Privacy policy

Last updated: 27 October 2026

1. General information

This privacy policy explains what personal data we process when you visit this website and how we handle it. Personal data is any information that relates to an identified or identifiable person.

You are not legally or contractually obliged to provide personal data. Without your IP address, however, we cannot deliver this website, and without your contact details we cannot answer your request.

2. Controller

3. Hosting

This website is hosted by Google (Firebase Hosting). When you visit the website, the hosting provider processes your IP address. This is necessary to deliver the website and to detect misuse; Google also uses it to provide us with usage statistics for this website. Google stores this data for a few months.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in delivering this website securely and reliably and in knowing how it is used.

We have concluded a data processing agreement with Google. Data may be transferred to the USA. Transfers are based on the EU–US Data Privacy Framework (Art. 45 GDPR) and, where it does not apply, on the EU Standard Contractual Clauses (Art. 46 GDPR). You can request a copy of the Standard Contractual Clauses from us.

4. Contact by email or contact form

If you contact us by email or via our contact form, we process the data you provide (such as your name, email address and message) in order to handle your request.

The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract or a potential contract, and Art. 6(1)(f) GDPR in all other cases. Our legitimate interest lies in answering enquiries.

Email and the contact form are provided by Google (Google Workspace and Google Forms) as our processor. Section 3 applies accordingly to transfers to the USA.

We delete your data once your request has been dealt with, unless statutory retention obligations apply.

5. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). To exercise these rights, contact us at hello@oystersstudio.com.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

6. Right to object

Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR).