Imprint & privacy

Privacy

This notice explains how personal data is handled on this website (Art. 13 GDPR). The controller is finearbyte e.U., Allan Berger, at the address on this page, reachable at hello@enlivestudio.com.

Visiting the site

Unless you agree to statistics (below), the site sets no cookies and loads nothing from third parties. To deliver pages and protect them against abuse, our hosting provider, Vercel Inc. (USA), processes technical access data on our behalf: IP address, date and time, the address requested, and browser and operating system. The legal basis is our legitimate interest in a secure, reliable website (Art. 6(1)(f) GDPR). Vercel is bound by a data processing agreement. Transfers to the USA rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, under which Vercel is certified, and on the EU Standard Contractual Clauses in Vercel's data processing agreement; you can get a copy of the clauses from us. Vercel keeps these logs only as long as it needs them to operate and secure the service; we do not export or keep copies of them.

Statistics, only with your consent

If you choose Accept, we use Google Analytics 4 to see how the site is found and used, so we can improve it. Google Analytics then records the pages you view and when, which links to other sites you click, whether you scroll to the end of a page, how you arrived (for example the referring site or search engine), your approximate location (at most to city level), your type of device, browser and operating system, and your language, together with a random online identifier. For this it stores two cookies on your device: _ga, which tells browsers apart, and _ga_2WXQP8XEYM, which keeps the session; both expire 12 months after your last visit. Your IP address is transmitted to Google; according to Google, IP addresses from the EU are used only to estimate location and are discarded before anything is stored.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which processes the data only on our behalf and on our instructions under Google's data processing terms (Art. 28 GDPR). Google signals, advertising features and all data sharing with Google are switched off, and Analytics is linked to no advertising account: the data is not used for advertising or to identify you. Event-level data linked to the identifier is deleted automatically after two months; only aggregated statistics without identifiers are kept. More on how Google uses this data: How Google uses information from sites or apps that use its services (opens in a new tab).

The legal basis is your consent (§ 165(3) TKG 2021; Art. 6(1)(a) GDPR). Google Ireland may have the data processed by Google LLC and other Google companies, including in the USA. Transfers to Google LLC rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, under which Google LLC is certified, and otherwise on the EU Standard Contractual Clauses in Google's data processing terms; you can get a copy of the clauses from us. Without your consent, nothing is loaded from Google.

You can withdraw your consent at any time, with effect for the future and as easily as you gave it, under Privacy settings at the foot of every page. Withdrawing stops Google Analytics at once and deletes its cookies; processing before your withdrawal remains lawful. Your choice (accept or decline, with its date) is kept only in your browser's local storage for 12 months, so that we do not ask on every visit; it never leaves your device. If your browser sends a Global Privacy Control signal, we do not ask and treat it as a decline, unless you have accepted statistics here yourself.

Writing to us

If you email us, we process your address, your message and anything you include, to answer you and, where it leads to a commission, to prepare and carry it out. Where you enquire about or give us a commission in your own name, the legal basis is Art. 6(1)(b) GDPR; where you write on behalf of a company or for any other reason, it is our legitimate interest in replying and in working with the company you represent (Art. 6(1)(f) GDPR). Our email provider processes messages on our behalf under a data processing agreement; where it processes data outside the EU or EEA, this rests on an adequacy decision of the European Commission or on the EU Standard Contractual Clauses. We delete correspondence once it is no longer needed. Where it forms part of our business records, we keep it for seven years to meet our legal retention duties (§ 212 UGB, § 132 BAO; Art. 6(1)(c) GDPR).

Links

Links to other sites, such as Instagram, transfer no data until you follow them. The linked site's own privacy terms then apply.

Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15–18 and 20 GDPR), and you can withdraw any consent at any time (Art. 7(3) GDPR). Write to us at the address above. You may also complain to a data protection supervisory authority.

Right to object: where we rely on legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You are not required to provide personal data. Without the technical access data described above, however, the site cannot be delivered to you, and without an email address we cannot reply or take on a commission. We make no automated decisions within the meaning of Art. 22 GDPR.