Privacy policy

2. Website access and hosting

The website is hosted on a virtual server supplied by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO participates in the technical processing as our hosting provider.

Accessing the website requires the processing of connection data, including your IP address, date and time, requested pages and files, HTTP status, transfer volume, and browser-supplied information about your browser, operating system and, where applicable, referring page. This is used to deliver the website, diagnose errors and prevent attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation. The website cannot be displayed without the necessary connection data.

Web server logs are configured for daily rotation as part of server maintenance. For each log, no more than seven compressed archive files are retained in addition to the active file. Further rotations delete the oldest archive. Retention therefore follows the daily rotations actually performed; seven archive files do not guarantee deletion after exactly seven days. Logs are not configured to be sent by email.

3. Local content and necessary browser storage

Fonts, images, video previews, stylesheets and scripts are loaded from the same web server as the website. There are no integrated analytics tools, advertising pixels, external font services or embedded YouTube players. The website code does not set analytics or advertising cookies.

For technical navigation, the framework may temporarily store a destination URL in your browser’s sessionStorage to prevent repeated page reloads. This information is not used for recognition across websites and is removed when the navigation process completes or, at the latest, when the browser session ends. Necessary storage is based on Section 25(2)(2) of the German TDDDG; where personal data is involved, processing is based on Article 6(1)(f) GDPR.

4. Contact by email or telephone

When you contact us, we process your contact details, your enquiry and any project information to respond and prepare or carry out our collaboration. An email link initially opens your email application; a message is transmitted only when you send it. There is no contact form.

For enquiries concerning a contract with you, the legal basis is Article 6(1)(b) GDPR. Other enquiries and communications with company representatives are processed under Article 6(1)(f) GDPR based on our legitimate interest in handling business correspondence. Providing information is voluntary; without suitable contact details we cannot respond.

Enquiries are deleted when resolved and no longer needed. Correspondence subject to statutory retention as commercial or business letters is generally retained for six years from the end of the relevant calendar year; accounting vouchers are generally retained for eight years. This is based on Article 6(1)(c) GDPR in conjunction with Section 257 of the German Commercial Code or Section 147 of the German Fiscal Code. Any further storage required to establish or defend legal claims follows the applicable limitation periods.

5. Google Workspace email service

We use Google Workspace for our email account. Under Google’s contractual terms, the provider for customers with a German billing address is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Google processes sender and recipient addresses, messages, attachments and technical metadata as a service provider. Authorised persons at Motion Franz have access where necessary to handle the enquiry.

Google and its subprocessors may process data outside the European Economic Area, including in the United States. Google describes its transfer safeguards in the Cloud Data Processing Addendum and supplementary transfer terms: transfers covered by the EU-US Data Privacy Framework to certified recipients rely on the adequacy decision; other covered transfers to third countries rely in particular on EU Standard Contractual Clauses. Details and safeguards are available through the provider information linked below. The legal bases for our use are those explained in the contact section.

6. External links and YouTube

Project titles lead to YouTube in a new tab after a notice and your confirmation. Locally played video previews do not connect to YouTube. Connection data is transferred to the external provider only when you open its website; cookies and additional processing may then occur. The respective provider’s privacy policy governs that processing. Confirming the link only opens it and does not replace any consent that may be required on the external website.

Instagram is accessed only through a normal link; no Instagram feed or tracking pixel is embedded. Your browser connects to Instagram only when you open the link. The provider’s privacy information applies to its service.

7. Your rights

Subject to the statutory conditions, you may request access to your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing relies on your consent, you may withdraw it at any time for the future without affecting the lawfulness of prior processing. Please use the contact details above to exercise your rights.

Right to object: where processing is based on Article 6(1)(f) GDPR, you may object under Article 21 GDPR on grounds relating to your particular situation. We will stop the processing unless compelling legitimate grounds or purposes relating to legal claims justify continuing it. You may object to direct marketing at any time without giving reasons.

You may complain to a data protection supervisory authority, particularly in your place of residence, workplace or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany, linked below. This website does not carry out automated decision-making, including profiling, that produces legal or similarly significant effects.