Privacy policy
Last updated: 22 September 2026
1. Controller
Inna Orendarenko
Craftio Webdesign
Zschochersche Straße 39
04229 Leipzig
Deutschland
craftio.design@gmail.com
2. Hosting and server logs
This website is hosted by Hostinger. To deliver and secure the website, the hosting systems process technical connection data, including IP address, date and time, requested resource, referrer, browser and operating system. Processing is based on Art. 6(1)(f) GDPR (secure and reliable operation). We have concluded a data processing agreement with the host.
3. Contact
If you contact us or use a contact form, we process the information you provide to answer your request and, where applicable, to take steps prior to entering into a contract (Art. 6(1)(b) GDPR) or on the basis of our legitimate interest in responding efficiently (Art. 6(1)(f) GDPR). Data is deleted when the purpose no longer applies, subject to statutory retention obligations.
3.1 Contact forms and email delivery
Our contact forms are provided by Forminator on this website. When you send an enquiry, we process the information you enter (selected service, name, telephone number, email address and message) and data required for technical delivery. Providing this information is voluntary, but we cannot respond without your message and a way to contact you. The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries and otherwise Art. 6(1)(f) GDPR (responding to enquiries). Acknowledging this policy in the form is not consent to analytics or advertising.
Storage of form submissions in the Forminator dashboard is currently disabled. The form message is sent by email through Hostinger’s SMTP service to a Gmail mailbox. Hostinger, as the technical sending service, and Google, as the mailbox provider, therefore receive the data needed for delivery and the message content. Processing outside the EEA cannot be ruled out. Messages are deleted once the enquiry has been dealt with, unless statutory retention duties or legitimate reasons require further storage. An email reply also processes your address and message content.
4. Consent and cookies
We use technically necessary storage to remember language and privacy choices and to provide requested functions (§ 25(2) TDDDG; Art. 6(1)(f) GDPR). The first-party item “craftio_consent” stores the selected categories and policy version for 180 days. Optional analytics is activated only with consent (§ 25(1) TDDDG; Art. 6(1)(a) GDPR). Consent is voluntary and may be withdrawn at any time via “Privacy settings”, without affecting prior processing.
5. Google Analytics
After consent, Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) measures visits and interactions. It may process online identifiers, device/browser information, approximate location and usage data. The first-party cookies “_ga” and “_ga_<ID>” distinguish users and maintain session state; their default lifetime is up to two years, subject to our configuration and browser limits. Google may process data in the United States. Where applicable, transfers are based on the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses. We use the service solely on the basis of consent. You can withdraw consent at any time.
6. Locally hosted fonts
Fonts are served from this website. No connection to Google Fonts is made for font delivery.
7. External links
Links to services such as WhatsApp establish a connection to the provider only after you click the link. The provider’s own privacy terms then apply.
8. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent. You may lodge a complaint with a data protection supervisory authority, in particular the Saxon Data Protection and Transparency Commissioner.
9. Security and updates
We use TLS encryption and appropriate technical and organisational measures. This policy is updated when services or legal requirements change.