This is an offer page. It sets no cookies, loads no analytics and pulls in nothing from third parties — the fonts, the images and the video sit on the same server as the page.
Studio Atha by Judith Mila Durante — responsible for content under § 18 (2) MStV.
hi@studioatha.com
Operator and controller under the GDPR: Rebelinvest GmbH, Waldeckstraße 12, 85405 Nandlstadt, Germany, Managing Director Johannes Thanner. Full details in the imprint.
The page is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you open it, Netlify processes technically necessary access data (IP address, time, file requested, browser type). The legal basis is our legitimate interest in running the page securely and reliably, Art. 6 (1) (f) GDPR. A data processing agreement is in place with Netlify; the transfer to the USA is covered by standard contractual clauses.
[Check: the data processing agreement with Netlify must be in place before this sentence is true. It is accepted in the Netlify account under Team settings.]
When you send the form you give us your name, the name of your house, your email address, the configuration you chose and, if you write one, your message. We use these only to answer your enquiry and to make you an offer. The legal basis is Art. 6 (1) (b) GDPR (steps prior to a contract) or (f) GDPR.
The form runs through Netlify Forms; submissions are stored there and forwarded to our email address. We delete them once the enquiry is settled and no statutory retention period applies.
We measure nothing here. No cookies, no tracking, no profiling.
The Menu your guests open sits at its own address and has its own privacy policy. Nobody signs up, no email address is collected and no app is installed. What reaches the house is a single number: how often the Menu was opened.
[Check: this paragraph describes the intended state. It is true once the measurement in the Menu is set up accordingly — cookieless, with no personal identifiers. The Menu needs its own privacy policy.]
You have the right to information, correction, deletion, restriction of processing, data portability and objection. Write to the address above. You can also complain to a data protection supervisory authority; the one responsible is the authority at our seat.