Data processed for the provision of the website and the creation of log files

1. What data is processed and for what purpose?

Each time you access content on the website, data that may allow identification is temporarily stored. The following data is collected:

• Date and time of access

• IP address

• Hostname of the accessing computer

• Website from which the website was accessed

• Websites accessed via the website

• Page visited on our website

• Notification of whether the request was successful

• Amount of data transferred

• Information about the browser type and version used

• Operating system

The temporary storage of data is necessary for the operation of a website visit to enable the website to be delivered. Further storage in log files occurs to ensure the functionality of the website and the security of the IT systems. These purposes also constitute our legitimate interest in data processing.

2. On what legal basis is this data processed?

The data is processed on the basis of Article 6 Paragraph 1 Letter f GDPR.

3. How long will the data be stored?

The data will be deleted as soon as it is no longer needed for the purpose for which it was collected. In the case of providing the website, this is when the respective session ends.

 

Data processing when contacting us

When you contact us, the data you provide will be processed, collected, and used for handling your request. This data is processed in accordance with Article 6(1)(b) of the GDPR for the performance of a contract between you and Studio Kirbach or for taking steps at your request prior to entering into a contract.

We also store information about event organizers, suppliers, and other business partners, for example, for the purpose of future contact. We generally store this data permanently.

 

Rights of data subjects

• Right of access: You can request information about your personal data that we process, in accordance with Article 15 of the GDPR.

• Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data which is based on point (f) of Article 6(1) of the GDPR. The controller will then no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website.

• Right to rectification: If the information concerning you is (no longer) accurate, you can request rectification in accordance with Article 16 of the GDPR. If your data is incomplete, you can request its completion.

• Right to erasure: You can request the erasure of your personal data pursuant to Article 17 GDPR.

• Right to restriction of processing: You have the right to request the restriction of the processing of your personal data pursuant to Article 18 GDPR.

• Right to lodge a complaint: If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority of your choice pursuant to Article 77(1) GDPR.

• Right to data portability: If the conditions of Article 20(1) GDPR are met, you have the right to receive the data that we process automatically based on your consent or in fulfillment of a contract, either for yourself or to have it transmitted to a third party. The collection of data for the provision of the website and the storage of log files are essential for the operation of the website. They are therefore not based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, but are justified pursuant to Article 6(1)(f) GDPR. The requirements of Article 20(1) GDPR are therefore not met in this respect.

 

Data Sharing

We process data in accordance with Article 6(1)(c) and (f) of the GDPR for administrative tasks and financial accounting, to comply with legal obligations, and to fulfill contractual obligations. The same data is processed that we process when providing our contractual services. Customers, business partners, and prospective customers are affected by this processing. Data is transmitted or disclosed to the tax authorities, tax advisors or auditors, as well as other fee collection agencies and payment service providers.

 

Online presence on social media

We maintain an online presence on social media. When accessing these pages, the terms and conditions and privacy policies of the respective operators apply. When contacting us via social networks and platforms, the personal data disclosed by the user there will be processed.

 

Consent

By using this website or contacting us, the user consents to the data processing described in this privacy policy. The data subject may withdraw this consent at any time in accordance with Article 7(3) of the GDPR. To do so, the data subject should contact the data controller.

If the user is under the age of sixteen, they should not transmit any personal data without the consent of their parents or legal guardian, in accordance with Article 8(1) of the GDPR.

 

Up-to-dateness of the privacy policy

This privacy policy is current as of February 2026. Studio Kirbach reserves the right to continuously adapt its security and data protection measures to the latest requirements. The current privacy policy can be accessed at any time on this website.

 

Controller and Data Protection Officer

The controller for this website and the data protection officer is:

Kerstin Kirbach, Einsteinstrasse 149, 81675 München, hello@studio-kirbach.de