligations apply.
We do not use contact-form information for advertising purposes without an appropriate legal basis.
6. WP Mail SMTP
We use WP Mail SMTP to facilitate the sending of emails from our WordPress website.
Emails are sent through the STRATO SMTP server.
The information necessary for sending emails may be processed for the purpose of technically transmitting and handling messages.
The legal basis is Article 6(1)(b) GDPR where the email communication relates to an enquiry or pre-contractual communication, or Article 6(1)(f) GDPR based on our legitimate interest in reliable technical email communication.
7. Wordfence Security
Our website uses Wordfence Security, in its free version, to protect the website against security threats.
Wordfence may process technical information for the detection and prevention of attacks and other security-related events. This may include IP addresses and information concerning website access.
This processing is carried out to protect our website against misuse, attacks and unauthorised access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting our website and the data we process against cyberattacks and misuse.
8. Google Search Console
We use Google Search Console to monitor and analyse the technical performance and visibility of our website in Google Search.
Google Search Console helps us understand how our website appears in Google Search and identify technical issues affecting its search performance.
The use of Google Search Console does not mean that we automatically use Google Analytics or place Google Analytics cookies on website visitors’ devices.
Google may process data in connection with the provision of its services. Further information can be found in Google’s privacy documentation.
9. Google Analytics
We currently do not use Google Analytics.
If we introduce Google Analytics in the future, this Privacy Policy will be updated accordingly before or when the service is implemented.
The updated policy will describe the relevant processing activities, purposes, legal basis, data involved and the consent mechanism used for analytics.
10. Cookies
Our website may use technically necessary cookies required for the operation and basic functionality of the website.
We currently do not use a dedicated marketing or analytics cookie solution.
If we introduce non-essential cookies, particularly analytics, marketing or tracking cookies, they will be used in accordance with applicable legal requirements and, where required, only after obtaining the user’s consent.
11. Instagram
Our website contains links to our Instagram presence.
These are ordinary external links. We do not embed Instagram content directly into our website.
When you click an Instagram link, you leave our website and are redirected to Instagram. From that point onwards, Instagram’s own privacy policies apply.
12. Data Recipients and Third-Party Services
Depending on the technical operation of our website, personal data may be processed by service providers that we use to operate, secure and maintain the website.
These include, in particular:
STRATO — website hosting and email infrastructure
WPForms Lite — contact form functionality
WP Mail SMTP — website email delivery
Wordfence Security — website security
Google Search Console — search performance and technical monitoring
We select service providers in accordance with applicable data protection requirements and, where legally required, enter into appropriate data processing agreements.
13. Your Rights
Subject to the applicable legal requirements, you have the following rights:
Right of access under Article 15 GDPR
Right to rectification under Article 16 GDPR
Right to erasure under Article 17 GDPR
Right to restriction of processing under Article 18 GDPR
Right to data portability under Article 20 GDPR
Right to object under Article 21 GDPR
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
14. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
15. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, destruction, manipulation and unauthorised access.
Where technically configured accordingly, data transmitted between your browser and our website is encrypted using HTTPS.
16. Updates to This Privacy Policy
We reserve the right to update this Privacy Policy where our website, services, data processing activities or applicable legal requirements change.
The current version published on our website applies.
Last updated: August 2026
