ENDE

Privacy Policy

This is a translation for your convenience. The German version is legally binding.

1. Controller

The Great Wanderer Studios UG (haftungsbeschränkt)
Ebelingstrasse 17
10249 Berlin
Germany

Represented by the managing director Joshua Weigand-Suminski
Email: contact@greatwanderer.studio
Phone: 015228810876

2. In short

This website uses no analytics or tracking tools, shows no ads and sets no cookies of its own. Personal data is processed only as far as needed to deliver the website, to answer your enquiries and, if you start a video, to play it via YouTube. The details follow below.

3. Hosting and delivery of the website

This website is hosted by Cloudflare and delivered through Cloudflare's network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When you visit the website, Cloudflare automatically processes data that your browser sends (server log files): IP address, date and time of the request, the page or file requested, the amount of data transferred, the page you came from (referrer), and your browser and operating system. This data is technically required to display the website and to keep it stable and secure, in particular to fend off attacks. We do not analyse this data ourselves and do not combine it with other data.

To protect against attacks, Cloudflare may in individual cases set technically necessary cookies.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, fast and reliable provision of our website. Where information is stored on or read from your device, this happens under Section 25(2) No. 2 TDDDG, because it is strictly necessary for the website you requested.

We have concluded a data processing agreement with Cloudflare under Art. 28 GDPR (Cloudflare Data Processing Addendum). Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR); the European Commission's standard contractual clauses apply in addition. More information: https://www.cloudflare.com/privacypolicy/

4. SSL/TLS encryption

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. Data you send to us, for example through the contact form, cannot be read by third parties.

5. Storage in your browser

We set no cookies. For individual functions the website stores small entries in your browser's local storage (local storage or session storage), for example that you closed a notice, or details you carry from one page into the contact form. These entries stay on your device and are not sent to us. You can delete them at any time in your browser settings.

The legal basis is Section 25(2) No. 2 TDDDG, because the storage is strictly necessary for the function you are using.

6. Contact form

When you send us an enquiry through the contact form, we process the details you enter: name, company (optional), email address, type of project, budget, timeline, your message and links.

Your details are sent in encrypted form to a server function at Cloudflare. It forwards the enquiry to a script in our Google Workspace account, which sends it as an email to our mailbox. Your details are not stored on the website itself. A field you cannot see helps fend off automated spam; it collects no additional data about you.

We use your details only to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or to steps prior to entering into a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest is answering the enquiries sent to us.

We keep your data until your enquiry has been dealt with, you ask us to delete it, or the purpose no longer applies. Statutory retention obligations remain unaffected; if a contract is concluded, we keep business correspondence for up to six or ten years (Section 257 HGB, Section 147 AO).

You are not required by law or contract to provide your data. Without your name, email address and the required details, however, we cannot handle your enquiry.

7. Contact by email or phone

If you contact us by email or phone, we process your enquiry, including the personal data you share (name, contact details, content of the enquiry), to deal with your request. Legal bases, storage period and retention obligations are the same as for the contact form under section 6.

8. Google Workspace

We use Google Workspace for our emails and to forward enquiries from the contact form. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google processes the content and metadata of emails and the details from the contact form on our behalf. We have concluded a data processing agreement with Google under Art. 28 GDPR (Cloud Data Processing Addendum). A transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); the European Commission's standard contractual clauses apply in addition.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is reliable and secure email communication. More information: https://policies.google.com/privacy

9. YouTube videos

This website embeds videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

As long as you do not click a video, we only show a preview image stored on our own server, and no connection to YouTube is made. Only when you click a video is it loaded in privacy-enhanced mode (youtube-nocookie.com). A connection to YouTube's servers is then established, and YouTube receives, among other things, your IP address, the information which of our pages you visited, and technical details about your browser and device. Once playback starts, YouTube may use cookies or similar technologies. If you are logged in to your Google or YouTube account, YouTube can link your viewing to your account; you can prevent this by logging out first. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is presenting our videos in an appealing way. The connection is only made when you explicitly request a video; where information is stored on or read from your device in the process, this happens under Section 25(2) No. 2 TDDDG. More information: https://policies.google.com/privacy

10. Fonts

The fonts used on this website are stored on our own server. No connection to third-party servers, such as Google Fonts, is made when you visit the website.

11. Links to other websites and social networks

Our website contains plain links to other services, for example Instagram, TikTok, Facebook, YouTube, LinkedIn, Patreon, Discord, Amazon and Google Maps. We do not embed social media plugins. No data is transferred until you click a link and open the provider's page. From then on, that provider's privacy policy applies.

12. Your rights

Within the limits of the law, you have the right to:

  • access the personal data we process about you (Art. 15 GDPR),
  • have incorrect data corrected (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

For any of these requests, an email to contact@greatwanderer.studio is enough.

Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

13. No automated decision-making

We do not make automated decisions or create profiles within the meaning of Art. 22 GDPR.

14. Changes

We update this privacy policy when our website or the legal requirements change. The version published here applies.

Last updated: October 2026