This is a starting template, not a finished legal document. Placeholders below (company name, address, registration number, and specific third-party tools) need to be filled in — ideally reviewed by a German data-protection lawyer or Datenschutzbeauftragter — before this page goes live.
The controller responsible for data processing on this website (Verantwortlicher gemäß Art. 4 Nr. 7 DSGVO) is:
[Company legal name]
[Street address]
[Postal code, City], Germany
Commercial register: [Registergericht, HRB number]
Email: privacy@vida-models.ai
We process personal data in three situations: when you submit the contact form, through basic technical server logs generated by normal site operation, and — only if you opt in — through analytics. We do not sell personal data, and we do not use it for automated profiling or advertising retargeting.
When you use the contact form we collect the fields you submit — name, email, company, phone (if provided), project details, and any model or service preferences you select. This data is used solely to respond to your inquiry and, if a project proceeds, to administer that engagement.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering a contract) and, where no contract follows, Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries).
Our hosting provider automatically records standard technical information for every request — IP address, browser type, referring page, date and time — for security and stability purposes. This is deleted automatically after a short retention window (typically 7–30 days, depending on the hosting provider selected).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, functioning website).
This site uses a single piece of technically necessary local storage to remember your cookie preference, so we don't ask again on every visit. This is exempt from consent under §25(2) TTDSG because it is strictly necessary for a service you explicitly requested (remembering your choice).
No other storage is set unless you opt in to analytics via the cookie banner or the "Cookie settings" link in the footer.
If you opt in, we use [analytics provider — e.g. Plausible/Fathom/GA4] to understand aggregate traffic patterns. [If using a cookieless, EU-hosted tool like Plausible or Fathom: no personal data is stored on your device and no cross-site tracking occurs. If using Google Analytics: IP addresses are anonymized/truncated and data is processed under a data processing agreement; note this requires consent and, if outside the EU, appropriate safeguards — see Section 08.]
Legal basis: Art. 6(1)(a) GDPR (your consent, given via the cookie banner) — you can withdraw this at any time via "Cookie settings" in the footer, with no effect on data already aggregated anonymously.
Depending on which providers we finalize, the following categories of processor may handle data on our behalf, each bound by a Data Processing Agreement (Art. 28 GDPR):
[List the specific providers you finalize here, along with links to their own privacy policies.]
Where a processor is based outside the EU/EEA (for example, a US-based hosting or file-delivery provider), data transfers rely on an adequacy decision or EU Standard Contractual Clauses (Art. 46 GDPR). Choosing EU-based providers where practical (e.g. for hosting and analytics) reduces this exposure — worth weighing against the file-delivery workflow you settle on.
Contact form submissions are kept for the duration of the resulting business relationship plus statutory retention periods under German commercial and tax law (typically 6–10 years for anything tied to an invoice, per §257 HGB / §147 AO), or deleted after [X months] if no project results. Server logs are deleted automatically per Section 04.
You have the right to:
To exercise any of these, contact us at the address in Section 12.
You have the right to lodge a complaint with a supervisory authority. The competent authority for [Bundesland, e.g. Berlin/Bavaria/etc.] is:
[Name of Landesdatenschutzbehörde]
[Address]
[Website]
You may also contact the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI) for general guidance.
Questions about this policy or your data: privacy@vida-models.ai