Legal

Privacy Policy

In short: this website sets no cookies and does not track you individually. We only use cookieless, anonymous analytics (Plausible). Beyond that, data only arises when you actively write to us.

This is an English courtesy translation. The authoritative version is the German original.

1. Controller

ORVA Design, Marcel Jurna
Am Glockenberg 52
51515 Kürten, Germany
Email: [email protected]

2. Hosting (Cloudflare)

This website is delivered via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you access the site, Cloudflare processes technically necessary data (IP address, date and time, page requested, user agent) in order to deliver the site securely and quickly. The legal basis is our legitimate interest in a secure, performant operation (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement is in place with Cloudflare that additionally incorporates the EU Standard Contractual Clauses (Art. 46 GDPR). You can request a copy of these safeguards from us.

3. Contact form and email

If you contact us via the form or by email, we process the data you provide (name, email address, and where applicable website address and message) solely to handle your enquiry (Art. 6(1)(b) GDPR). To send the form messages to our inbox we use the service Resend (Resend, Inc., USA) as a processor; the associated transfer to the USA takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR). Your data is not passed on to third parties and is deleted as soon as your enquiry has been dealt with and no statutory retention obligations apply.

4. SEO & AI check and follow-up contact

If you request a free SEO & AI check via the form, we process the data you provide: your website address and your email address. The processing serves two purposes: creating and sending your personal report (Art. 6(1)(b) GDPR) and the subsequent contact by email on the basis of your consent (Art. 6(1)(a) GDPR). You give this consent via a non-pre-ticked mandatory checkbox; for proof, a server timestamp of your request is logged. For sending the email we use the service Resend (Resend, Inc., USA) as a processor; the transfer to the USA takes place on the basis of the EU Standard Contractual Clauses (Art. 46 GDPR). Your data is not passed on to third parties and you will not be added to any newsletter. You can withdraw your consent at any time with effect for the future — an informal email to [email protected] is enough.

5. Analytics (Plausible)

We use Plausible Analytics, a cookieless analytics tool, to see how many people visit this website — without identifying you individually. Plausible sets no cookies, builds no cross-device profiles and does not store your IP address permanently; only aggregated, anonymous data is collected (e.g. page requested, rough origin at country level, browser used). The legal basis is our legitimate interest in measuring reach (Art. 6(1)(f) GDPR); since no personal data within the meaning of the ePrivacy Directive is stored, no consent and no cookie banner is required. We run Plausible as a self-hosted installation on our own infrastructure; the script is merely delivered via the subdomain analytics.studiobook.app, which is operated by the same controller. The collected data is not transferred to third parties; no external processor is involved. Beyond this we use no further analytics or marketing tools and embed no content from third-party servers.

6. Storage period and security

Beyond your enquiry we store no personal data. Enquiries by form or email are deleted as soon as they have been conclusively handled and no statutory retention periods stand in the way. We keep no server log files of our own; technically necessary connection data arises only at the hosting provider (see section 2) in the course of delivery. The website is delivered exclusively over an encrypted connection (TLS/HTTPS).

7. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also lodge a complaint with a data protection supervisory authority. For all of this, an informal email to [email protected] is enough.

8. Supervisory authority

The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2–4, 40213 Düsseldorf, Germany. You have the right to lodge a complaint there.

9. Status

July 2026. We adapt this policy whenever something changes technically on the website.