Skip to content

Privacy Policy

This privacy policy explains, in accordance with Art. 13 GDPR, which personal data is processed when you visit this website, for what purpose, and which rights you have. Last updated: August 2026.

Controller

The controller within the meaning of the General Data Protection Regulation (Art. 4 No. 7 GDPR) is: Maximilian Hecklau Neo Noir Studio Havemannstr. 34 12689 Berlin Germany Phone: +49 176 2252 1471 Email: Maximilian.Hecklau@NeoNoirStudio.com No data protection officer has been appointed, as there is no legal obligation to do so under Art. 37 GDPR or Section 38 of the German Federal Data Protection Act (BDSG). The controller named above is the point of contact for all data protection matters.

Server log data when visiting the website

When you visit this website, the web server automatically processes technical access data: IP address, date and time of access, the page requested, the amount of data transferred, browser type and version, and operating system. This data is technically necessary to deliver the website, ensure its stability and defend against attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely). Log data is not merged with other data sources and is deleted after 14 days at the latest, unless a security incident requires longer retention.

Contact form

When you send us an enquiry via the contact form, we process the data you enter: name, email address, subject and message, and — optionally — phone number, company name, company website and a budget range. We use this data exclusively to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request) and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). To protect the form against automated abuse we additionally store a cryptographic hash of your IP address (from which the IP address cannot be reconstructed) and limit the number of requests per sender. The legal basis for this is Art. 6(1)(f) GDPR (protection against spam and abuse). Your enquiry is stored on our own server. To deliver the notification email to us we use the email service Resend (Resend, Inc., USA) as a processor; personal data may be transferred to the USA in the process. This transfer is safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Appointment booking (Google Calendar)

Via the booking option on the contact page you can book an intro call. We process the data you enter (name, email address) and the selected time slot in order to arrange and hold the call. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at your request). The appointment is stored as an entry in our Google Calendar; your name and email address appear in the event description. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA) acting as a processor; a transfer to the USA cannot be ruled out and is safeguarded by the EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR. You receive a confirmation email via our email service Resend (see the contact form section). To protect the booking against automated abuse we limit the number of requests per IP address; IP addresses are processed only transiently in memory and are not stored permanently (Art. 6(1)(f) GDPR). The calendar entry is deleted once it is no longer needed to hold and follow up on the call.

Embedded videos (YouTube)

On some pages we embed videos via YouTube. Your data is protected by design: NO connection to YouTube is established when the page loads. You initially see only a preview served from our own server. Only when you explicitly click "Load video" is the video loaded from YouTube — in privacy-enhanced mode via the youtube-nocookie.com domain. By clicking, you consent to a connection being established to YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, USA) and to data such as your IP address being transmitted; a transfer to the USA cannot be ruled out. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Your consent applies only to the current page view and is not stored by us; you can withdraw it at any time with effect for the future by reloading the page and not starting the video. Information on data processing by Google is available at: https://policies.google.com/privacy

No cookies, no tracking

This website does not set cookies, does not use analytics or tracking services, and does not embed advertising networks. Fonts, images and videos are served exclusively from our own server; no third-party content is loaded — with the exception of the YouTube videos described above, and even those only after your explicit consent.

Retention periods

We store personal data only for as long as necessary for the respective purpose: server log data for a maximum of 14 days; contact enquiries until they have been fully dealt with and beyond that only where the enquiry leads to a business relationship or statutory retention obligations (in particular under the German Fiscal Code and Commercial Code) require longer storage. The data is deleted thereafter.

Your rights

You have the following rights vis-à-vis the controller: — access to the data processed (Art. 15 GDPR) — rectification of inaccurate data (Art. 16 GDPR) — erasure (Art. 17 GDPR) — restriction of processing (Art. 18 GDPR) — data portability (Art. 20 GDPR) — objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR) You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal remains unaffected. No automated decision-making, including profiling (Art. 22 GDPR), takes place. To exercise your rights, an informal message to Maximilian.Hecklau@NeoNoirStudio.com is sufficient.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information) Alt-Moabit 59–61 10555 Berlin, Germany https://www.datenschutz-berlin.de