Privacy, plainly.

Jan-Niklas Ernst · Studio 7.83
Maria-Viktoria-Straße 47, 76530 Baden-Baden, Germany
hi.studio783@gmail.com

The controller under the General Data Protection Regulation (GDPR). Write to this address for anything about your data.

When you open a page, your browser sends the technical details every website receives: your IP address, the date and time, the page requested, the page you came from, and your browser and operating system. They are used to deliver the site and keep it secure, and are kept only for a limited time.

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, which processes these details on the studio’s behalf under a data processing agreement. Transfers to the USA rest on the EU Standard Contractual Clauses (Art. 46 GDPR) and, where Vercel takes part, the EU–US Data Privacy Framework (Art. 45 GDPR).

Legal basis: Art. 6 (1) (f) GDPR — the studio’s legitimate interest in a site that works and is protected from attacks.

What is kept. Your answers; the place you name and, if it is found, its map coordinates; your name, email address and, if you give it, your company or website. Alongside them: your browser’s language, the page you sent the brief from and the page that led you there, your browser type, and a one-way hashed (pseudonymised) form of your network address.

Why. To read your brief, reply and, if you wish, prepare an offer — Art. 6 (1) (b) GDPR. The hashed address and the time taken to answer are used only to keep the form free of spam and misuse — Art. 6 (1) (f) GDPR.

Where. In a database run by Supabase Inc. on servers in Frankfurt, Germany, as the studio’s processor under a data processing agreement. Only the studio can read briefs. Supabase may log technical request details for a short time to run the service.

How long. Briefs that do not lead to a project are deleted after 24 months. Briefs that become a project are kept for six years as business correspondence (§ 257 HGB, § 147 AO). Anything marked as spam is deleted after 30 days. Deletion runs automatically every night.

Sending a brief is voluntary. Without an email address the studio cannot reply. If saving ever fails, the site offers to send the brief by email instead — see Email below.

Only if you type a place into the brief: that text and your IP address go to the Nominatim service of the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom, to find it on the map. The UK has an EU adequacy decision (Art. 45 GDPR). Legal basis: Art. 6 (1) (b) GDPR. OpenStreetMap’s privacy policy.

If you write to the studio, your message and address are used to reply — Art. 6 (1) (b) or (f) GDPR — and kept as long as the conversation needs, or as long as the law requires for business correspondence. Email is handled by Google Ireland Limited (Gmail), Gordon House, Barrow Street, Dublin 4, Ireland.

All typefaces load from this site itself — there is no connection to Google Fonts or any other font service. The site sets no cookies and stores nothing in your browser, which is why there is no cookie banner.

Clients review images and send files on review.783.earth, which has its own privacy notice.

You can ask what the studio holds about you (Art. 15 GDPR), have it corrected (Art. 16), deleted (Art. 17) or its use restricted (Art. 18), and receive it in a portable form (Art. 20). You can object at any time to any use based on legitimate interests (Art. 21). A short email to hi.studio783@gmail.com is enough.

You may also complain to a data protection authority — for the studio, the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, baden-wuerttemberg.datenschutz.de.

There is no automated decision-making or profiling.

8 October 2026. If the site changes how it handles data, this page changes with it.