The purpose of this privacy policy is to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to simply as "data"). Personal data refers to any data that relates to you personally, such as your name, address, email address or your user behaviour. This privacy policy applies to all data processing operations carried out by us, both in the context of our core business and in relation to the online media we maintain.
Who is responsible for data processing at our organisation
The data controller is:
Saul Studio.
Manfred Saul
Ziegelofenweg 2a
67346 Speyer
Germany
support@saulstudio.app
https://saulstudio.app/impressum
Processing of your data in connection with our company's core business
If you are our customer or business partner, or if you are interested in our services, the nature, scope and purpose of the processing of your data are determined by the contractual or pre-contractual relationship between us. In this context, the data we process includes all data that is or has been provided by you for the purpose of utilising the contractual or pre-contractual services and that is required to process your enquiry or the contract concluded between us. Unless otherwise stated in the further provisions of this privacy policy, the processing of your data and its disclosure to third parties is limited to those data that are necessary and appropriate for responding to your enquiries and/or for fulfilling the contract concluded between you and us, for safeguarding our rights, and for complying with legal obligations. We will inform you of which data are required for this purpose prior to or during the data collection process. Where we use third-party providers to deliver our services, the privacy policies of the respective third-party providers apply.
Data concerned:
- Master data (e.g. names, addresses)
- Payment details (e.g. bank details, invoices)
- Contact details (e.g. email address, telephone number, postal address)
- Contract details (e.g. subject matter of the contract, contract term)
Data subjects: prospective customers, business partners and contractual partners
Purpose of processing: fulfilment of contractual obligations, communication and responding to enquiries, administrative and organisational procedures
Legal basis: performance of a contract and pre-contractual enquiries, Art. 6 Para. 1 lit. b GDPR; legal obligation, Art. 6 Para. 1 lit. c GDPR; legitimate interest, Art. 6 Para. 1 lit. f GDPR
Your rights under the GDPR
Under the GDPR, you are entitled to the rights listed below, which you may exercise at any time by contacting the data controller named in section 1 of this privacy policy:
- Right of access: You have the right to request information from us as to whether we are processing your data and, if so, what data we are processing.
- Right to rectification: You have the right to request the rectification of inaccurate data or the completion of incomplete data.
- Right to erasure: You have the right to request that your data be erased.
- Right to restriction: In certain circumstances, you have the right to request that we process your data only to a limited extent.
- Right to data portability: You have the right to request that we provide your data to you or to another controller in a structured, commonly used and machine-readable format.
- Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the supervisory authority for your usual place of residence, your place of work or our registered office.
Right of Withdrawal
You have the right to withdraw your consent to the processing of your data at any time.
Right of Objection
You have the right to object at any time to the processing of your data on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f GDPR. If you wish to exercise your right to object, please state your reasons. We will then no longer process your personal data, unless we can demonstrate to you that there are compelling legitimate grounds for the data processing which override your interests and rights.
Notwithstanding the above, you have the right at any time to object to the processing of your personal data for the purposes of marketing and data analysis.
Please send your objection to the contact address of the data controller given above.
When do we delete your data?
We will delete your data when we no longer need it or when you ask us to do so. This means that – unless otherwise stated in the specific privacy notices within this privacy policy – we will delete your data,
- when the purpose of the data processing no longer applies and the legal basis specified in the relevant privacy notices therefore no longer exists, for example
- following the termination of the contractual or membership relationship between us (Art. 6 Para. 1 lit. a GDPR) or
- once our legitimate interest in the further processing or storage of your data no longer applies (Art. 6 Para. 1 lit. f GDPR),
- if you exercise your right of withdrawal and there is no other legal basis for processing within the meaning of Art. 6 Para. 1 lit. b-f GDPR,
- if you exercise your right to object and there are no compelling legitimate grounds for not deleting the data.
However, if we are required to retain (certain parts of) your data for other purposes – for example, because of tax retention periods (usually 6 years for business correspondence or 10 years for accounting documents) or because the data is necessary for the assertion, exercise or defence of legal claims arising from contractual relationships (up to four years), or if the data is required to protect the rights of another natural or legal person, we will only delete (that part of) your data once these periods have expired. Until these periods have expired, however, we will restrict the processing of this data to these purposes (fulfilment of retention obligations).
Cookies
Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are placed and stored on the device you are using. Cookies are primarily used to exchange information between the device you are using and our website. This includes, amongst other things, the language settings on a website, your login status or the point at which a video was viewed.
When you visit our website, two types of cookies are used:
- Temporary cookies (session cookies): These store a so-called session ID, which allows various requests from your browser to be associated with the same session. Session cookies are deleted when you log out or close your browser.
- Persistent cookies: Persistent cookies remain stored even after you close your browser. This allows our website to recognise your device when you return to our website. These cookies store information such as language settings or login details. They can also be used to track and store your browsing behaviour. This data may be used for statistical, marketing and personalisation purposes.
In addition to the above classification, cookies can also be categorised according to their purpose:
- Essential cookies: These are cookies that are strictly necessary for the operation of our website, such as those used to store logins or shopping baskets for the duration of your session, or cookies set for security reasons.
- Statistical, marketing and personalisation cookies: These are cookies used for analytical purposes or to measure reach. Such "tracking" cookies may, in particular, store information about search terms entered or the frequency of page views. In addition, an individual user's browsing behaviour (e.g. viewing specific content, using certain functions, etc.) may also be stored in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. Where we use services that store cookies on your device for statistical, marketing and personalisation purposes, we will inform you of this separately in the following sections of our privacy policy or when seeking your consent.
Data concerned:
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address).
Data subjects: users of our online services
Purpose of processing: Displaying our website, ensuring the operation of our website, improving our online offering, communication and marketing
Legal basis:
Legitimate interest, Art. 6 Para. 1 lit. f GDPR
Unless we obtain your consent to the use of cookies, we process your data on the basis of our legitimate interest in improving the quality and user-friendliness of our website, in particular its content and functions. You can object to the use of cookies set by us in the context of our legitimate interest via your browser's security settings. There, you can choose whether to accept no cookies at all, accept them only when prompted, or set your browser to delete cookies every time you close it. If cookies are disabled for our website, you may no longer be able to use all of the website's functions to their full extent.
Consent, Art. 6 Para. 1 lit. a GDPR
If, prior to your visit to our website, we ask for your permission to place certain cookies on your device and you consent to this, the legal basis for this is the consent you have given. We will inform you, as part of the consent process, about the specific cookies we set. If you do not give this consent, only the so-called technically necessary cookies will be set; these are required for the proper functioning of our website and its display in your browser. If you have consented to the setting of cookies, you have the option to withdraw your consent at any time.
Web Hosting
We use a service provider to host our website; our website is stored on this provider's servers and made available for access on the internet (hosting). In doing so, the provider may process all data transmitted via the browser you are using that is generated whilst you are using our website. This includes, in particular, your IP address, which the provider requires in order to deliver our online content to the browser you are using, as well as all data you enter via our website. In addition, the provider we use may collect
- the date and time of your visit to our website
- Time difference from Greenwich Mean Time (GMT)
- Access status (HTTP status)
- the amount of data transferred
- the internet service provider of the accessing system
- the type of browser you are using and its version
- the operating system you are using
- the website from which you may have arrived at our website
- the pages or subpages you visit on our website.
The aforementioned data is stored as log files on our provider's servers. This is necessary to ensure the stability and security of our website's operation.
Data concerned:
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address)
Data subjects: Users of our website
Purpose of processing: Displaying our website, ensuring the operation of our website
Legal basis: Legitimate interest, Art. 6 Para. 1 lit. f GDPR
The web hosting provider we use:
Vercel
Service provider: Vercel Inc.
Website: vercel.com
Privacy Policy: vercel.com/legal/privacy-policy
Content Delivery Network
We use a Content Delivery Network (CDN) to deliver our websites. A CDN is a network of servers distributed across different regions and connected via the internet. The CDN provides scalable storage and delivery capacities. This optimises the loading times of our websites and ensures optimal data throughput even during periods of high traffic. User requests to our websites are routed via the CDN's servers. Statistics are compiled from these data streams. This serves, on the one hand, to detect potential threats to our websites from malware at an early stage and, on the other hand, to continuously improve our service and make our websites more user-friendly for you as a user.
We would like to draw your attention to the fact that, depending on the country in which the service provider listed below is based, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR may not be maintained and that it may be difficult or impossible to enforce your rights.
Data concerned:
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address)
Purpose of processing: Technical optimisation of the website, analysis of errors and user behaviour
Legal basis: Legitimate interest, Art. 6 Para. 1 lit. f GDPR
CDN providers used:
Contact
If you contact us via email, social media, telephone, fax, post, our contact form or by any other means, and in doing so provide us with personal data such as your name, telephone number or email address, or provide further details about yourself or your enquiry, we will process this data in order to respond to your enquiry within the framework of the pre-contractual or contractual relationship between us.
Data concerned:
- Master data (e.g. names, addresses)
- Contact details (e.g. email address, telephone number, postal address)
- Content data (text, photos, videos)
- Contract details (e.g. subject matter of the contract, contract term)
Data subjects: prospective customers, customers, business partners and contractual partners
Purpose of processing: communication and responding to enquiries, administrative and organisational procedures
Legal basis: performance of a contract and pre-contractual enquiries, Art. 6 Para. 1 lit. b GDPR; legitimate interest, Art. 6 Para. 1 lit. f GDPR
Online advertising
We use services to display online advertising. Through the services we use, certain user data is collected via a cookie or pixel. This includes, in particular, information about which website you came from to reach our website (known as a referrer), which pages on our website you have accessed, how long you have spent on our pages, and what interactions you have carried out there. In addition, data regarding the browser you use, your computer system and the type of device is collected. Furthermore, such a service may also record demographic information, such as age or gender, as pseudonymous values. If you have consented to the collection of your location data, this may also be processed, depending on the provider. To collect and store this data, the respective service places a cookie or a so-called tracking pixel on the device you are using, which also collects the IP address assigned to you. However, this is truncated using a so-called IP masking procedure, so that the IP address can no longer be linked to your visit to our website. In principle, no personal data such as names or email addresses is stored when using the respective service. This is only the case if you are a member of a social network that offers one of the services listed below and links your profile to the aforementioned data.
The data is analysed by the service we use to generate a report containing statistical information on the number of visitors generated by the advertising and the success of the advertising campaign. Among other things, the reports show the total number of users who were redirected to our website via our adverts. In addition, the reports contain information on the users' devices and browsers, their locations, and the times at which the advert was clicked. However, the reports do not contain any information that could be used to personally identify you as a user of our site.
We would like to draw your attention to the fact that, depending on the service provider's place of business, the data collected via the service may be transferred and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that it may be difficult or impossible to enforce your rights.
Data concerned:
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address)
Data subjects: users of our online services
Purpose of processing: measuring reach, monitoring campaign performance, remarketing, and interest- and behaviour-based marketing
Legal basis: Where we have asked for your consent prior to using the relevant service, this constitutes the legal basis, Art. 6 Para. 1 lit. a GDPR. Furthermore, we use the relevant service on the basis of our legitimate interest in directing visitor traffic to our website and analysing this traffic in order to continuously improve the functions, offerings and user experience, Art. 6 Para. 1 lit. f GDPR.
We use the following service providers for online advertising:
Bing Ads
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Headquarters in Germany: Microsoft Deutschland GmbH, Walter-Gropius-Straße 5, 80807 München
Website: https://ads.microsoft.com/
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
Google Ads
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://ads.google.com/home/
Privacy Policy: http://www.google.de/intl/de/policies/privacy
Newsletter
We send out a newsletter at regular intervals to keep our customers, business partners and prospective clients informed about our offers and related news. You can subscribe to our newsletter on our website and, as part of the subscription process, give your consent to receive it. When you subscribe to our newsletter, you must provide your email address. We store your email address so that we can send you the newsletter. As soon as you subscribe to our newsletter, you will receive a confirmation email at the address provided during registration, using the so-called double opt-in procedure. This email contains a link. By clicking on this link, you confirm that you wish to receive the newsletter. This ensures that your email address was not misused by a third party during registration. For the same reason, we store the date and time of registration, as well as the IP address assigned to you at the time of registration. We do not pass on the aforementioned data to third parties.
Analysis of user behaviour
Provided you have given your consent, we analyse your user behaviour when sending out the newsletter. To this end, our newsletter contains tracking pixels and tracking links. These allow us to see whether and when you have opened the newsletter, and whether and which links you have clicked on within it.
Purpose: We analyse the newsletter as described above in order to measure its success or failure statistically.
Legal basis: The legal basis for the processing of your data is Art. 6 Para. 1 lit. a GDPR.
Opting out: You can withdraw your consent to receive the newsletter at any time using the options provided above.
Deletion: We will delete your data once you have withdrawn your consent.
Data concerned:
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address)
Data subjects: Users of our website
Purpose of processing: Displaying our website, ensuring the operation of our website
Legal basis: Consent, Art. 6 Para. 1 lit. a GDPR; legitimate interest, Art. 6 Para. 1 lit. f GDPR
Deletion: Your email address will be deleted either if you have not clicked the confirmation link within one month of the confirmation email being sent as part of the double opt-in process, or immediately after you unsubscribe from our newsletter.
Withdrawal: You may withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options for you to withdraw your consent:
- Click on the link provided for this purpose in the newsletter
- by email to: newsletter@saulstudio.app
- using the contact details provided in the legal notice on our website
Crisp IM SAS
Service provider: 2 Boulevard de Launay, 44100 Nantes, France
Website: crisp.chat
Privacy Policy: crisp.chat/en/privacy
Our social media presence
We maintain online presences on the social networks listed below. When you visit one of these sites, the respective provider collects and processes the data described in more detail below. As a rule, this data is collected for advertising and market research purposes, and user profiles are created as a result. Data may be stored in these user profiles regardless of the device you are using. This is particularly the case if you are a member of the respective platform and are logged in to it. The user profiles may be used by the providers to display interest-based advertising to you. You have the right to object to the creation of user profiles. To exercise this right, you must contact the respective provider.
If you have an account with one of the providers listed below and are logged in to that account when visiting our website, the relevant provider may collect data about your usage behaviour on our website. To prevent your data from being linked in this way, you can log out of the provider's service before visiting our site.
You can find out for what purpose and to what extent data is collected by the provider in the respective privacy policies of the providers, which are set out below.
We would like to draw your attention to the fact that, depending on the country in which the provider listed below is based, data collected via its platform may be transferred and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that it may be difficult or impossible to enforce your rights.
Data concerned:
- Personal and contact details (e.g. name, address, telephone number, email address)
- Content data (e.g. posts, photos, videos)
- Usage data (e.g. access times, pages visited)
- Communication data (e.g. information about the device used, IP address).
Purpose of processing: communication and marketing, tracking and analysis of user behaviour
Legal basis: Consent, Art. 6 Para. 1 lit. a GDPR; legitimate interests, Art. 6 Para. 1 lit. f GDPR
Options for opting out: For details of the relevant opt-out options, please refer to the information provided by the providers via the links below.
We have a presence on the following social media platforms:
Instagram
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com/
Privacy Policy: http://instagram.com/about/legal/privacy
LinkedIn
Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Headquarters in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 München
Website: https://www.linkedin.com/
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Reddit
Service provider: Reddit Inc., 520 3rd Street, San Francisco, CA 94107, USA
Headquarters in the EU: Reddit Ireland Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland
Website: https://www.redditinc.com/
Privacy Policy: https://www.redditinc.com/policies/privacy-policy
Chat services
We communicate via online chats and/or chatbots (hereinafter referred to as "chat services"). An online chat refers to the exchange of text messages over the internet in real time. Chatbots are computer programmes that are generally used on websites to automatically answer users' questions or send notifications to users.
If you use our chat services, we collect your access data. This includes, in particular, the IP address of the device making the request, the date and time of the request, and your identification number. We also store the content of the communications conducted via the chat services. Finally, we record your registration and your declaration of consent. We use this data to communicate with you via our chat services, to address you personally, to answer your enquiries and to send any requested content.
The service provider(s) listed below has/have the ability to access the metadata of the communication. This includes the time and (depending on the settings) location of the communication, as well as the device you used and information about who communicated with whom. The service provider usually accesses the metadata to optimise the service or for security reasons. However, the service provider may also access the data for marketing purposes. You can find further details on this in the service provider's privacy policy, which we have linked below.
We would like to draw your attention to the fact that, depending on the country in which the provider listed below is based, data collected via its platform may be transferred and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that it may be difficult or impossible to enforce your rights.
Data concerned:
- Personal and contact details (e.g. name, telephone number, email address)
- Content data (e.g. text entries)
- Usage data (e.g. access times, interest in content)
- Communication data (e.g. information about the device used, IP address).
Purpose of processing: Communication and marketing
Legal basis: If we have asked for your consent before using the relevant chat service, this constitutes the legal basis, Art. 6 Para. 1 lit. a GDPR. In this regard, we wish to clarify that we do not initially transmit your contact details to the service provider without your consent. Where we communicate with you via one of the services listed below in the context of pre-contractual negotiations or within the framework of an existing contractual relationship, the legal basis is the performance or preparation of the contract, Art. 6 Para. 1 lit. b GDPR. Furthermore, we rely on our legitimate interests in rapid and efficient communication and in meeting the communication needs of our communication partners via the services listed below, Art. 6 Para. 1 lit. f GDPR.
Right to object: You may withdraw the consent you have given us to use the service mentioned below at any time. You may also object at any time to the processing of your data via the chat service we use.
We use the following chatbots and chat functions:
Security Measures
We also implement state-of-the-art technical and organisational security measures to comply with data protection legislation and to protect your data against accidental or deliberate manipulation, partial or complete loss, destruction or unauthorised access by third parties.
Validity and amendments to this privacy policy
This privacy policy is currently in force and is dated April 2026. It may be necessary to amend this privacy policy due to changes in legal or regulatory requirements.
This privacy policy was created using the privacy policy generator provided by SOS Recht. SOS Recht is a service offered by Mueller.legal Rechtsanwälte Partnerschaft, based in Berlin.