Privacy Policy

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

Data on this website is collected by the website operator, whose contact details you will find in the section "Controller" below. Some data is collected because you provide it to us — for example via the contact form. Other data is collected automatically by our IT systems when you visit the website; this is primarily technical data such as your internet browser, operating system or the time the page was accessed.

This website uses no analytics, tracking or advertising cookies and embeds no third-party services that evaluate your data for their own purposes. A cookie banner is therefore not required.

The controller responsible for data processing on this website is:

DMax-Design Sestan Domagoj Riesengebirgstr. 11 73035 Göppingen Germany

Phone: +49 176 30724285 Email: info@dmax-design.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Where we obtain your consent for processing operations, Art. 6(1)(a) GDPR is the legal basis. Where processing serves the performance of a contract or the implementation of pre-contractual measures — for example when you enquire about a quote — Art. 6(1)(b) GDPR is the legal basis. Otherwise we base processing on our legitimate interest in the secure, error-free and economical operation of this website (Art. 6(1)(f) GDPR).

You may withdraw consent you have given at any time with effect for the future. The lawfulness of the processing carried out until withdrawal remains unaffected.

Unless a more specific retention period is stated in this privacy policy, your personal data remains with us until the purpose for processing no longer applies. If you make a legitimate request for erasure or withdraw your consent, your data will be deleted unless we have other legally permissible grounds for storing it — such as tax or commercial retention periods of up to ten years.

This website is hosted by an external service provider. The provider is:

Hostinger International Ltd. 61 Lordou Vyronos Street 6023 Larnaca Cyprus

On our behalf, the provider processes the data generated when you visit this website — in particular IP addresses, access data and the content of contact enquiries. A data centre within the European Union has been selected as the server location.

The provider is used on the basis of Art. 6(1)(f) GDPR: we have a legitimate interest in the secure, fast and reliable provision of our online offering. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.

The host automatically collects and stores information in so-called server log files, which your browser transmits automatically. This is:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing computer
• time of the server request
• IP address

This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in the technically error-free presentation and the security of this website. Log data is deleted after 30 days at the latest.

This website uses no cookies for analytics, tracking or advertising purposes. Only two technically necessary settings are stored on your device:

• NEXT_LOCALE (cookie): stores the language you have chosen so the website greets you in the same language on your next visit. Lifetime: up to twelve months.
• theme (local storage): stores whether you have chosen the light or the dark appearance. This information never leaves your device.

Neither entry contains personal data, neither allows you to be recognised as a person, and neither is shared with third parties. Because this storage is strictly necessary for a function you have expressly requested, no consent is required under § 25(2) no. 2 TDDDG; the subsequent processing is based on Art. 6(1)(f) GDPR.

You can delete stored cookies and local data in your browser at any time. The website remains fully usable afterwards; only your language and appearance choices will no longer be remembered.

When you write to us via the contact form, we process the details you provide:

• first name and last name
• email address (required)
• phone number (optional)
• your message
• the language version of the website you used and the time of submission

We use this data exclusively to answer your enquiry and in case of follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract, otherwise Art. 6(1)(f) GDPR together with your consent under Art. 6(1)(a) GDPR, which you give by ticking the consent box.

To protect against automated bulk submissions, every submission is checked technically: the form contains a field invisible to you whose completion indicates automated sending, we evaluate the time between opening and submitting the form, and we limit the number of submissions per IP address within a short period. No data is transmitted to third parties and no profiles are created in the process.

Your message is delivered to our mailbox via the email service of our hosting provider, with whom a data processing agreement is in place.

Your enquiry remains with us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies — for example once your enquiry has been dealt with. Mandatory statutory retention periods remain unaffected.

Providing your data is voluntary. Without an email address and a message, however, we cannot answer your enquiry.

If you contact us by email or telephone, your enquiry including all personal data arising from it will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent. The legal basis and retention period correspond to the details in the preceding section.

This website uses the typefaces Fraunces and Hanken Grotesk. The font files are served exclusively and locally from our own server. No connection to servers operated by Google or other font providers is established when the pages are accessed, and no data is transferred to third parties.

This website uses no web analytics services, no advertising networks, no social media plugins and no embedded third-party maps or videos. Neither profiling nor automated decision-making within the meaning of Art. 22 GDPR takes place.

Beyond the service providers named in this policy, no data is passed on to third parties. Personal data is not transferred to third countries outside the European Union or the European Economic Area.

This website contains links to external third-party websites — for example a plain text link for route planning via Google Maps. These are simple links without embedded content; data is only transferred to the respective provider once you actively click the link. The respective provider is responsible for data processing on the linked pages.

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address line changing from "http://" to "https://" and by the padlock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

Within the framework of the applicable statutory provisions, you have the following rights at any time:

• information about the personal data we hold about you and about its origin, recipients and purpose (Art. 15 GDPR)
• rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• erasure of the data we hold about you (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
• objection to processing (Art. 21 GDPR)

Right to object: where data processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

An informal message to info@dmax-design.de is sufficient to exercise your rights.

In the event of infringements of the GDPR you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20 70173 Stuttgart, Germany Postfach 10 29 32, 70025 Stuttgart Phone: +49 711 615541-0 Email: poststelle@lfdi.bwl.de

Irrespective of this, under Art. 77 GDPR you may also contact the supervisory authority of your habitual residence or place of work.

We adapt this privacy policy whenever changes in the legal situation or on our website make it necessary. The version available on this page applies in each case.

Version: September 2026.