Last updated: April 2026 · Version 1.0
This privacy notice informs you about the processing of personal data when using the website h-b-studio.de and our services.
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
ALEVOR Mittelstandspartner GmbH
Titurelstraße 10, 81925 Munich, Germany
Email: info@h-b-studio.de LinkedIn
Commercial register: Munich Local Court (Amtsgericht München), HRB 301846
VAT identification number: DE454875997
A data protection officer is not legally required. For questions about data protection, please contact us directly at info@h-b-studio.de.
We process personal data only to the extent necessary and only for as long as required for the respective purposes. Processing is based on the GDPR and the German Federal Data Protection Act (BDSG). Your data is only passed on to third parties where this is necessary to provide our services or legally required.
When you access our website, our hosting provider Netlify automatically collects the following information:
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and functionality of the website).
Retention period: 30 days, after which the data is automatically deleted.
Provider: Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. Legal basis for the transfer to a third country: Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. Details: netlify.com/privacy
If you contact us via the contact form, the data you enter is processed via Netlify Forms and forwarded to our email address.
Data processed: Name, email address, subject, message.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR.
Retention period: Until your inquiry has been fully processed, and no later than 12 months.
To provide our AI consulting services and the AI Quickcheck, we use the API of Anthropic, PBC, 548 Market Street PMB 90375, San Francisco, CA 94104, USA.
Data transmitted: The content you enter (e.g. information about your situation, your Quickcheck answers) is transmitted to Anthropic for processing.
Automated decision-making: The AI analysis is a suggestion, not a binding decision. No automated decision-making within the meaning of Art. 22 GDPR takes place.
Transfer to a third country: Processing takes place on Anthropic's servers in the USA. Legal basis: Standard Contractual Clauses (Art. 46(2)(c) GDPR). The data is not used for training purposes.
Legal basis: Art. 6(1)(b) GDPR. Details: anthropic.com/privacy
We use Brevo to send confirmation and communication emails.
Data processed: Email address, content of the message sent, delivery status.
Provider: Sendinblue GmbH (Brevo), Köpenicker Straße 126, 10179 Berlin, Germany.
Legal basis: Art. 6(1)(b) and (f) GDPR. Details: brevo.com/de/legal/privacypolicy
Payment processing for our products and services is handled via Stripe.
Data processed: Name, email address, payment data. We do not store any credit card data ourselves.
Provider: Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Dublin, Ireland. Legal basis for the transfer to a third country: EU-US Data Privacy Framework and Standard Contractual Clauses.
Legal basis: Art. 6(1)(b) GDPR.
Retention period: Transaction records for 10 years pursuant to § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO). Details: stripe.com/privacy
Our website exclusively uses technically necessary cookies:
Legal basis: § 25(2) no. 2 TTDSG (German Telecommunications-Telemedia Data Protection Act) and Art. 6(1)(f) GDPR. We do not use tracking or advertising cookies without your explicit consent.
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
Google Analytics is only used if you have expressly consented to the use of analytics cookies. Without your consent, no data is transmitted to Google.
IP anonymization: We have activated IP anonymization. Your IP address is shortened by Google within the EU before being stored.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by deleting the cookie settings in your browser or by installing the browser plugin at tools.google.com/dlpage/gaoptout.
Retention period: Google Analytics stores user data for 14 months. Details: policies.google.com/privacy
Data transfer to the USA: Google may transfer data to servers in the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection.
To exercise your rights: info@h-b-studio.de
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0) 981 180093-0
Email: poststelle@lda.bayern.de
Our services are aimed exclusively at persons who have reached the age of majority. We do not knowingly collect data from persons under 18 years of age. Should we become aware of such data, we will delete it immediately.
Our website uses SSL/TLS encryption. You can recognize an encrypted connection by the "https://" and the padlock icon in your browser.
We reserve the right to amend this privacy policy so that it always complies with current legal requirements. The new privacy policy will then apply to your next visit.
Last updated: April 2026 · Version 1.0