PRIVACY POLICY (DATENSCHUTZERKLÄRUNG)

1. Data Controller

Group of Four Studio GmbH
Berlin, Germany
Email: santiago@groupoffourstudio.com

2. Data We Process

We process personal data in the following categories:

Website visitors:

  • IP address

  • Device and browser information

  • Date and time of website access

  • Cookie identifiers (subject to consent)

Business clients and partners:

  • Names, company names, postal and billing addresses

  • Email addresses and telephone numbers

  • Uploaded Inputs including images, prompts and project materials

Communications:

  • Emails and contact form inquiries

  • Project correspondence and support messages

3. Purpose of Processing

Personal data is processed for the following purposes:

  • Performance of contractual services

  • Communication, project delivery, and customer support

  • Billing and accounting

  • Website operation and service improvement

4. AI Data Processing

Input materials are processed exclusively for the execution of client projects. Such data is not used to train public or external AI models.

Inputs and Outputs are deleted following project completion unless legal retention requirements or explicit contractual agreements require longer storage.

5. Legal Basis (GDPR)

Processing occurs based on:

  • Art. 6(1)(b) GDPR – Contractual performance

  • Art. 6(1)(c) GDPR – Legal obligations

  • Art. 6(1)(f) GDPR – Legitimate business interests

6. Data Sharing

Personal data may be transferred to carefully selected processors acting under GDPR‑compliant Data Processing Agreements including:

  • Cloud hosting and infrastructure providers

  • Compute and AI technology partners

  • Accounting and IT service providers

  • Analytics providers (where cookie consent is given)

Personal data is never sold to third parties.

7. International Transfers

If processing requires data transfer outside the European Union, EU Standard Contractual Clauses (SCCs) or equivalent legal safeguards are applied.

8. Data Retention

Personal data is stored only as long as necessary to fulfill contractual obligations and statutory retention periods under German commercial and tax law (typically 6–10 years).

Project‑related Inputs are deleted following project completion unless extended storage has been contractually agreed.

9. Data Subject Rights

Under the GDPR you have the right to:

  • Access your personal data;

  • Rectify inaccurate data;

  • Request deletion;

  • Restrict processing;

  • Data portability;

  • Object to processing of personal data;

  • Withdraw consent at any time.

Requests may be sent to: santiago@groupoffourstudio.com

10. Security Measures

We apply appropriate technical and organizational safeguards including:

  • Encrypted SSL/TLS communications

  • Secure hosting infrastructure

  • Access‑controlled systems

  • Regular vendor compliance reviews

11. Supervisory Authority

You have the right to file a complaint with the competent supervisory authority:

Berliner Beauftragte für Datenschutz und Informationsfreiheit