Privacy Policy

The controller responsible for data processing on this website is:

Visionary Hive Agency

Yannic Hammer

Bornstraße 16

55263 Ingelheim am Rhein, Germany

Email: yhammer@vh-agency.de

We process personal data only where necessary and on a clear legal basis as required by the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data we may process includes:

• Identification data (name, email address)
• Communication data (messages sent via contact form or email)
• Technical data (IP address, browser type, pages visited, timestamps)
• Usage data (interaction with our website)

We process your personal data on the following legal bases under GDPR Art. 6:

• Art. 6(1)(a) GDPR — Consent: Where you have given explicit consent (e.g. cookies, newsletter).
• Art. 6(1)(b) GDPR — Contract: Where processing is necessary for the performance of a contract or pre-contractual steps at your request.
• Art. 6(1)(c) GDPR — Legal obligation: Where processing is required to comply with a legal obligation under EU or German law.
• Art. 6(1)(f) GDPR — Legitimate interests: Where processing is necessary for our legitimate business interests (e.g. IT security, fraud prevention, website analytics), unless overridden by your interests or fundamental rights.

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit our website, Vercel automatically collects and stores access log data including your IP address, browser type, operating system, referring URL, and timestamp. Vercel uses a global edge network; your requests are processed at the nearest edge location, which may be within or outside the EU/EEA.

Data transfers to the USA are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses pursuant to Art. 46 GDPR. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Vercel. For details, see the Vercel Privacy Policy.

Legal basis: Art. 6(1)(f) GDPR — legitimate interests in the secure and efficient operation of this website.

When you contact us via our contact form or by email, we process the data you provide (name, email address, company name, message content, selected services) for the purpose of responding to your enquiry and managing the business relationship.

Email delivery: Your enquiry is sent to us via Resend (Resend, Inc., San Francisco, CA, USA), an email delivery service. Resend processes the data contained in the form (name, email, company, message) solely for the purpose of email transmission. Data may be transferred to the USA under Standard Contractual Clauses (Art. 46 GDPR).

CRM storage (HubSpot): Your contact data (name, email, company) and enquiry details are stored in our Customer Relationship Management system provided by HubSpot, Inc. (25 First Street, Cambridge, MA 02141, USA / HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland). HubSpot is used to manage and respond to enquiries, maintain the business relationship, and for CRM purposes. A contact record is created or updated with your data, and the enquiry content is stored as a note associated with your contact.

HubSpot may process data on servers in the EU and the USA. Transfers to the USA are covered by the EU–US Data Privacy Framework and Standard Contractual Clauses pursuant to Art. 46 GDPR. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with HubSpot.

reCAPTCHA: The contact form uses Google reCAPTCHA v3 to prevent spam submissions. When you submit the form, Google processes technical data (IP address, browser data) to generate a risk score. No personal data is stored by us from the reCAPTCHA check beyond the score value. See Google's Privacy Policy.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual or contractual relationship) and Art. 6(1)(f) GDPR (legitimate interests in responding to enquiries and managing the client relationship).

Data is retained for as long as necessary to respond to your request and manage the business relationship, and thereafter in accordance with statutory retention obligations (up to 10 years under §§ 238, 257 HGB and § 147 AO). You may request deletion of your data from our CRM at any time by contacting yhammer@vh-agency.de.

Our website uses cookies — small text files stored on your device. We use the following categories:

• Strictly necessary cookies: Required for the website to function. No consent required under TDDDG § 25(2).
• Analytics cookies: Used to understand how visitors interact with our website. Activated only with your consent (Art. 6(1)(a) GDPR).
• Marketing cookies: Used to deliver relevant advertising. Activated only with your consent (Art. 6(1)(a) GDPR).

You may withdraw consent at any time via our Cookie Settings. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

We use Google Analytics (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA / Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyse website usage. Google Analytics uses cookies to collect usage data.

IP anonymisation is enabled — your IP address is truncated within the EU/EEA before transmission to Google. Google may transfer data to the USA under the EU–US Data Privacy Framework.

Legal basis: Art. 6(1)(a) GDPR (consent). You may opt out at any time via Cookie Settings or by installing the Google Analytics opt-out browser add-on.

A DPA has been concluded with Google pursuant to Art. 28 GDPR.

We use the following third-party services, each operating under their own privacy policies:

• Vercel (Hosting): Website hosting and edge delivery. Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Data processing on global edge servers (EU–US Data Privacy Framework, SCCs). Vercel Privacy Policy.
• HubSpot (CRM): Contact data and enquiry details from the contact form are stored in HubSpot for client relationship management. Provider: HubSpot, Inc. / HubSpot Ireland Limited. Data processing in the EU and USA (EU–US Data Privacy Framework, SCCs). HubSpot Privacy Policy.
• Resend (Email): Contact form submissions are delivered via Resend's email API. Provider: Resend, Inc., USA (SCCs). Resend Privacy Policy.
• Google reCAPTCHA v3: Spam protection for the contact form. Provider: Google LLC / Google Ireland Limited. Data processing in the USA (EU–US Data Privacy Framework). Google Privacy Policy.
• Google Analytics: Website usage analytics (see section 7). Provider: Google LLC / Google Ireland Limited.
• Google Fonts (self-hosted): Font files are served from our own server — no data is transmitted to Google during page load.
• Framer CDN: Custom font files (PP Neue Montreal, PP Supply Mono) are loaded from framerusercontent.com.

Any transfer of personal data to third countries (outside the EU/EEA) is carried out only where appropriate safeguards exist (e.g. Standard Contractual Clauses, EU–US Data Privacy Framework, adequacy decision) pursuant to GDPR Chapter V.

As a data subject you have the following rights under the GDPR:

• Art. 15 GDPR — Right of access: You may request confirmation of whether we process your personal data and obtain a copy.
• Art. 16 GDPR — Right to rectification: You may request correction of inaccurate personal data.
• Art. 17 GDPR — Right to erasure: You may request deletion of your personal data where no legal obligation requires retention.
• Art. 18 GDPR — Right to restriction: You may request restriction of processing in certain circumstances.
• Art. 20 GDPR — Right to data portability: You may request your data in a structured, commonly used, machine-readable format.
• Art. 21 GDPR — Right to object: You may object to processing based on legitimate interests or direct marketing at any time.
• Art. 7(3) GDPR — Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise your rights, contact us at: yhammer@vh-agency.de.
We will respond within 30 days as required by Art. 12 GDPR.

You have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. The supervisory authority competent for our registered office is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Postfach 30 40, 55020 Mainz
Website: www.datenschutz.rlp.de

A list of all German data protection authorities is available at: www.bfdi.bund.de