LEGAL
Privacy Policy
Last updated: 21 July 2026
1. Controller
The data controller for this website is:
bestdaydesigned
Mulzerstraße 17
85051 Ingolstadt-Haunwöhr, Germany
Email: support@bestdaydesigned.com
2. What data this site collects, and why
Contact form. The contact form on /contact runs entirely in your browser. Details you enter (name, email, phone, company, service interest, message) are validated locally and are not transmitted to or stored by bestdaydesigned through the form itself — this site currently has no server to receive them. If you want to reach the studio, use the email or phone number shown on the Contact page directly; anything you send that way (email, phone call) is handled as ordinary business correspondence and kept only as long as needed to respond to you and, where relevant, deliver a project.
Checkout. If you use the cart and checkout flow, you'll be asked for contact details (name, email, phone) and billing details (address, optional VAT ID) to generate a German VAT invoice. The payment step is a demonstration checkout: card-style fields are cosmetic and are never transmitted, processed, or stored anywhere by this site or a third party. Cart contents are stored only in your browser (localStorage) so your cart persists between visits; this data never leaves your device unless you complete checkout, at which point the contact and billing details you entered are used solely to generate your order summary and, when a real project is confirmed by email, to begin work.
Analytics. This site uses Google Analytics 4 (GA4) to understand aggregate visitor behaviour (pages viewed, general location at country/region level, device type). GA4 loads only after you accept analytics cookies in the cookie-consent banner — no analytics data is collected before you consent, and none is collected at all if you decline. Where GA4 is active, some data is processed by Google outside the EU under Google's standard contractual safeguards. You can withdraw consent at any time via "Manage cookie preferences" in the footer.
3. Legal basis for processing
- Correspondence you initiate (email, phone): Art. 6(1)(b) GDPR (steps taken at your request prior to entering a contract) or Art. 6(1)(f) (legitimate interest in responding to enquiries).
- Checkout/billing data: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) (compliance with German invoicing/tax retention obligations).
- Analytics (GA4): Art. 6(1)(a) GDPR (your consent), revocable at any time with no effect on processing already carried out before withdrawal.
4. Data retention
- Correspondence is kept only as long as needed to handle your enquiry or deliver a project, and no longer than statutory retention periods require for business/tax records (generally up to 10 years for invoicing-related documents under German commercial and tax law).
- Cart data stored in your browser persists until you clear your browser storage or complete checkout.
- Analytics data collected via Google Analytics 4 (only after you consent) is retained for 14 months, after which it is automatically deleted in line with our GA4 data-retention setting.
5. Your rights
Under the GDPR, you have the right to: access the personal data held about you (Art. 15); request correction (Art. 16) or erasure (Art. 17); request restriction of processing (Art. 18); receive your data in a portable format (Art. 20); and object to processing carried out on the basis of legitimate interest (Art. 21). To exercise any of these, email support@bestdaydesigned.com. You also have the right to lodge a complaint with a supervisory authority — in Bavaria, the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).
6. Third parties
- Google Ireland Limited (Google Analytics 4) — only after consent, see §2 and the Cookie Policy.
- No payment processor is currently integrated; the checkout flow is a demonstration only (see §2).
7. Contact for privacy requests
Email support@bestdaydesigned.com for any question about this policy or to exercise your rights above.