Privacy policy

This policy explains how Yanderesa Studio processes personal data when you use our website and services.

01

Data controller

Julio Sergio Jordan Zamora trading as Yanderesa Studio, Hansastraße 10, 24118 Kiel, Germany. Email: hi@yanderesa.net.

02

Data processors

We use data processors for hosting, authentication, database and storage, email delivery, error monitoring, analytics, payment processing, scheduling, CRM and AI tools. Contracts for data processing pursuant to Art. 28 GDPR are in place with these providers where required.

03

Information collected

Contact details, project information, invoices, communications, technical connection data, server logs and information voluntarily provided.

04

Purpose

Providing quotations, delivering services, invoicing, customer support, contract performance and improving our services.

05

Legal basis

GDPR Articles 6(1)(a), (b), (c) and (f), where applicable (consent, contract, legal obligation and legitimate interests).

06

Hosting and infrastructure

The website is hosted on Vercel. Application data is stored in Supabase. Authentication is provided by Clerk. Transactional email is sent via Resend. Error monitoring uses Sentry. Analytics use Vercel Analytics in a cookieless configuration.

07

Transfers to third countries

Some data may be processed by service providers based outside the European Economic Area (for example, the USA). In such cases, we ensure that appropriate safeguards pursuant to Art. 46 GDPR are in place, in particular Standard Contractual Clauses (SCC).

08

Payments

Payments may be processed through Stripe or SEPA bank transfer.

09

Scheduling

Online meeting bookings may be handled through Cal.com (cal.eu).

10

CRM

Customer, project and invoice information is managed through an internal CRM on this platform.

11

Artificial intelligence

AI tools may assist creative and administrative workflows under human supervision. For further information on the responsible use of AI, please refer to our AI transparency policy.

12

Cookies

We use technically necessary cookies and session cookies required to operate the site (for example authentication and locale). We do not use optional marketing cookies at launch. Analytics run without a consent banner because they are configured to be cookieless.

13

Your rights

You have rights of access, correction, deletion, restriction, portability and objection under the GDPR.

14

Data retention

We retain personal data only for as long as necessary for the purposes described or as required by law.

15

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Schleswig Holstein is the Independent State Centre for Data Protection Schleswig Holstein (ULD), Holstenstraße 98, 24103 Kiel.

16

Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration.