Legal

Privacy Policy

How blondsign handles personal data on this website.

Contents

Controller

blondsign by Eike Schurr
Eike Schurr
Wigmodistr. 28
28779 Bremen
Germany

Phone: +49 (0) 174 7506094
Email: eike [at] blondsign.com
Imprint: blondsign.com/imprint

Types of processed data

  • Inventory data (e.g. names, addresses).
  • Contact details (e.g. email, telephone numbers).
  • Content data (e.g. text input, photographs, videos).
  • Usage data (e.g. visited pages, interest in content, access times).
  • Meta and communication data (e.g. device information, IP addresses).

Affected persons are visitors and users of this website (hereinafter “users”).

Purpose of processing

  • Provision of the website, its functions and contents.
  • Answering contact requests and communicating with users.
  • Security measures.
  • Reach measurement – only with your consent.

In accordance with Art. 13 GDPR, we inform you about the legal basis of our data processing. Unless the legal basis is mentioned in this privacy policy, the following applies: the legal basis for obtaining consent is Art. 6 (1) lit. a and Art. 7 GDPR; the legal basis for processing to perform our services and contractual measures and to answer inquiries is Art. 6 (1) lit. b GDPR; the legal basis for processing to fulfil our legal obligations is Art. 6 (1) lit. c GDPR; and the legal basis for processing to safeguard our legitimate interests is Art. 6 (1) lit. f GDPR. If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.

Storing information on your device or accessing information already stored there (e.g. cookies) is based on your consent pursuant to § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act), unless it is strictly necessary to provide the service you have requested (§ 25 (2) TDDDG).

Security measures

We take appropriate technical and organisational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

These measures include in particular safeguarding the confidentiality, integrity and availability of data by controlling physical access to the data as well as access, input, disclosure, availability and separation. This website is delivered exclusively via encrypted connections (TLS). We also take the protection of personal data into account when developing or selecting hardware, software and procedures, in line with the principle of data protection by design and by default (Art. 25 GDPR).

Processors and third parties

If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to it, this is only done on the basis of a legal permission, your consent, a legal obligation or our legitimate interests (e.g. the use of web hosts). If we commission third parties to process data on the basis of a data processing agreement, this is done on the basis of Art. 28 GDPR.

Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this happens in the context of using third-party services, it is only done to fulfil our (pre-)contractual obligations, on the basis of your consent, a legal obligation or our legitimate interests, and only if the special conditions of Art. 44 et seq. GDPR are met. For the USA, this is in particular the adequacy decision of the European Commission on the EU-US Data Privacy Framework (for certified companies) or standard contractual clauses of the European Commission.

Your rights

  • Access to the data concerning you and a copy of this data (Art. 15 GDPR).
  • Rectification of incorrect or completion of incomplete data (Art. 16 GDPR).
  • Erasure of your data (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR).
  • Receipt of the data you have provided in a structured, common format and its transfer to another controller (Art. 20 GDPR).
  • Objection to processing based on legitimate interests, in particular for direct marketing (Art. 21 GDPR).
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.

Cookies and consent management

Cookies are small text files that are stored on your device. This website uses technically necessary cookies (e.g. to remember your language and your consent decision) as well as – only with your consent – cookies for statistics and for embedded external content.

To obtain and document consent, we use the consent tool “Complianz” (Complianz B.V., Netherlands), which runs entirely on our own server. When you first visit, a banner lets you accept or decline the categories “Statistics” and “Marketing”. Your decision is stored in cookies (cmplz_*) on your device for up to 365 days. Legal basis: Art. 6 (1) lit. c GDPR in conjunction with § 25 (2) TDDDG.

You can change or withdraw your consent at any time via “Manage consent” at the bottom of each page or on our Cookie Policy page, which also lists all cookies used.

Hosting, server log files and security

The hosting services we use provide infrastructure and platform services, computing capacity, storage and database services, email, security and technical maintenance that we use to operate this website. We, or our hosting provider, process inventory data, contact data, content data, usage data, meta and communication data of visitors on the basis of our legitimate interest in an efficient and secure provision of this website (Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR).

When you access this website, the server automatically records information in log files (e.g. IP address, date and time, requested page, referrer, browser and operating system). This data is used to ensure stable and secure operation and is deleted after a short period unless it is needed to investigate a specific security incident.

To protect the website against attacks, we use the security plugin Wordfence (Defiant Inc., USA), which runs on our server. Wordfence processes the IP addresses of visitors to detect and block malicious requests. Legal basis: our legitimate interest in the security of this website (Art. 6 (1) lit. f GDPR).

Contact and contact form

When you contact us (e.g. via the contact form, email, telephone or social media), the information you provide is processed to handle your request in accordance with Art. 6 (1) lit. b GDPR. When using the contact form, we process your name, email address and message; the form data is sent to us by email. Submitting the form requires your consent to this processing (Art. 6 (1) lit. a GDPR).

We delete requests as soon as they are no longer required. We review the necessity every two years; statutory archiving obligations remain unaffected.

Google Analytics

Only if you have consented to the category “Statistics” do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how this website is used, e.g. pages visited, duration of visits and the type of device. Google Analytics 4 does not store IP addresses. The information may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework.

Legal basis: your consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG), which you can withdraw at any time via “Manage consent”. More information: https://policies.google.com/privacy.

Embedded videos (YouTube, Vimeo)

We embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA). These videos are only loaded once you have consented to the category “Marketing”; until then, a still image stored on our own server is shown and no connection to the providers is made.

After consent, the providers receive your IP address and may set cookies and use the data for their own purposes. Data may be transferred to the USA; Google LLC and Vimeo.com, Inc. are certified under the EU-US Data Privacy Framework. Legal basis: your consent (Art. 6 (1) lit. a GDPR, § 25 (1) TDDDG).

Privacy policies: Google/YouTube · Vimeo.

Fonts and multilingual content

All fonts used on this website are hosted on our own server; no connection to external font services (e.g. Google Fonts) is established.

To display the website in your language, the translation plugin WPML stores your language selection in a technically necessary cookie (wp-wpml_current_language). Legal basis: Art. 6 (1) lit. f GDPR, § 25 (2) TDDDG.

Social media profiles

We maintain profiles on Facebook, Instagram and LinkedIn to communicate with customers, prospects and users and to inform them about our services. Our website only contains links to these profiles; no social media plugins are embedded, so no data is transferred to these networks when you visit our website. When you visit our profiles, the terms of use and privacy policies of the respective operators apply.

If you communicate with us within these networks, e.g. by sending us messages, we process the data you provide to answer your request (Art. 6 (1) lit. b or f GDPR).

Deletion of data

The data processed by us is deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless explicitly stated in this privacy policy, the data stored by us is deleted as soon as it is no longer required for its purpose and deletion does not conflict with any statutory retention requirements. If data is not deleted because it is required for other legally permissible purposes, its processing is restricted, i.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.

According to statutory requirements in Germany, data is retained in particular for 10 years pursuant to §§ 147 (1) AO, 257 (1) no. 1 and 4, (4) HGB (books, records, management reports, accounting documents, trading books, documents relevant for taxation, etc.) and for 6 years pursuant to § 257 (1) no. 2 and 3, (4) HGB (commercial letters).

Changes to this privacy policy

We adapt this privacy policy whenever changes to our website or the legal situation make this necessary. The current version always applies. Last updated: October 2026.