Privacy Policy

1. Introduction

EvenetDesign processes personal data in compliance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG — Bundesdatenschutzgesetz).

2. Controller

EvenetDesign, Torstraße 68, 10119 Berlin, Germany. studio@evenetdesign.com. +49 30 2576 4893.

3. Data Collected

Contact forms: Name, email, phone, project details. Design projects: Brand assets, content, credentials (encrypted). Payment: Stripe (PCI DSS Level 1). Card data never touches our servers. Analytics: Plausible (EU-hosted, cookie-free).

4. Legal Basis

Contract performance Art.6(1)(b), legitimate interest Art.6(1)(f), legal obligation Art.6(1)(c), consent Art.6(1)(a).

5. Data Sharing

Stripe Inc. (US, Standard Contractual Clauses), Plausible Analytics (EU), Figma Inc. (US, SCCs), EU hosting. Never sold.

6. Retention

Enquiries: 3 years. Project files: 12 months post-delivery. Payment/accounting: 10 years (German fiscal law — §147 AO Abgabenordnung, §257 HGB). Comms: 3 years.

7. Your Rights

Access (Art.15), rectification (Art.16), erasure (Art.17), restriction (Art.18), portability (Art.20), objection (Art.21). Contact studio@evenetdesign.com (response within 30 days). Supervisory authority: BfDI (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit), Graurheindorfer Str. 153, 53117 Bonn. Alternatively: Berliner Beauftragte für Datenschutz, Friedrichstr. 219, 10969 Berlin.

8. Security

TLS 1.3, 2FA, encrypted storage, OAuth for third-party access. Updated: March 2026.