Privacy

Who is responsible for data processing?

The controller within the meaning of the GDPR is MAA Solutions Studio, Owner: Samet Tarim, Karl-Arnold-Ring 53, 21109 Hamburg, Germany.

For privacy requests you can use the email address below. It is hidden by default and is only displayed after a click.

Which data do we process?

We process data that is technically required to provide this website, including server log data such as requested pages, date and time, browser type, operating system, referrer URL, IP address and the requesting provider.

When you contact us, book a studio session, subscribe to updates or use forms, we process the data you provide, such as name, email address, phone number, message content, booking details and consent confirmations.

Why do we process personal data?

We process personal data to operate the website securely, answer requests, process bookings, provide requested services, prevent misuse, improve our online offer and comply with legal obligations.

The legal bases are, depending on the processing, Art. 6(1)(a) GDPR for consent, Art. 6(1)(b) GDPR for contract-related processing, Art. 6(1)(c) GDPR for legal obligations and Art. 6(1)(f) GDPR for legitimate interests such as security, communication and website optimization.

Contact forms, booking requests and email communication

Data submitted through contact or booking forms is stored so that we can process the request, document the communication and contact you about the requested service.

If an email delivery fails, stored form data helps us answer the request reliably. Data is deleted when it is no longer required, unless legal retention obligations apply.

Cookies and local storage

This website can use cookies, local storage and session storage to provide basic functionality, remember cookie choices and support security or analytics functions.

You can restrict or delete cookies in your browser settings. Some functions may no longer work correctly if required storage is blocked.

Third-party services and embedded content

We use external services where they are needed for operation, security, analytics, embedded media or forms. These services may receive technical data such as IP address, browser data and interaction data.

Services used or prepared on this website can include Cloudflare, Google Tag Manager, Google Analytics through tag management, Hotjar, YouTube embeds, Google Search Console, Bing Webmaster Tools and the Inqusi form service.

Cloudflare

We use Cloudflare services to provide this website securely and efficiently. Cloudflare can provide DNS, content delivery network, firewall, DDoS protection, TLS encryption and performance functions.

When this website is accessed, Cloudflare may process technical data such as IP address, requested URLs, HTTP headers, browser information, system information, time of access and security events. The legal basis is our legitimate interest in secure and reliable website operation under Art. 6(1)(f) GDPR.

Cloudflare may process data outside the European Union. Where required, such transfers are based on appropriate safeguards such as standard contractual clauses.

Recipients, processors and third-country transfers

Personal data can be processed by technical service providers such as hosting, email, analytics, form and security providers. We use these providers only where they support the operation of this website or requested services.

Some providers may process data outside the European Union. Where required, transfers are based on adequacy decisions, standard contractual clauses or other safeguards under the GDPR.

How long do we store personal data?

We store personal data only for as long as it is necessary for the stated purpose, for communication with you, for contract handling or for legal retention obligations.

Server log data is kept only for a limited period unless longer storage is required to investigate security incidents or legal claims.

Rights of data subjects

You have the right to request access, rectification, erasure, restriction of processing, data portability and objection to processing where the legal requirements are met.

If processing is based on consent, you can withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

Changes to this privacy policy

We may update this privacy policy when legal requirements, website functions or service providers change. The current version applies on this page.