Privacy Policy | Surhay Design

Protecting your personal data matters to us. This website is built statically: it sets no cookies, embeds no tracking or analytics services and uses no advertising networks. Below we explain which data is processed nonetheless — and why.

1. Controller

The controller for data processing on this website within the meaning of the GDPR is:
Surhay Design, [Vor- und Nachname eintragen], [Straße und Hausnummer], [PLZ] Berlin, Germany
Email: hallo@surhay.design
Phone: [Telefonnummer]

We are not legally required to appoint a data protection officer; for any privacy-related matter please use the contact details above.

2. No cookies, no tracking

This website stores no cookies on your device and uses neither local storage nor session storage. No analytics, audience measurement or marketing tools are in use. That is also why there is no cookie banner here: no storage requiring consent under § 25 TDDDG takes place.

3. Hosting and server log files

This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Zypern. When you access the site, your browser transmits technically necessary data which the host stores in server log files:

IP address of the requesting device
date and time of access
name and URL of the retrieved file
volume of data transferred and notification of successful retrieval
browser type, browser version and operating system
referrer URL (the previously visited page)

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free delivery, stability and security of the website. This data is not merged with other data sources and is not evaluated for marketing purposes. Log files are deleted after 30 days at the latest. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

4. Contact form

Through the enquiry form on the contact page we process exclusively the details you enter there yourself:

Required: name, email address, your message and the selected service
Optional: phone number and company
A technical timestamp of the page load and a field invisible to you — both serve solely to fend off automated spam submissions and are not evaluated for any other purpose

We do not store an IP address in this context. Transmission is encrypted via HTTPS only. Your entries are not passed on to analytics or marketing services. For spam protection we deliberately use neither Google reCAPTCHA nor any comparable service that transfers data to the USA.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give explicitly before submitting and can withdraw at any time with effect for the future, and Art. 6 (1) (b) GDPR (pre-contractual measures taken at your request). Withdrawal does not affect the lawfulness of processing carried out until then.

To deliver the form we use the service Formspree, provided by Formspree, Inc., 1007 N Orange St, Wilmington, DE 19801, USA. Formspree forwards the message to our mailbox. The transfer to the USA is based on the EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR; Formspree is additionally certified under the EU-U.S. Data Privacy Framework. Please note that access to the data by US authorities cannot be entirely ruled out. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

We store your inquiry and the associated data until the purpose of storage no longer applies — that is, until your request has been fully handled — and at most until statutory retention periods expire. Alternatively, you can contact us informally at any time by email at hallo@surhay.design; in that case no third-party provider is involved.

5. Configurator

The website configurator runs entirely in your browser. Your selection is neither stored nor transmitted to us or to third parties. Only if you deliberately submit an inquiry at the end does section 4 apply.

6. Appointment booking

For initial consultations we link to the external service Cal.com (opens in a new tab). This is a plain link — no data is transmitted to Cal.com when you visit this website. Only when you click the link do you leave our site; from that point on, the provider's privacy policy applies.

7. Fonts and external content

All fonts used are hosted locally on our server. There is no connection to Google Fonts or other font providers. Likewise, no external scripts, maps, videos or social media plugins are loaded from third-party servers. Your IP address is therefore not transmitted to any third-party provider.

8. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar switching from “http://” to “https://”.

9. Your rights

You have the following rights towards us at any time:

access to the data processed about you (Art. 15 GDPR)
rectification of inaccurate data (Art. 16 GDPR)
erasure of your data (Art. 17 GDPR)
restriction of processing (Art. 18 GDPR)
data portability (Art. 20 GDPR)
objection to processing (Art. 21 GDPR)
withdrawal of a given consent with effect for the future (Art. 7 (3) GDPR)

An informal message to hallo@surhay.design is sufficient to exercise these rights.

10. Right to object

Where we process data on the basis of a legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority — in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit ( www.datenschutz-berlin.de (opens in a new tab)).

12. Changes to this privacy policy

We update this privacy policy whenever the legal situation or our processing activities change. The version current at the time applies to each of your visits. You will find the date at the end of this page.