Privacy Policy

1. Data controller

Email: hello@hedcreative.com
Phone: +49 176 700 916 11

2. General information

Personal data means any information relating to an identified or identifiable natural person.

We process personal data only as needed to operate this website, respond to enquiries and — with consent — for analytics.

Transmission is protected via HTTPS/TLS where supported by your browser. Internet transmissions may still involve residual security risks.

3. Hosting by IONOS

This website is hosted by IONOS SE. When you visit the site, server log files may be processed, including IP address, date and time of the request, requested resource, browser and operating system information and — if provided — the referrer URL.

Processing is carried out for technical delivery and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interests in secure and stable operation).

Where required, we enter into data processing agreements with processors. The current contractual status is reviewed internally.

4. Domain administration

The domain is administered via GoDaddy as registrar. In that role GoDaddy provides domain registration. No additional user tracking by the registrar is performed through this website.

5. Contact and contact form

If you contact us via the contact form or by email, we process the information you provide in order to handle and respond to your enquiry.

• Name
• Email address
• Phone number (optional)
• Message
• any other details you voluntarily provide (e.g. company, project type, budget)

The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to pre-contractual or contractual steps; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling enquiries).

Form data is received via our website API and stored in our own application environment. It is not sent to analytics or marketing services.

6. Google Analytics

If you consent to the “Analytics” category, we use Google Analytics (measurement ID G-61DMTLMMJ9). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Where necessary, data may also be transferred to Google LLC in the USA.

Google Analytics is used for visitor statistics and website optimisation. The legal basis is your consent under Art. 6(1)(a) GDPR and, where applicable, the rules on storing information on terminal equipment.

Google Analytics is loaded only after your explicit consent. You may withdraw consent at any time via Cookie Settings. Withdrawal is as easy as giving consent.

Analytics retention follows the retention settings configured in our Google Analytics account.

Further information: Google Privacy Policy, Google Analytics Opt-out.

7. Fonts

Fonts used on this website are served locally from our own infrastructure. Visiting the site does not trigger a connection to fonts.googleapis.com or fonts.gstatic.com.

8. Google Maps

No Google Maps embed is currently active on this website. If map content is added later, it will load only after consent to the “Marketing” category. Until then, no Maps scripts or iframes are loaded.

If activated, your IP address and technical connection data may be transferred to Google. The legal basis would then be your consent (Art. 6(1)(a) GDPR).

9. Instagram and social links

The footer may contain links to external profiles (e.g. Instagram). Until you click such a link, this website does not transfer data to Meta/Instagram. No Instagram embeds, feeds or Meta Pixel are currently integrated.

10. Cookies and consent management

We distinguish the following categories:

• Necessary: technical operation and storage of your consent choice
• Analytics: Google Analytics (only with consent)
• Marketing: external media such as Google Maps (only with consent, if enabled)

Your consent decision is stored locally in the browser under the key “hed_cookie_consent_v2” (version 2). We store the selected categories, timestamp and version number. This storage belongs to the “Necessary” category.

You can change or withdraw your choice at any time via “Cookie Settings” in the footer.

11. Retention

We retain personal data only as long as needed for the respective purposes or as required by law. Contact enquiries are generally kept until handled and thereafter according to legitimate interests or statutory obligations.

Server logs and analytics data are retained according to the relevant system or account settings and the purposes described above.

12. Your rights

Where the legal requirements are met, you have in particular the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR)

13. Supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. For our seat in Berlin, the competent authority is in particular:

Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de