Privacy policy
This policy explains how Yanderesa Studio processes personal data when you use our website and services.
Data controller
Julio Sergio Jordan Zamora trading as Yanderesa Studio, Hansastraße 10, 24118 Kiel, Germany. Email: hi@yanderesa.net.
Data processors
We use data processors for hosting, authentication, database and storage, email delivery, error monitoring, analytics, payment processing, scheduling, CRM and AI tools. Contracts for data processing pursuant to Art. 28 GDPR are in place with these providers where required.
Information collected
Contact details, project information, invoices, communications, technical connection data, server logs and information voluntarily provided.
Purpose
Providing quotations, delivering services, invoicing, customer support, contract performance and improving our services.
Legal basis
GDPR Articles 6(1)(a), (b), (c) and (f), where applicable (consent, contract, legal obligation and legitimate interests).
Hosting and infrastructure
The website is hosted on Vercel. Application data is stored in Supabase. Authentication is provided by Clerk. Transactional email is sent via Resend. Error monitoring uses Sentry. Analytics use Vercel Analytics in a cookieless configuration.
Transfers to third countries
Some data may be processed by service providers based outside the European Economic Area (for example, the USA). In such cases, we ensure that appropriate safeguards pursuant to Art. 46 GDPR are in place, in particular Standard Contractual Clauses (SCC).
Payments
Payments may be processed through Stripe or SEPA bank transfer.
Scheduling
Online meeting bookings may be handled through Cal.com (cal.eu).
CRM
Customer, project and invoice information is managed through an internal CRM on this platform.
Artificial intelligence
AI tools may assist creative and administrative workflows under human supervision. For further information on the responsible use of AI, please refer to our AI transparency policy.
Cookies
We use technically necessary cookies and session cookies required to operate the site (for example authentication and locale). We do not use optional marketing cookies at launch. Analytics run without a consent banner because they are configured to be cookieless.
Your rights
You have rights of access, correction, deletion, restriction, portability and objection under the GDPR.
Data retention
We retain personal data only for as long as necessary for the purposes described or as required by law.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Schleswig Holstein is the Independent State Centre for Data Protection Schleswig Holstein (ULD), Holstenstraße 98, 24103 Kiel.
Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration.
