Privacy policy

Last updated: October 2026

1. Controller

Studio Bauer Immobilien GmbH, Mußmächerstraße 15, 97650 Fladungen, Germany
Managing director: Julian Bauer
Email: datenschutz@studiobauer.co

2. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Our server functions run in Vercel's Frankfurt data centre (region fra1); static pages are served from Vercel's global network. Each time a page is requested, Vercel automatically processes technical data: IP address, date and time, requested URL, referrer, browser and operating system, and the HTTP status code. We need this to deliver the site and protect it against abuse. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in running the website securely and reliably. Logs are kept for a short time and then deleted.

We have a data processing agreement with Vercel under Art. 28 GDPR. Vercel may transfer data to the USA, based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, with the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as an additional safeguard.

3. Cookies and analytics

We use no cookies, no analytics or tracking tools and no embedded third-party content. Fonts and images are served from our own server.

4. Newsletter and trial digest (Resend)

When you sign up for the digest, we process your email address, your chosen language and the time of your consent. Sign-up uses double opt-in: you first get an email with a confirmation link. Only when you click it do we add you to the mailing list and store the confirmation time as proof.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, using the unsubscribe link in every email or by writing to datenschutz@studiobauer.co. Processing carried out before withdrawal remains lawful. After you unsubscribe we mark your address as unsubscribed and delete it, unless we need to keep it as proof of your earlier consent (Art. 6(1)(c) and (f) GDPR). To prevent abuse, we briefly process your IP address when you submit the form to limit request rates; it is not stored permanently.

We use Resend (Resend, Inc., USA) to send emails and manage the mailing list. The sending domain is set up in the EU region (Ireland), though access from the USA is still possible. We have a data processing agreement with Resend under Art. 28 GDPR. Transfers to the USA rely on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. We do not track opens or clicks.

5. Contact form and email

If you write to us through the contact form or by email, we process your name (if given), your email address and your message to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise our legitimate interest in replying (Art. 6(1)(f) GDPR). Messages from the form are forwarded to our mailbox via Resend (see section 4); the website itself does not store them. We delete your details once the request is settled and no statutory retention period applies.

6. Payments (Stripe)

For paid plans we use Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland). When you click "Start 14-day trial", you go to a Stripe checkout page. Stripe processes the data needed for payment there, such as name, email address, payment details and billing address. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and compliance with legal obligations such as tax record-keeping (Art. 6(1)(c) GDPR). Stripe acts as an independent controller for parts of the processing, for example fraud prevention. Data may be transferred to Stripe, Inc. in the USA, based on the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses. More: stripe.com/privacy.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to datenschutz@studiobauer.co is enough.

8. Right to lodge a complaint

You can complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.