Privacy Policy

Kristian Sucher respects your privacy. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the EU General Data Protection Regulation (GDPR) and equivalent international laws.

1. Data Controller

KRISTIAN SUCHER, trading as Kristian Sucher, Welsickendorf 49, 149139 Niederer Flaming, Germany. Contact: kristian.s@inbox.eu.

2. Data We Collect

• Order data: name, company, email, phone, country, project description, files you upload.
• Billing data: invoice address, payment provider transaction IDs (we never store full card numbers).
• Technical data: IP address, browser type, pages visited — collected via essential cookies and privacy-respecting analytics.

3. Legal Basis & Purposes

• Contract performance — to quote, deliver and bill your project.
• Legal obligation — invoicing, tax records, AML/fraud monitoring.
• Legitimate interest — security, abuse prevention, portfolio reference (anonymised where requested).
• Consent — marketing emails, where applicable. You may withdraw at any time.

4. Sharing

We share data only with: our card payment processor (Stripe), our accountant, cloud-storage and email providers — all bound by data-processing agreements. We do not sell your data.

5. Retention

Order files: deleted 90 days after delivery unless you request longer retention. Invoices: kept for the legally required period (typically 7–10 years). Marketing data: until you unsubscribe.

6. International Transfers

Where data leaves the EEA we rely on Standard Contractual Clauses or equivalent safeguards.

7. Your Rights

Access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local data-protection authority. Email kristian.s@inbox.eu to exercise any of these.

8. Security

We use TLS encryption in transit, access controls, and least-privilege storage. No system is 100% secure; we will notify affected users of any qualifying breach without undue delay.