Privacy Policy

1. Controller

CÉCILE GmbH
Knesebeckstraße 56–58
10719 Berlin
Email: hello@cecilestudios.com

2. Overview of processing

We only process personal data to the extent necessary for the provision of our website and its content. Processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting

Our website is hosted by Vercel Inc. (440 N Baxter St, Covina, CA 91723, USA). When the website is accessed, information is automatically stored in so-called server log files which your browser transmits automatically. This includes:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the file accessed
• Browser used and operating system
• Referrer URL

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient provision of the website). The data is deleted after 30 days.

Data is transferred to the USA. Vercel is certified under the EU-U.S. Data Privacy Framework. The legal basis for this third country transfer is Art. 45 GDPR (adequacy decision).

4. Fonts

We use the typeface “DM Sans”. The font files are hosted locally on our server. When the fonts are loaded, no connection is made to external servers (e.g. Google). No personal data is transferred to third parties.

5. External Links & Social Media

Our website contains links to our social-media presences and to external services (Instagram, TikTok, YouTube). When you click these links you leave our website.

Please note that we have no influence over the data processing of the social networks. It cannot be ruled out that your data is transferred to third countries. Please therefore consider carefully which personal information and messages you communicate to us via these networks, and in case of doubt use the alternative contact channels we provide. We accept no liability for the conduct of the operators of the social networks or their other members.

Where you communicate with us via our social-media presences, we process the information made available to us by the respective network (e.g. your name, profile page and the content of your messages directed to us) for the purpose of your communication (e.g. service requests, suggestions, criticism).

The resulting data is deleted once it is no longer required, or its processing restricted where statutory retention obligations apply. For public posts on our social-media presences, we decide on a case-by-case basis — weighing your interests and ours — whether and when to delete them.

The legal basis for this processing is Art. 6 (1) (a) GDPR, Art. 6 (1) (b) GDPR (including pursuant to Art. 26 GDPR) as well as Art. 6 (1) (f) GDPR based on the legitimate interest stated above.

We point out as a precaution that the respective providers may set strictly necessary as well as optional cookies during a visit to our site. These differ in part depending on whether you visit the site while signed in to a user account or not. We also note that we have no influence on the use of cookies on the social-media presences listed above.

WhatsApp community: Through our link you can join a WhatsApp channel. In the context of the WhatsApp community, we process the following personal data:

• Data processed: name, phone number, profile picture if any, and messages sent to us via the WhatsApp community
• Purpose: advertising and information for customers
• Legal basis: Art. 6 (1) (a) GDPR (consent)
• Retention: The retention period for transmitted messages follows our internal deletion policy.
• Third-country transfer: Processing is carried out by Meta Platforms Ireland Ltd.; any third-country transfer is based on Art. 46 (2) GDPR (standard contractual clauses).

For more information, see WhatsApp's privacy policy.

6. Cookies & Tracking

Our website does not generally use any cookies for tracking or analytics purposes and does not perform user profiling. As part of the hosting through Vercel, a technical cookie (“Vercel Frontend Observability”) may be set to ensure the technical functionality of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure provision of the website).

7. Data collection on the website

Our website does not contain contact forms, newsletter sign-ups or other input fields. We do not collect any personal data via the website beyond the server log files described under section 3.

8. Your rights

You have the right at any time to:

• access the data we store about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)

To exercise your rights, please contact: hello@cecilestudios.com

9. Right to withdraw consent and to object

Pursuant to Art. 7 (3) GDPR, you have the right to withdraw any consent given under Art. 6 (1) (a) GDPR at any time. As a result, we will no longer continue the processing that was based on this consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of the consent before its withdrawal.

Where we process your data on the basis of legitimate interests, you have the right under Art. 21 GDPR to object at any time, on grounds relating to your particular situation. Where the objection concerns processing for the purposes of direct marketing, you have an unconditional right to object that we will give effect to without further reasoning.

To exercise the right to withdraw consent or to object, an informal notice to the contact details given under section 1 is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with the data protection supervisory authority responsible for CÉCILE GmbH about the processing of your personal data.

11. Status

Status of this privacy policy: April 2026