Privacy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Valentiner
Wielandstraße 10
60318 Frankfurt am Main
Germany

Email: hi@brandvelle.com

2. Categories of Data Processed

Depending on how you use this website, we process the following categories of personal data:

• Inventory data (e.g., name, email address) — when you contact us or subscribe to the newsletter
• Content data (e.g., text entries in the contact form)
• Usage data (e.g., visited pages, time of access, click paths)
• Meta and communication data (e.g., IP address, device information, browser type, operating system)

3. Purposes of Processing

Personal data is processed for the following purposes:

• Providing the website and its functionality
• Responding to contact inquiries and processing newsletter subscriptions
• Ensuring the security and stability of the website (server logs, spam protection)
• Web analytics — only with your consent — to improve content and usability

4. Legal Bases

Processing is carried out on one of the following legal bases:

• Art. 6 (1) (a) GDPR — your consent (e.g., for analytics, newsletter)
• Art. 6 (1) (b) GDPR — performance of a contract or pre-contractual measures (e.g., responding to inquiries)
• Art. 6 (1) (f) GDPR — our legitimate interests (e.g., secure operation, spam protection, documentation of consent)
• Art. 6 (1) (c) GDPR — compliance with a legal obligation

5. Hosting

The website is hosted on infrastructure provided by:

Host Europe GmbH, Hansestraße 111, 51149 Köln, Germany

The hosting provider processes inventory, content, usage, and meta data on our behalf for the purpose of providing the website (Art. 6 (1) (f) GDPR; data processing agreement under Art. 28 GDPR in place). Server log files (IP address, date and time, requested page, referrer, user agent) are retained for a maximum of 30 days for security and troubleshooting.

6. Consent Management — Cookiebot

We use Cookiebot, a consent management platform operated by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores your cookie preferences in a first-party cookie ("CookieConsent") for up to 12 months and records an anonymized IP address and user agent for proof of consent.

Legal basis: Art. 6 (1) (c) GDPR (legal obligation to document consent under Art. 7 GDPR) and Art. 6 (1) (f) GDPR (legitimate interest in functional consent management).

You can withdraw or change your consent at any time via the link "Change your cookie settings" on the Cookies page or by clearing the CookieConsent cookie in your browser.

More information: https://www.cookiebot.com/en/privacy-policy/

7. Web Analytics — Google Analytics 4 (via Google Tag Manager)

Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Tags are managed through Google Tag Manager (also operated by Google), which loads only after consent is granted via Cookiebot.

Google Analytics uses cookies and similar technologies to analyze how the website is used. Information collected includes a truncated/anonymized IP address, pages visited, session duration, device type, and approximate location. This information is transmitted to Google servers and may be processed in the United States.

Legal basis: Art. 6 (1) (a) GDPR — your consent.

For data transfers to the United States, Google is certified under the EU–U.S. Data Privacy Framework, providing an adequate level of data protection. Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR apply additionally.

More information: https://policies.google.com/privacy

8. Spam Protection — Google reCAPTCHA

To protect our forms against automated submissions, we use Google reCAPTCHA, a service provided by Google Ireland Limited. reCAPTCHA analyses information such as IP address, mouse movements, time on page, and browser data to distinguish human from bot requests.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in protecting the website from spam and abuse.

Data may be transferred to Google servers in the United States. An adequate level of protection is ensured via the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

More information: https://policies.google.com/privacy

9. Forms and Newsletter

Contact and newsletter forms are processed via a self-hosted forms plugin. Form data is stored on the server of our hosting provider (see "Hosting") and is not transferred to any third party other than the hosting provider.

Contact form: We process the data you provide (name, email, message) for the sole purpose of responding to your inquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in responding). Inquiries are deleted as soon as they are no longer needed, unless statutory retention obligations apply.

Newsletter: When you subscribe, we use the double opt-in procedure: you receive a confirmation email and your subscription is activated only once you click the confirmation link. We process your email address solely to deliver the newsletter. Legal basis: Art. 6 (1) (a) GDPR — your consent. You can unsubscribe at any time via the link in each newsletter email or by emailing hi@brandvelle.com. Subscription confirmation logs are retained for up to 3 years to demonstrate compliance with Art. 7 GDPR.

10. YouTube Embeds

This website may embed videos hosted on YouTube, operated by Google Ireland Limited. We use the privacy-enhanced mode where available; nevertheless, when you play an embedded video, YouTube may set cookies and process your data.

Legal basis: Art. 6 (1) (a) GDPR — your consent (videos are blocked by Cookiebot until you grant marketing consent).

For transfers to the United States, Google is certified under the EU–U.S. Data Privacy Framework. Standard Contractual Clauses apply additionally.

More information: https://policies.google.com/privacy

11. Web Fonts — Adobe Fonts

We use Adobe Fonts (formerly Typekit) provided by Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Saggart, D24 R28F, Ireland. Adobe Fonts loads font files from servers operated by Adobe; this requires a connection to Adobe servers. Adobe processes connection data (e.g., IP address) for the purpose of delivering the fonts.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in a consistent and appealing presentation of the website.

For transfers outside the EEA, Adobe relies on Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR.

More information: https://www.adobe.com/privacy/policy.html

12. Your Rights

Under the GDPR, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on legitimate interests (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7 (3) GDPR), without affecting the lawfulness of processing based on consent before its withdrawal

To exercise any of these rights, please contact us at hi@brandvelle.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for our location is:

Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Postfach 31 63, 65021 Wiesbaden, Germany
https://datenschutz.hessen.de

13. Updates to this Privacy Policy

We may update this privacy policy from time to time to reflect changes to the services we use, legal requirements, or our processing activities. The current version always applies and is available on this page.