Privacy Policy

We build digital products and websites with a focus on clarity, performance, and practical business use.

Deutsch

Privacy Policy

(Status: January 2026)

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Web Studio by Lana
Svetlana Ponomarenko
Buchenteich 3
73773 Aichwald, Germany
Email: svetlanapo@gmail.com
Website: www.webstudiobylana.de

2. General Information

The protection of your personal data is important to us. We process personal data exclusively in accordance with the legal provisions of the General Data Protection Regulation (GDPR) and applicable German data protection laws.

3. Access Data / Server Log Files

When you visit our website, the hosting provider automatically collects and stores the following data:

  • IP address
  • Date and time of access
  • Requested page
  • Browser type and browser version
  • Operating system
  • Referrer URL

Purpose of processing:
Ensuring a stable connection, system security, and technical administration.
Legal basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage period:
Server log files are deleted no later than after 7 days.

4. Contact by Email or Contact Form

If you contact us by email or via a contact form, the following personal data may be processed:

  • Name
  • Email address
  • Message content

Purpose of processing:
Handling your request and communicating with you.
Legal basis:
Art. 6 para. 1 lit. b GDPR (pre-contractual measures or contract performance)
Storage period:
The data is deleted as soon as the request has been fully processed. Unless statutory retention obligations apply, contact requests are generally deleted after no later than 6 months.

5. Contact via WhatsApp

If you contact us via WhatsApp, personal data such as your telephone number and message content may be processed.
Note:
WhatsApp is operated by WhatsApp Ireland Ltd. A transfer of personal data to third countries such as the USA cannot be excluded.
Legal basis:
Art. 6 para. 1 lit. a GDPR (consent)
Protective measures:
Data transfers are based on the standard contractual clauses used by WhatsApp pursuant to Art. 46 GDPR.

6. Cookies

This website uses only technically necessary cookies that are required for the operation of the website.
Legal basis:
Section 25 para. 2 TTDSG in conjunction with Art. 6 para. 1 lit. f GDPR.

Optional analytics cookies are set only with your explicit consent via our Klaro consent tool.
If you agree, we may use Google Analytics to analyze website usage and improve our services.
You can withdraw or adjust your consent at any time with effect for the future via the "Cookie Settings" link in the footer.
If additional cookies or tools for analytics or marketing purposes are used in the future, they will also be used only after prior express user consent.

7. Google Analytics (optional)

If you have given your consent, we use Google Analytics to analyze website usage.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Information about website usage such as pages viewed, approximate region of origin, and device or browser information may be processed and transferred to Google servers, including servers in third countries such as the USA.
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG.
You can withdraw or adjust your consent at any time with effect for the future via the "Cookie Settings" link in the footer.

8. Recipients of Data

Personal data is processed exclusively by:

  • the hosting provider used by us (processing on our behalf pursuant to Art. 28 GDPR)

No data is passed on to third parties for advertising purposes.

9. Storage Period

Unless a more specific storage period is stated in this privacy policy, we process personal data only for as long as necessary to fulfill the respective purposes or as long as statutory retention periods apply.

10. Rights of Data Subjects

You have the right at any time to:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
Competent supervisory authority (Baden-Wuerttemberg):
The State Commissioner for Data Protection and Freedom of Information Baden-Wuerttemberg (LfDI)
Lautenschlagerstrasse 20
70173 Stuttgart
Germany

12. Obligation to Provide Data

The provision of personal data is neither legally nor contractually required. However, without certain data such as an email address, it may not be possible to contact us.

13. Automated Decision-Making

Automated decision-making, including profiling, does not take place.

14. Currency and Changes to This Privacy Policy

This privacy policy is currently valid and has the status of January 1, 2026. We reserve the right to amend this privacy policy in order to adapt it to changed legal requirements or technical changes.