Privacy Policy | Mustard Seed

Below we inform you in accordance with the legal requirements of data protection law (in particular the German Federal Data Protection Act, BDSG, and the European General Data Protection Regulation, “GDPR”) about the type, scope, and purpose of processing personal data by our company. This privacy policy applies to our website and our social media profiles.

1. Name and contact details of the controller

The controller (hereinafter the “controller”) within the meaning of Art. 4 (7) GDPR is:

Levi Hinnenthal
Unter den Ulmen 49
33330 Gütersloh
Germany
Email: info@mustardseedstudio.de
Phone: +49 157 34731854

2. Types of data processed and purpose of processing

We process the following types of data:

Inventory data (e.g. names, addresses).
Contact data (e.g. email, phone numbers).
Content data (e.g. text entered in forms).
Usage data (e.g. websites visited, interest in content, access times).
Meta/communication data (e.g. device information, IP addresses).

Purposes of processing:

Provision of the online offer and user-friendliness.
Responding to contact inquiries and communicating with users.
Marketing, advertising, and market research.
Security measures.

3. Legal bases

The processing of your data is based on:

Consent (Art. 6 (1)(a) GDPR).
Performance of a contract or pre-contractual inquiries (Art. 6 (1)(b) GDPR).
Legal obligation (Art. 6 (1)(c) GDPR).
Legitimate interests (Art. 6 (1)(f) GDPR), in particular in the analysis, optimisation, and economical operation of our online offer.

4. Analytics and advertising tools

Google Analytics 4

We use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland).

Function: analysis of user behaviour. IP anonymisation is enabled by default.
Legal basis: consent (Art. 6 (1)(a) GDPR).
Objection: you can disable collection via a browser add-on.

Google Ads (Conversion Tracking & Remarketing)

We use Google Ads to draw attention to our offers on external websites.

Function: measuring the success of advertising (conversion tracking) and re-targeting visitors (remarketing).
Legal basis: consent (Art. 6 (1)(a) GDPR).

Microsoft Clarity

We use Microsoft Clarity (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA).

Function: creation of heatmaps, session recordings, and analyses to improve usability. Microsoft collects or receives personal data from you in order to provide Microsoft products.
Legal basis: consent (Art. 6 (1)(a) GDPR).

5. Getting in touch

When you contact us (e.g. via the contact form or by email), the user’s details are processed in order to handle the inquiry. We delete inquiries once they are no longer required and no statutory archiving obligations (e.g. 10 years for business letters) apply.

6. Data transfer to third countries

If we process data in a third country (outside the EU/EEA), this only takes place to fulfil our (pre-)contractual obligations, on the basis of your consent, due to a legal obligation, or on the basis of our legitimate interests (Art. 44 et seq. GDPR).

7. Your rights as a data subject

You have the right to:

Access to your stored data (Art. 15 GDPR).
Rectification of inaccurate data (Art. 16 GDPR).
Erasure of your data (Art. 17 GDPR).
Restriction of processing (Art. 18 GDPR).
Data portability (Art. 20 GDPR).
Object to processing (Art. 21 GDPR).
Withdrawal of consent given (Art. 7 (3) GDPR).
Lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Data security

We use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest level of encryption supported by your browser.