Legal

Privacy Policy

Last Updated: 30. July 2026

Azulia Studio ("I", "my", or "me") operates the azuliastudio.biz website (the "Service"). This Privacy Policy outlines my practices regarding the collection, use, and disclosure of your personal data when you use my Service and the choices you have associated with that data.

I use your data to provide and improve the Service. By using the Service, you acknowledge that you have read and understood this Privacy Policy. Unless otherwise defined in this Privacy Policy, terms used have the same meanings as in my Terms and Conditions, accessible from Terms of Service.

1. Controller and Data Protection Contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is:

Jan Nyboer
Azulia Studio
Geschwister-Scholl-Str. 11
48527 Nordhorn
Germany

Email: contact@azuliastudio.biz: contact@azuliastudio.biz

For any questions or concerns regarding your data protection, you can contact me directly using the details above. Full details can also be found in my Impressum (Legal Notice).

2. Information Collection And Use

I collect several different types of information for various purposes to provide and improve my Service to you.

2.1. Types of Data Collected

2.1.1. Personal Data

While using my Service, I may ask you to provide me with certain personally identifiable information that can be used to contact or identify you ("Personal Data"). Personally identifiable information may include, but is not limited to:

Email address (e.g., when you submit a contact form)
First name and last name (e.g., when you submit a contact form)
Phone number (if you choose to provide it)
Address, State, Province, ZIP/Postal code, City (if you choose to provide it, e.g., for invoicing if applicable)
Data provided through cookies and similar technologies (see section on "Tracking & Cookies Data" and my separate Cookie Policy

2.1.2. Usage Data (Server Log Files)

My hosting provider (Cloudflare, see section 5.3) automatically collects and stores information in so-called server log files, which your browser automatically transmits. This Usage Data may include:

Browser type and browser version
Operating system used
Referrer URL (the previously visited page)
Hostname of the accessing computer
Time of the server request
IP address (this is typically logged by hosting providers, often in an anonymized or truncated form after a short period).

This data is not typically combined with other data sources by me. It is processed to ensure the functionality, security, and optimization of the website.

Legal Basis: The processing of this data is based on my legitimate interest (Art. 6(1)(f) GDPR) in ensuring the technical functionality, security, and stability of my website and to correctly deliver its content.

Retention: Server log files are typically retained by the hosting provider for a short period (e.g., 7 to 14 days) for security analysis and then deleted or anonymized.

2.1.3. Tracking & Cookies Data

I use cookies and similar tracking technologies to track activity on my Service and store certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. The use of cookies is subject to the provisions of the German Telecommunications-Digital Services-Data Protection Act (TDDDG).

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of my Service.

For detailed information on the cookies I use, their purpose, which specific cookies are set, their duration, the legal basis for their use (especially distinguishing between essential and non-essential cookies requiring consent), how you can manage your consent (e.g., via a cookie banner), and how to withdraw it, please see my separate Cookie Policy.

2.2. SSL/TLS Encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as purchase orders or inquiries you send to me as the site operator. You can recognize an encrypted connection in your browser's address line when it changes from "http://" to "https://" and the lock icon is displayed in your browser's address bar.

If SSL or TLS encryption is activated, the data you transfer to me cannot be read by third parties.

Legal Basis: My legitimate interest (Art. 6(1)(f) GDPR) in protecting transmitted data and providing a secure website experience.

3. Use of Your Data

Azulia Studio uses the collected data for various purposes:

To provide, operate, and maintain my Service
To improve, personalize, and expand my Service
To understand and analyze how you use my Service
To develop new products, services, features, and functionality
To communicate with you, either directly or through one of my partners, including for customer service, to provide you with updates and other information relating to the Service, and for marketing and promotional purposes (where consent is obtained if required)
To process your transactions and manage your orders (if applicable)
To send you emails (e.g., responding to inquiries)
To find and prevent fraud and address technical issues
To ensure the security and stability of the Service

4. Legal Basis for Processing Personal Data (GDPR)

If you are from the European Economic Area (EEA), Azulia Studio's legal basis for collecting and using the personal information described in this Privacy Policy depends on the Personal Data I collect and the specific context in which I collect it. For each specific processing activity, the legal basis is detailed in the relevant sections of this policy. In accordance with current case law and guidelines from the European Data Protection Board (EDPB), Azulia Studio may process your Personal Data based on:

Consent (Art. 6(1)(a) GDPR): Where you have given me explicit permission for a specific processing purpose (e.g., for analytics cookies).
Contractual Necessity (Art. 6(1)(b) GDPR): When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract (e.g., to provide services you requested, process an order).
Legitimate Interests (Art. 6(1)(f) GDPR): When the processing is in my legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms (e.g., for Service analytics, security, direct marketing in certain contexts, improving my service). I will always weigh my legitimate interests against your rights.
Legal Obligation (Art. 6(1)(c) GDPR): When processing is necessary for compliance with a legal obligation to which I am subject (e.g., tax or commercial law retention obligations).

5. Specific Data Processing Activities & Third-Party Services

5.1. Contact Form (via Formspree)

If you contact me via the contact form on my website, the data you enter (e.g., name, email address, message) will be transmitted to and processed by Formspree (formspree.io), a service provided by Formspree, Inc., USA, to enable me to receive and manage your inquiry.

Data Processed: Information you provide in the form fields (e.g., name, email, message content), your IP address (collected by Formspree for spam prevention).

Purpose: To respond to your inquiries, provide customer support, and for communication related to your request.

Legal Basis: For processing your request, Art. 6(1)(b) GDPR (if your inquiry is related to pre-contractual measures or an existing contract) or Art. 6(1)(f) GDPR (my legitimate interest in efficiently handling inquiries). Your submission of the form implies consent to this specific processing.

Data Transfer to USA: Formspree is a US-based company. A data processing agreement (Art. 28 GDPR) including the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) has been concluded with Formspree; the data transfer to the USA is based on these Standard Contractual Clauses.

You can find more information in Formspree's privacy policy: https://formspree.io/legal/privacy-policy.

Retention: Data from contact form submissions is retained by me for as long as necessary to process your inquiry and for any follow-up correspondence, or as required by legal retention periods (e.g., for business letters). Formspree may also retain data according to its policies.

5.2. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). If the responsible body for data processing on this website is located outside the European Economic Area or Switzerland, then Google Analytics data processing is carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies" (see Cookie Policy ) to help analyze how users use the site. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on servers in the United States.

IP Anonymization: I have activated IP anonymization on this website. Your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Purpose: On my behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage.

Legal Basis: Your consent (Art. 6(1)(a) GDPR), obtained via my cookie consent mechanism.

Data Transfer to USA: The data transfer to the USA is based on the adequacy decision of the EU Commission (EU-U.S. Data Privacy Framework, Art. 45 GDPR); Google LLC is certified under the DPF.

Opt-Out: You can prevent the storage of cookies by a corresponding setting of your browser software (see Cookie Policy. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. You can also manage your consent preferences through my cookie consent tool.

Further information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.

5.3. Hosting & Content Delivery Network (Cloudflare)

This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and delivered via their global content delivery network (CDN). On every request, Cloudflare processes technical connection data (in particular your IP address) in order to deliver the content, ensure security (e.g. protection against DDoS attacks) and optimize loading times.

Legal Basis: Processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in a secure and performant delivery of the website. A data processing agreement (Art. 28 GDPR) has been concluded with Cloudflare.

Data Transfer to USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); the data transfer to the USA is based on the adequacy decision of the EU Commission (Art. 45 GDPR).

Further information can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

5.4. Spam protection for the contact form (Cloudflare Turnstile)

To protect my contact form against automated submissions (spam), I use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile checks whether a submission comes from a human or from a program. For this purpose, a script is loaded from Cloudflare when you open the contact page, and your IP address together with technical information about your browser and device (such as screen resolution, language setting and interaction patterns like mouse and keyboard input) is transmitted to Cloudflare and evaluated there. The content you enter into the form is not transmitted to Cloudflare. According to the provider, Turnstile does not set any cookies for advertising purposes.

Legal Basis: The processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in protecting my contact form against abusive automated use and spam. This spam protection is technically necessary for the operation of the form and is therefore loaded before any cookie consent is given. If you wish to avoid this processing, you can contact me directly by email at contact@azuliastudio.biz or by phone instead.

Data Transfer to USA: Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF); the transfer of data to the USA is based on the adequacy decision of the EU Commission (Art. 45 GDPR). A data processing agreement (Art. 28 GDPR) is also in place with Cloudflare.

You can find more information on how user data is handled in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

5.5. Audience measurement (Cloudflare Web Analytics)

In addition to Google Analytics, my hosting provider Cloudflare runs its "Web Analytics" service. When a page is opened, a small measurement script (beacon.min.js) is loaded from static.cloudflareinsights.com, which collects anonymous usage data: the page visited, the referring source, an approximate location at country level, browser type, operating system and technical page-speed metrics. Your IP address is processed in this context, but is not stored by Cloudflare and is not used to build user profiles.

Cloudflare Web Analytics explicitly works without cookies: the service does not store any information on your device, nor does it read information already stored there. No fingerprinting takes place and no data is combined across different websites. For this reason the service is not part of my cookie consent tool and cannot be deselected there separately.

Legal Basis: Since no information is stored on or read from your device, consent under Section 25 TDDDG is not required. The processing is based on my legitimate interest (Art. 6(1)(f) GDPR) in monitoring the technical reliability and loading speed of my website and in understanding its use in aggregated form. You may object to this processing at any time under Art. 21 GDPR; you will find the contact details in section 1.

You can find more information about Cloudflare Web Analytics at: https://www.cloudflare.com/web-analytics/

6. Your Data Protection Rights

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. Azulia Studio aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data. If you wish to be informed what Personal Data we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

The right to access: You have the right to obtain, free of charge, information about your personal data stored by me and to receive a copy of this data.
The right to rectification: You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete the information you believe is incomplete.
The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
The right to object: You have the right to object to our processing of your personal data, under certain conditions.
The right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact us using the contact information provided in this Privacy Policy.

7. Right to Lodge a Complaint

If you believe that our processing of your personal data violates data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You may do so in the EU member state of your habitual residence, your place of work, or the place of the alleged violation.

8. Changes to This Privacy Policy

I may update our Privacy Policy from time to time. I will notify you of any changes by posting the new Privacy Policy on this page.

I will inform you about changes through a notice on this page and update the date of the last revision accordingly.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Jan Nyboer
Azulia Studio
Geschwister-Scholl-Str. 11
48527 Nordhorn
Germany

Email: contact@azuliastudio.biz: contact@azuliastudio.biz