Privacy policy
1. Controller
Controller for the data processing on this website:
Márcia Mattos Dos Santos · Omni Canvas Studio
Güterbahnhofstr. 20, 70806 Kornwestheim, Germany
Email: datenschutz@omnicanvas.de
2. Data minimisation principle
The protection of your personal data matters to us. We process personal data solely in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This website is deliberately designed to be data-minimal.
3. Hosting and server logs
This website is hosted on Cloudflare Pages (Cloudflare, Inc.) (processing on our behalf under Art. 28 GDPR). When the pages are accessed, the system automatically records technical access data in what are known as server log files, such as the IP address, date and time of access, the page accessed, the amount of data transferred, and the browser type and operating system. This processing serves the technical operation, security and stability of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). The server log files are stored only for as long as is necessary for the technical operation and security of the website, and are deleted afterwards. Cloudflare may also process personal data outside the EU and the EEA, in particular in the USA. The basis is Cloudflare’s data processing addendum (processing on our behalf under Art. 28 GDPR); transfers to third countries are safeguarded by the European Commission’s standard contractual clauses.
4. Contact by email
If you contact us by email or through the contact form, we process the data you provide (for example, name, email address, message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries and otherwise Art. 6(1)(f) GDPR. Providing this data is voluntary; without it, however, we cannot handle your enquiry. The form on this site opens your own email program and does not send data to any third party. You can also reach us via WhatsApp; in that case, WhatsApp (Meta Platforms Ireland Ltd.) processes your data under its own privacy terms, and a transfer to the USA may take place. Using WhatsApp is voluntary; alternatively, you can contact us by email. The data is deleted as soon as it is no longer required for this purpose and no statutory retention periods apply.
5. Cookies and tracking
This website currently uses no non-essential cookies and no tracking or analytics services. Should this change, your consent will be obtained beforehand (Art. 6(1)(a) GDPR and § 25 TDDDG) and this statement updated accordingly.
6. External services
There are currently no external services actively embedded (for example, maps, social networks or external video players). Should external content be embedded in future, this will be reviewed beforehand and added here.
7. Fonts
The fonts in use (Cormorant Garamond and Manrope) are loaded locally. There is no connection to external font providers, and no data is transferred to third parties.
8. Your rights
Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). There is no automated decision-making, including profiling (Art. 22 GDPR). To exercise your rights, an informal message to the controller named above is sufficient.
9. Storage period
We store personal data only for as long as is necessary for the respective purpose or as statutory retention periods require. After that, the data is deleted.
10. Changes to this policy
This privacy policy is adapted whenever the data processing changes, for example through new features or services.