Privacy Policy

We collect information you provide directly and information generated automatically when you use our services.

Information you provide:

• Contact details such as name, email address, and phone number
• Business details such as company name, website, and industry
• Project requirements and communications
• Payment and billing information

Information collected automatically:

• Device and browser information
• IP address and approximate location
• Website usage and analytics data
• Cookies and similar technologies

We use collected information to:

• Provide, maintain, and improve our services
• Communicate about projects, updates, and support
• Process payments and send invoices
• Send marketing communications with your consent
• Analyze website use and improve the experience
• Comply with legal obligations and protect our rights

We do not sell personal information. We may share it with:

• Service providers: vendors supporting hosting, scheduling, communication, or analytics
• Project partners: where needed for a collaboration and with your consent
• Authorities or other parties: where required by law or to protect our rights

Providers may process data only for specified purposes and must protect it appropriately.

We use appropriate technical and organizational safeguards, including:

• Encryption in transit and at rest
• Secure access controls and authentication
• Regular security reviews and updates
• Data protection awareness

No internet transmission can be guaranteed to be 100 percent secure.

You have rights including:

• Access: information and a copy of your personal data
• Rectification: correction of inaccurate data
• Erasure: deletion where no retention obligation applies
• Restriction: limitation of processing
• Portability: receipt of data in a structured format
• Objection: objection to certain processing
• Withdrawal: withdrawal of consent for the future

Contact us at the email below to exercise these rights.

We retain personal data only as long as needed for the stated purposes or legal obligations. Typically:

• Project and billing data follows applicable statutory retention periods.
• Marketing data is retained until withdrawal or unsubscribe.
• Analytics data is deleted or anonymized according to provider settings.

Data may be processed outside the European Economic Area. Where this occurs, we use appropriate safeguards such as adequacy decisions or European Commission-approved Standard Contractual Clauses.

We may update this policy. Material changes will be posted on this page and the last-updated date will be revised.

For questions or to exercise your rights, email hello@vaststudios.de.

You may also lodge a complaint with a data protection authority if you believe your rights have been violated.