1. Privacy at a Glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

2. Data Controller

Responsible for data processing on this website: Matthias Meyer Avinguda de Joan Miró 138 07015 Palma de Mallorca España Phone: +34 605 24 67 81 Email: hello@studiomeyer.io

3. Contact

If you have questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, or to revoke consent, please contact the address above.

4. Your Rights

You have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of processing (Art. 15 GDPR), as well as a right to rectification (Art. 16 GDPR) or erasure of this data (Art. 17 GDPR). You further have the right to restriction of processing (Art. 18 GDPR), the right to data portability in a structured, commonly used and machine-readable format (Art. 20 GDPR), and the right to object at any time, on grounds relating to your particular situation, to processing based on a legitimate interest (Art. 21 GDPR). You also have the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR). We do not make such decisions. You can revoke consent given for the processing of your personal data at any time with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of processing carried out before the withdrawal. An informal message to hello@studiomeyer.io is enough to exercise your rights. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). As the controller is established in Spain, this is the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es. You may also contact the supervisory authority of your habitual residence.

5. Data Collection on This Website

Data processing on this website is carried out by the website operator. Contact details can be found in the legal notice of this website. Your data is collected on the one hand by you providing it to us (e.g. information in the contact form). Other data is collected automatically when you visit the website through our IT systems (e.g. browser type, operating system, time of page access).

6. Cookies

This website does not use tracking cookies for analytics or advertising. Technically necessary cookies may be used to ensure the functionality of the website.

7. Hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. The use of the hoster is for the purpose of contract fulfillment with our potential and existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offering by a professional provider (Art. 6 para. 1 lit. f GDPR).

8. Contact Form & Email Contact

If you send us inquiries via contact form or email, your information from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and for follow-up questions. In addition, when you submit the form we automatically store the referrer URL and the path of the page from which you submitted the form, as well as your optional voluntary answer to "How did you find us?". This data is used exclusively to evaluate which marketing channels work for us. It is only transmitted when you actively submit the form, no passive tracking takes place in the background. We do not pass this data to third parties for their own purposes. Technical service providers for hosting and email delivery process it solely on our behalf and on our instructions. The processing of this data is based on Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries addressed to us and in evaluating our marketing channels (Art. 6 para. 1 lit. f GDPR).

9. AI Chatbot

This website uses an AI-powered chatbot to answer inquiries. Data processed: Your text messages in the chat and an anonymized cookie hash for recognition on return visits. No names, email addresses or IP addresses are stored unless you provide them in the chat. Third-party provider: To process your messages, we use the API of Anthropic, PBC (San Francisco, USA). Your chat messages are transmitted to servers in the USA. The transfer is based on Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR. Anthropic has signed a Data Processing Addendum (DPA) and commits to not using transmitted data for its own training purposes. Security: Inputs are checked by an AI security system for harmful content and recognisable personal data before processing. Supported patterns such as IBANs or credit card numbers are masked automatically. Complete detection cannot be guaranteed technically, so please do not enter sensitive data into the chat. Storage period: Chat histories are automatically deleted after 30 days. The anonymized visitor hash is stored for a maximum of 90 days. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer support).

10. Web Analytics (Umami, Ahrefs)

This website uses Umami, a privacy-friendly web analytics tool. Umami sets no cookies, stores no IP addresses and builds no cross-site visitor profiles. Only anonymized usage statistics are collected (e.g. page views, time on site, country of origin). Analytics data is stored on our own servers in Germany. In addition, this website uses Ahrefs Web Analytics, a cookieless web analytics tool provided by Ahrefs Pte. Ltd. (Singapore), for reach measurement. Ahrefs Web Analytics also sets no cookies, reads no information from your device and builds no personal visitor profiles. Only anonymized, aggregated usage statistics are collected (e.g. page views, referrers, country of origin). No cookie banner is required for either tool, because no cookies are set and no information is read from your device. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reach measurement and improving our web offering).

11. Payment Processing (Stripe)

We use Stripe (Stripe, Inc., San Francisco, USA) for payment processing. When making a purchase, your payment data (e.g. credit card number, bank details) is processed directly by Stripe. We do not store any complete payment data ourselves. Stripe is PCI DSS Level 1 certified and processes payment data in accordance with the highest security standards. Data transfer to the USA is based on Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR. Legal basis: Art. 6(1)(b) GDPR (contract fulfillment). More information: https://stripe.com/privacy

12. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. Last updated: July 2026