1. Who is responsible?

This website does not use advertising or cross-site tracking, and it sets no analytics cookies, so you will not see a cookie banner. We process personal data to run the site securely, to see basic visitor statistics and to answer you when you get in touch.

The controller under the General Data Protection Regulation (GDPR) is:

Studio IVOLVER, Dirk Nyhuis Kempfenhauserstrasse 19 82335 Berg (Starnberger See), Germany Email: hello@ivolver.de Phone: +49 151 5066 1262

2. Visiting this website

When you open a page, your browser sends technical data that the server needs to deliver it. This can include your IP address, the date and time, the page requested, the status code, the amount of data sent, the referring page, and your browser and operating system.

We use this data to display the site and to keep it stable and secure, for example to detect and block attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure, working website.

The site is hosted on Elementor Hosting in a data centre in Belgium. Requests pass through a content delivery network and web application firewall provided by Cloudflare. Our host also measures page performance in your browser (real user monitoring). This sends technical data such as the page address, browser details, loading times and script errors to Elementor Hosting, so that problems can be found and fixed. The legal basis is Art. 6(1)(f) GDPR. Server logs are deleted after one month.

3. Cookies and analytics

We do not set cookies for analytics, marketing or personalisation. That is why this site has no cookie banner.

We use Cloudflare Web Analytics to see basic statistics about visits and page performance. A small script runs in your browser and sends Cloudflare the page address, the referring page, browser details, loading times and a country derived from your IP address.

According to Cloudflare, this service uses no cookies and no fingerprinting and does not store your IP address. We see only summarised figures and cannot identify individual visitors from them. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is understanding how the site is used and keeping it fast. You can object at any time, see section 7, or block the script with a browser extension.

Cloudflare sets a strictly necessary security cookie (__cf_bm) to tell human visitors from bots and to protect this site from attacks. It expires after 30 minutes and is not used for analytics.

WordPress sets cookies only for people who log in to manage the site. Where storage on your device is strictly necessary to provide the website, it is permitted under Section 25(2) of the German TDDDG.

4. Get in touch

If you use our contact form, we receive your name, company, email address, phone number and the subject you choose. If you email or call us, we receive what you send or tell us.

We use this data only to answer your enquiry and to follow up on it. We do not use it for marketing or send you newsletters unless you have separately agreed to that.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or possible project, and otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is answering the messages we receive.

We delete your data once your enquiry is closed and we no longer need it, unless statutory retention periods apply, for example for business letters and tax records.

5. External links

This site links to other websites, including LinkedIn and those of partners and clients. No data goes to them until you click a link. After that, the privacy policy of the site you visit applies.

6. Who receives data?

We do not sell your data or pass it on for advertising. Only the service providers that run this site and our email receive it, and they act on our instructions.

Elementor, Website hosting and performance monitoring

Cloudflare, Inc., Content delivery and security

United Domains, Domain and email

If data leaves the EU or EEA, we rely on an adequacy decision or standard contractual clauses under Chapter V GDPR. You can ask us for a copy of the safeguards using the contact details above.

7. Your rights

You have the right to access your data, have it corrected or deleted, restrict its processing and receive it in a portable format (Art. 15 to 20 GDPR). Where you gave consent, you can withdraw it at any time with effect for the future.

Right to object: where we process your data on the basis of Art. 6(1)(f) GDPR, you can object at any time for reasons arising from your particular situation (Art. 21 GDPR). To use any of these rights, write to hello@ivolver.de.

You can also complain to a data protection authority. The authority responsible for us is the Bayerisches Landesamt für Datenschutz, Promenade 18, 91522 Ansbach, Germany.

You are not legally or contractually required to give us personal data. Without the technical data in section 2 we cannot show you the site, and without contact details we cannot reply to you.

8. Changes to this policy

We update this policy when the website or the law changes. The current version is always published on this page.

Last updated: 06. Nov. 2026