Privacy Policy
Last updated
This policy explains what personal data this website collects, why we need it and what control you have over it. We've tried to keep it short and specific to what the site actually does.
Who is responsible
The controller for personal data on this website is Techelix GmbH, trading as Studio Techelix, Oppenhoffallee 143, 52066 Aachen, Germany. You can reach us at [email protected] or on +49 151 72234980. Full company details are in our Impressum.
For any question about your personal data, write to [email protected] and put "Data protection" in the subject line. Your message goes straight to the people responsible for it at Techelix GmbH.
What we collect and why
We only collect what we need for a specific purpose. Here is everything this site processes, with the legal basis under the GDPR for each.
| Data | Purpose | Legal basis |
|---|---|---|
| Contact form: name, email address, optional company, the service you chose, optional budget and timeline, your message | Replying to your enquiry and, if you ask us to, preparing a proposal | Steps before a contract at your request (Art. 6(1)(b) GDPR); otherwise our legitimate interest in answering messages (Art. 6(1)(f)) |
| Emails you send us directly | Replying and keeping a record of the conversation | Art. 6(1)(b) or (f) GDPR, as above |
| Technical data: IP address, browser, pages requested, time of request | Delivering the site securely, spotting abuse (including the contact form's rate limit) and fixing errors | Our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR) |
| Spam protection (contact form only): IP address, browser and device details, how you interact with the page, and cookies Google reads or sets | Telling real enquiries from automated spam, using Google reCAPTCHA v3. It loads only once you start filling in the form | Our legitimate interest in keeping the form usable and free of abuse (Art. 6(1)(f) GDPR); access to your device under § 25(2) No. 2 TDDDG |
| Analytics data: pages viewed, approximate location, device type, a pseudonymous ID in a cookie | Understanding which pages help visitors, so we can improve them | Your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Only collected if you allow analytics |
| Your cookie choice, stored in your browser | Remembering what you agreed to | Our legal obligation to record consent and our legitimate interest (Art. 6(1)(c) and (f) GDPR) |
You don't have to give us any personal data to read this website. If you don't fill in the contact form, we simply can't reply to you through it.
How long we keep it
- Enquiries that don't lead to a project: deleted 24 months after our last contact with you.
- Enquiries that become a project: kept with the project records for as long as German commercial and tax law requires, usually six to ten years.
- Server logs at our hosting provider: kept only for the short period set by Vercel's standard log retention (a few days at most), unless we need them longer to look into an attack.
- Analytics data: kept in Google Analytics for 14 months, then deleted automatically.
- Your cookie choice: until you change it or clear your browser storage. We ask again after 12 months.
Who processes data for us
We don't sell personal data, and we don't share it for advertising. We use a small number of service providers who process data on our behalf, under data processing agreements (Art. 28 GDPR):
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA | Hosts the website and keeps server logs | USA, served through Vercel's worldwide network |
| Resend, Inc., San Francisco, USA | Delivers contact form messages and the confirmation email | USA |
| Google Ireland Limited, Dublin, Ireland | Google Analytics 4, only if you allow analytics | EU, with possible transfers to Google LLC in the USA |
| Google Ireland Limited, Dublin, Ireland | Google reCAPTCHA v3 on the contact form, under Google's own terms | EU, with possible transfers to Google LLC in the USA |
| Synextra Limited, Manchester, United Kingdom | Hosts the mail server that stores the emails we send and receive | United Kingdom |
Our fonts are served from our own server, so viewing the site doesn't send your IP address to a font provider.
Transfers outside the EU
Vercel, Resend and Google may process data in the United States, and our mail server is in the United Kingdom, which the European Commission recognises as giving adequate protection. Where a provider is certified under the EU-U.S. Data Privacy Framework, transfers rely on the European Commission's adequacy decision for it. Otherwise we use the Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards that apply.
Your rights under the GDPR
If you're in the EU or the UK, you have the right to:
- see the personal data we hold about you and get a copy of it (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data deleted, unless we must keep it by law (Art. 17)
- ask us to limit how we use it (Art. 18)
- receive data you gave us in a portable format (Art. 20)
- object to processing based on our legitimate interests (Art. 21)
- withdraw consent at any time, for the future, for example through the cookie settings link in the footer (Art. 7(3))
To use any of these rights, email [email protected]. We'll reply within one month. You can also complain to a data protection authority. Ours is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, but you may contact the authority where you live.
Your rights if you live in California
Under the CCPA as amended by the CPRA, California residents have the right to know what personal information we collect and how we use it, to have it deleted, to have it corrected, and not to be treated differently for using these rights.
We do not sell your personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. We also don't use sensitive personal information for anything beyond answering you. To make a request, email [email protected]. We'll need to confirm it's really you before we act on it.
Children
This website is meant for businesses. It isn't aimed at children under 16, and we don't knowingly collect their data. If you think a child has sent us personal data, let us know and we'll delete it.
Security
The site is served only over HTTPS. Access to enquiries is limited to the people who need them, and our providers are chosen for their security practices. No system is perfectly secure, so please don't send passwords or other secrets through the contact form.
Changes to this policy
When the site or the way we handle data changes, we update this page and the date at the top. If a change needs your consent, for example a new type of cookie, we'll ask for it through the cookie banner before it applies.
Questions
Questions about this policy or your data are welcome. Write to [email protected], or by post to the address above. The Cookie Policy lists every cookie and storage item in detail.