1. Privacy at a Glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

Responsible for data processing on this website: Matthias Meyer Av. Joan Miró 138 07015 Palma de Mallorca España Email: hello@studiomeyer.io

3. Contact

If you have questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, or to revoke consent, please contact the address above.

4. Your Rights

You have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of data processing, as well as a right to correction or deletion of this data. You can revoke consent given for the processing of your personal data at any time.

5. Data Collection on This Website

Data processing on this website is carried out by the website operator. Contact details can be found in the legal notice of this website. Your data is collected on the one hand by you providing it to us (e.g. information in the contact form). Other data is collected automatically when you visit the website through our IT systems (e.g. browser type, operating system, time of page access).

6. Cookies

This website does not use tracking cookies for analytics or advertising. Technically necessary cookies may be used to ensure the functionality of the website.

7. Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. The use of the hoster is for the purpose of contract fulfillment with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

8. Contact Form & Email Contact

If you send us inquiries via contact form or email, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and for follow-up questions. In addition, when you submit the form we automatically store the referrer URL and the path of the page from which you submitted the form, as well as your optional voluntary answer to "How did you find us?". This data is used exclusively to evaluate which marketing channels work for us. It is only transmitted when you actively submit the form — no passive tracking takes place in the background. We do not share this data without your consent. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us and in evaluating our marketing channels (Art. 6 para. 1 lit. f GDPR).

9. AI Chatbot

This website uses an AI-powered chatbot to answer inquiries. Data processed: Your text messages in the chat and an anonymized cookie hash for recognition on return visits. No names, email addresses or IP addresses are stored unless you provide them in the chat. Third-party provider: To process your messages, we use the API of Anthropic, PBC (San Francisco, USA). Your chat messages are transmitted to servers in the USA. The transfer is based on Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR. Anthropic has signed a Data Processing Addendum (DPA) and commits to not using transmitted data for its own training purposes. Security: All inputs are checked by an AI security system for harmful content and personal data before processing. Detected sensitive data (e.g. IBAN, credit card numbers) is automatically masked. Storage period: Chat histories are automatically deleted after 30 days. The anonymized visitor hash is stored for a maximum of 90 days. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer support).

10. Web Analytics (Umami)

This website uses Umami, a privacy-friendly web analytics tool. Umami does not collect personal data, does not set cookies and does not store IP addresses. Only anonymized usage statistics are collected (e.g. page views, time on site, country of origin). Analytics data is stored on our own servers in Germany. Cookie consent is not required as no personal data is processed. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our web offering).

11. Payment Processing (Stripe)

We use Stripe (Stripe, Inc., San Francisco, USA) for payment processing. When making a purchase, your payment data (e.g. credit card number, bank details) is processed directly by Stripe. We do not store any complete payment data ourselves. Stripe is PCI DSS Level 1 certified and processes payment data in accordance with the highest security standards. Data transfer to the USA is based on Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR. Legal basis: Art. 6(1)(b) GDPR (contract fulfillment). More information: https://stripe.com/privacy

12. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. Last updated: April 2026