Legal
Privacy policy
This is an English translation of the German privacy policy. The German version is authoritative.
Controller
Willerscheidt Web Design, Lukas Willerscheidt, Berliner Straße 33, 53919 Weilerswist, Germany. Email: Lukas-Willerscheidt@gmx.de.
Website delivery
This website is provided through Lovable. When you visit, technically necessary connection data is processed, including IP address, access time, requested page and browser information. This serves delivery and security of the site (Article 6(1)(f) GDPR). Technical logs are retained only as long as needed for operation and security; you may ask us for details about the hosting provider’s retention period.
Contact form and enquiries
When you enquire, we store your name, email address and message, and where provided, business name, phone number, interest and website/domain. These details are stored in the project database and sent to us as an email notification. If you contact us directly by email, we process your message in our inbox. The legal basis is Article 6(1)(b) GDPR (pre-contractual communication) or Article 6(1)(f) GDPR (handling other enquiries). Required details are needed so we can respond.
Direct orders, project brief and files
Before payment, we collect your name, business name, email address, optional phone number, sector, services, domain and information about available materials. Optional details may include your audience, design preferences and requested content. Uploaded images and videos are stored in non-public file storage. Details and files are saved when you continue to payment, even if you do not complete the purchase. We use this information to match your payment with your order, prepare and fulfil the work, and contact you (Article 6(1)(b) GDPR). Please upload only material needed for your project that you are entitled to share.
Payments via Stripe
We embed a Stripe checkout to process payments. Stripe receives information needed for payment, such as email address, payment details and order amount. Full card details are not stored in our project brief. We receive payment status, transaction information and the amount to match and fulfil your order. When checkout is opened, Stripe may process technical connection data and use technologies necessary for secure payments. Payment processing is based on Article 6(1)(b) GDPR; fraud prevention and security may rely on legitimate interests under Article 6(1)(f) GDPR. See Stripe’s privacy policy for details.
Email notifications
After payment is confirmed, we send an order confirmation to your email address. We also receive an internal message with your project details; this may include time-limited links to uploaded files. We use Lovable’s email infrastructure with our domain to send these messages. Replies and direct messages arrive in our GMX inbox. This processing serves contract fulfilment or handling your enquiry (Article 6(1)(b) GDPR).
Fonts
Fonts are loaded from Google Fonts for display. This establishes a connection to Google servers, which may receive your IP address. See Google’s privacy policy for details.
Recipients, retention and international transfers
We use Lovable and its service providers for hosting, storage and sending emails, Stripe for payments, and GMX to receive email. Providers process data according to their respective roles and applicable agreements. Depending on the provider, data may be processed outside the European Economic Area; appropriate safeguards apply where required. We delete enquiries and incomplete orders once no longer needed for their purpose. For completed orders, data is kept only as long as needed for fulfilment and statutory retention obligations. Please contact us about specific retention periods or deletion requests.
Your rights
Under the GDPR, you may have rights to access, rectify, erase or restrict processing of your data, and to data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it for the future at any time. You may also complain to a data protection supervisory authority. Contact the email address above to exercise your rights or ask questions.