Privacy Policy
Last updated: October 2026
1. Privacy at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit this website or contact us for business purposes.
Personal data is any information that can be used to identify you personally. Detailed information about how we process your data is provided in the following sections of this Privacy Policy.
Data Collection on This Website
Who is responsible for data processing?
Data processing is carried out by the operator of this website. You can find the relevant contact details in the section "Information About the Data Controller".
How do we collect your data?
Some personal data is collected when you provide it to us directly, for example, when you contact us by email.
Other data is collected automatically by our IT systems or hosting provider when you visit our website. This includes technical information such as your IP address, browser information and the time of your visit.
How do we use your data?
Some data is processed to ensure that our website operates securely, reliably and without technical errors.
Information you provide when contacting us is used to respond to your enquiry, communicate with you and, where applicable, initiate or carry out a business relationship.
Information about data processing during online meetings and through our social media profiles is provided in the relevant sections of this Privacy Policy.
What rights do you have regarding your data?
Under applicable law, you have the right to access your personal data, request its correction or deletion, and request restrictions on its processing.
Under certain circumstances, you may object to the processing of your data or withdraw your consent at any time with effect for the future.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
Further information about your rights is provided in Section 3.
2. Hosting
External Hosting
Our website is hosted by:
Hostinger International Limited
61 Lordou Vironos str.
6023 Larnaca
Cyprus
When you visit our website, our hosting provider processes personal data, including technical connection data and server log files. This may include IP addresses, browser information, the time and content of server requests, and other technical usage data.
Processing is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is to provide a secure, stable and efficient website.
Where processing is necessary to initiate or perform a contract with the data subject, it is based on Article 6(1)(b) GDPR.
The applicable contractual data protection arrangements, including data processing provisions in accordance with Article 28 GDPR, govern the processing of personal data by our hosting provider.
Further information about Hostinger's data protection practices is available at:
https://www.hostinger.com/legal/privacy-policy
3. General Information and Mandatory Disclosures
Data Protection
We take the protection of your personal data seriously and treat it confidentially and in accordance with applicable data protection laws and this Privacy Policy.
Please note that data transmission over the internet, including email communication, may involve security risks. Complete protection against unauthorized access by third parties cannot be guaranteed.
Information About the Data Controller
The controller responsible for processing personal data is:
Dr. Naira Tributsch
distinktive studio
Gotlandstraße 6
10439 Berlin
Germany
Email: connect@distinktive.studio
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Legal Bases for Data Processing
We process personal data only where a lawful basis exists.
Where you have given your consent to the processing of your personal data, processing is based on Article 6(1)(a) GDPR.
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract, it is based on Article 6(1)(b) GDPR.
Where processing is necessary to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
In other cases, processing may be based on our legitimate interests under Article 6(1)(f) GDPR. This applies in particular to the secure operation of our website and business communications.
The applicable legal bases are explained in more detail in the following sections where necessary.
Data Retention
Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the purpose for which it was collected.
Once the purpose of processing no longer applies, the data will be deleted unless statutory retention requirements, legitimate grounds for continued storage or other legal obligations require otherwise.
Mandatory statutory retention periods, particularly those arising under tax and commercial law, remain unaffected.
Recipients of Personal Data
In the course of our business activities, personal data may be transferred to external service providers where necessary and legally permissible for the provision of our technical infrastructure, communication or performance of our services.
These providers may include website hosting, email and video conferencing service providers.
Where service providers process personal data on our behalf, this is carried out under the contractual data protection arrangements required by applicable law.
International Data Transfers
When using certain external services, personal data may be processed outside the European Union or European Economic Area, particularly in the United States.
Where such transfers occur, we comply with the requirements of Articles 44 et seq. GDPR.
Transfers may be based on an adequacy decision issued by the European Commission, where the relevant recipient is covered by such a decision, or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Further information about the relevant providers and their data processing activities is available in the following sections and in the linked privacy notices.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Object Under Article 21 GDPR
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
We will then cease processing the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. Following an objection, your personal data will no longer be processed for direct marketing purposes.
Right to Lodge a Complaint With a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a competent data protection supervisory authority.
You may lodge a complaint in particular with a supervisory authority in the EU Member State of your habitual residence, place of work or the location of the alleged infringement.
Right of Access, Rectification and Erasure
In accordance with applicable law, you have the right to obtain information about the personal data we process concerning you.
You may also request the correction of inaccurate personal data and, where the statutory requirements are met, the deletion of your personal data.
Right to Restriction of Processing
Under the conditions set out in Article 18 GDPR, you have the right to request the restriction of the processing of your personal data.
This applies in particular where you contest the accuracy of your data, processing is unlawful, you require the data for the establishment, exercise or defence of legal claims, or you have objected to processing while the balancing of interests is pending.
Right to Data Portability
Where the legal requirements are met, you have the right to receive personal data that you have provided to us and that we process by automated means on the basis of your consent or a contract, in a structured, commonly used and machine-readable format.
SSL/TLS Encryption
This website uses SSL or TLS encryption for security purposes.
You can identify an encrypted connection by the use of "https://" at the beginning of the website address.
Encryption helps protect data transmitted between your browser and our web server.
Objection to Unsolicited Advertising Emails
We object to the use of contact details published in accordance with legal notice requirements for sending unsolicited advertising or informational materials.
We reserve the right to take legal action in the event of unsolicited advertising communications, particularly spam emails.
4. Data Collection on This Website
Server Log Files
Our hosting provider automatically collects and stores information in server log files as part of the technical operation of our website.
This may include:
IP address
Date and time of the request
Pages and files accessed
Browser type and version
Operating system used
Referrer URL
Technical information relating to the request and server response
This information is processed to ensure the technical operation of the website, identify errors and protect against misuse and attacks.
The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and technically reliable website.
The retention period is determined by the technical and contractual settings applicable to our hosting service.
Contact by Email
If you contact us by email, we process the personal data you provide.
This may include your name, email address, business contact details, the content of your message and any attachments you send.
This information is processed to respond to your enquiry and manage business communications.
Where your enquiry concerns the initiation or performance of a contract with you, processing is based on Article 6(1)(b) GDPR.
For enquiries from representatives of companies and other business contacts, processing may be based on Article 6(1)(f) GDPR. Our legitimate interest is to respond to business enquiries and maintain professional relationships.
We use Hostinger's email services for business communications. The provider processes the data necessary to transmit, deliver and store email messages.
Personal data is deleted when it is no longer required for handling the enquiry or maintaining the business relationship, unless statutory retention requirements or other legitimate grounds justify continued storage.
Locally Hosted Fonts and Video Files
We use locally stored font files and video files on our website.
These files are delivered through our website or hosting infrastructure. When they are accessed, the technical data described in the "Server Log Files" section may be processed.
Providing these files does not involve a separate transfer of data to external font providers or video platforms.
5. Online Conferences Using Google Meet and Zoom
We use Google Meet and Zoom to conduct online meetings with clients, prospective clients and business partners.
When these services are used, personal data may be processed, including:
Participants' names and, where applicable, email addresses
IP addresses and technical connection data
Device and browser information
Date, time and duration of participation
Audio and video data
Chat messages and content shared during meetings
Data is processed to organize and conduct business meetings, communicate with participants, and initiate or maintain business relationships.
Where processing is necessary to initiate or perform a contract with the data subject, it is based on Article 6(1)(b) GDPR.
In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to facilitate efficient business communication regardless of location.
The use of additional recording, transcription and AI-assisted summarization features is described separately in Section 6.
Google Meet
We use the Google Meet video conferencing service.
For general Google consumer services in the European Economic Area, the responsible provider is generally:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
When Google Meet is used, Google processes personal data in accordance with its applicable privacy policies and terms of service.
Personal data may also be processed outside the European Economic Area.
Further information:
https://policies.google.com/privacy?hl=en
https://support.google.com/meet/answer/10382037?hl=en
Zoom
We use the Zoom video conferencing service.
The provider is:
Zoom Communications, Inc.
55 Almaden Blvd, Suite 600
San Jose, CA 95113
USA
When Zoom is used, the provider processes personal data to deliver and operate its video conferencing service.
Personal data may be processed in the United States and other countries outside the European Economic Area.
Further information:
https://www.zoom.com/en/trust/privacy/privacy-statement/
https://www.zoom.com/en/trust/gdpr/
6. Meeting Recordings, Transcriptions and AI-Assisted Summaries
Nature and Purpose of Processing
During business meetings conducted online, we may use recording, transcription or AI-assisted summarization features after obtaining the prior consent of the participants concerned.
The following personal data may be processed:
Audio recordings and, where applicable, video recordings
Spoken conversation content
Written transcripts
Participants' names and statements
Automatically generated meeting notes
AI-generated summaries, decisions and action items
This processing supports the documentation of business meetings, follow-up activities, the recording of agreed actions and quality assurance in our project work.
Participant Consent
Before activating the relevant features, we inform participants about the nature and purpose of the intended processing.
Recordings, stored transcripts and AI-assisted meeting summaries are used only where valid consent or another required legal basis exists.
Where processing is based on consent, the legal basis is Article 6(1)(a) GDPR.
Consent may be withdrawn at any time with effect for the future.
If consent is not given, meetings can be conducted without the relevant optional features.
Use of AI-Assisted Features
We may use features provided by the respective video conferencing platforms to generate automatic transcripts and meeting summaries.
For these purposes, the conversation content required for the relevant function is technically processed and may be analysed by AI systems to generate summaries, meeting notes and action lists.
AI-generated content may be incomplete or inaccurate. We therefore review such content before using it in our subsequent project work.
We do not use these summaries to make decisions based solely on automated processing within the meaning of Article 22 GDPR.
Information about data processing by the respective service providers is available in Section 5.
Storage and Deletion
Recordings, transcripts and AI-generated meeting summaries are stored only for as long as necessary for their respective purposes.
Raw meeting recordings are generally deleted no later than 30 days after the meeting, unless documented reasons justify a longer retention period.
Transcripts and meeting summaries are deleted when they are no longer required for the relevant business relationship and no statutory retention obligations or other legal grounds require continued storage.
Access to stored content is restricted to persons authorized to participate in the relevant business relationship.
7. Social Media Profiles
We maintain a professional presence on LinkedIn and use the platform to present our services, build professional networks and communicate with prospective clients, existing clients and business partners.
In addition, a personal LinkedIn profile may be used for business communication and to present our professional services.
For users within the European Economic Area, the service provider is:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
When you visit our LinkedIn profiles or interact with us through LinkedIn, personal data may be processed.
This may include profile information, messages, comments, reactions and information about interactions with our posts.
We process data made available to us through LinkedIn primarily for communication, responding to enquiries and maintaining professional relationships.
Where applicable, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR. Our legitimate interest is to communicate with business contacts, maintain our public presence and present our services.
LinkedIn also processes personal data in accordance with its own privacy policies.
In connection with statistical evaluations of our LinkedIn company page ("Page Insights"), LinkedIn and the operator of the company page act as joint controllers for the relevant processing under Article 26 GDPR. LinkedIn provides the corresponding joint controller arrangement.
Further information:
https://www.linkedin.com/legal/privacy-policy
https://www.linkedin.com/legal/l/page-joint-controller-addendum
Data Processing by Social Networks
When you visit our social media profiles, the respective platform operators may process personal data, for example to provide their services, analyse user behaviour or conduct their own advertising activities.
We have only limited influence over these processing activities.
Further information about data processing by the platform operators, international data transfers and your rights is available in the respective providers' privacy policies.
You may contact us at any time regarding data protection matters relating to our processing of your personal data.
Source for parts of the original German Privacy Policy: https://www.e-recht24.de
Supplemented and adapted for distinktive studio.
© 2026 distinktive studio