privacy policy
1. Data Protection at a Glance
General Information
Who is responsible for data collection on this website?
How do we collect your data?
Other data is collected automatically or with your consent when you visit the website, primarily technical data (e.g., internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter the website.
What do we use your data for?
What rights do you have regarding your data?
For these and any other questions regarding data protection, you can contact us at any time.
2. Hosting
Webflow
The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter referred to as Webflow). When you visit our website, Webflow collects various log files, including your IP addresses. Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the site, providing certain website functions, and ensuring security (necessary cookies). For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy.
The use of Webflow is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in the most reliable presentation of our website. If consent has been requested, processing is exclusively based on Article 6(1)(a) of the GDPR and Section 25(1) of the German TTDSG, as far as consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be withdrawn at any time.
Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://webflow.com/legal/eu-privacy-policy. The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards when processing data in the USA. Any company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TT9jAAG&status=Active.
Data Processing Agreement (DPA)
3. General Information and Mandatory Disclosures
Data Protection
When you use this website, various personal data are collected. Personal data refers to data that can be used to personally identify you. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this occurs.
We would like to point out that data transmission over the Internet (e.g., communication via email) can have security vulnerabilities. Complete protection of the data from third-party access is not possible.
Notice Regarding the Responsible Party
Norskie Studio
Inh. Frederik Rein
Zeller Str. 57
73275 Ohmden
Email: hello@norskie.co
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
General Information on the Legal Basis for Data Processing on This Website
If your data is required to fulfill a contract or for pre-contractual measures, we process your data based on Article 6(1)(b) of the GDPR. Furthermore, if data processing is required to fulfill a legal obligation, we process your data based on Article 6(1)(c) of the GDPR. Data processing may also be carried out based on our legitimate interest under Article 6(1)(f) of the GDPR. The specific legal basis applicable in each case is explained in the following sections of this privacy policy.
Recipients of Personal Data
Revocation of Your Consent to Data Processing
Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
Right to Data Portability
Information, Correction, and Deletion
Right to Restrict Processing
- If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the period of verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection under Article 21(1) of the GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
SSL or TLS Encryption
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Cookies
Cookies can either be set by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies allow the integration of certain services from third-party companies on websites (e.g., cookies for processing payment services).
Cookies serve different purposes. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes.
Cookies required for electronic communication, providing certain functions you desire (e.g., shopping cart), or optimizing the website (e.g., cookies for measuring web audience) are stored based on Article 6(1)(f) of the GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies or similar recognition technologies, processing is carried out exclusively on the basis of that consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG); consent can be revoked at any time.
You can configure your browser to notify you when cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or in general, and enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
You can find which cookies and services are used on this website in this privacy policy.
Contact Form
The processing of this data is based on Article 6(1)(b) of the GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.
The data you provide in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—particularly retention periods—remain unaffected.
Request via Email, Phone, or Fax
The processing of this data is based on Article 6(1)(b) of the GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if this was requested; consent can be revoked at any time.
The data you send us through contact inquiries will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions—particularly legal retention periods—remain unaffected.
5. Plugins and Tools
Google reCAPTCHA
The purpose of reCAPTCHA is to check whether data entry on this website (e.g., in a contact form) is done by a human or through an automated program. To do this, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as the website visitor enters the site. reCAPTCHA evaluates various information for this analysis (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analysis runs entirely in the background. Website visitors are not informed that an analysis is taking place.
The storage and analysis of data are based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG, as far as the consent includes the storage of cookies or access to information on the user's device (e.g., device fingerprinting) in the sense of the TTDSG. Consent can be revoked at any time.
Further information about Google reCAPTCHA can be found in Google's privacy policy and terms of use at the following links:
https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.
The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the United States that ensures compliance with European data protection standards when processing data in the U.S. Every company certified under the DPF commits to adhering to these data protection standards. For more information, you can refer to the following link: https://www.dataprivacyframework.gov/participant/5780.