Privacy Policy

1. Introduction and General Provisions

You are visiting the website of Davies Meyer GmbH, located at Spielbudenplatz 24-25, 20359 Hamburg.

Our Data Protection Officer Sven Jaginiak can be reached at the above address or via [email protected].

2. Collection and Storage of Personal Data and Purpose of Use

a) When Visiting the Website

When you access our website, the browser on your device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without your intervention and stored until automatic deletion:

• Name of the retrieved file
• Date and time of retrieval
• Amount of data transferred
• Notification of successful retrieval
• Description of the web browser type used
• Operating system used
• Previously visited page
• Provider
• Your IP address

The aforementioned data is processed by us for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring comfortable use of our website
• Evaluation of system security and stability
• Other administrative purposes

The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection. In no case do we use the collected data for the purpose of drawing conclusions about you personally.

b) When Subscribing to Our Newsletter

We use a double opt-in procedure for our newsletter: after you sign up, we send you an email containing a confirmation link. Only once you click that link do we add you to the distribution list. If you do not confirm, we delete the sign-up data after 30 days at the latest.

We process your name, email address, the selected language, and the time of sign-up and confirmation. This logging serves as proof of your consent. The legal basis is Art. 6 para. 1 lit. a GDPR in conjunction with § 7 para. 2 no. 2 UWG.

You can unsubscribe at any time via the unsubscribe link at the end of every newsletter email. Alternatively, send your unsubscribe request to [email protected]. After you unsubscribe, we keep the proof of unsubscription for up to 12 months and then delete it.

c) When Using Our Contact Form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. A valid email address is required so that we know who the inquiry is from and can respond to it. Additional information can be provided voluntarily.

Data processing for the purpose of contacting us is based on Art. 6 para. 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been processed.

d) When Applying via Our Career Page

When you apply for a position through our application form, we collect the following personal data: first name, last name, email address, desired position, earliest possible start date, salary expectations, and optionally a message and uploaded application documents (PDF).

Your application data is transmitted to our applicant management system Personio (Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany) and stored there for the purpose of processing your application. The legal basis is Art. 6 para. 1 lit. a GDPR (consent) in conjunction with Art. 88 GDPR and § 26 BDSG (data processing for employment purposes).

Personio processes your data on our behalf in accordance with Art. 28 GDPR. Data is stored within the EU/EEA. For more information about data protection at Personio, please visit www.personio.de/en/privacy-policy.

Your application data will be deleted no later than 6 months after the conclusion of the application process, unless statutory retention obligations apply or you have consented to longer storage.

e) When Requesting a Studio Booking

For a booking request we process the studio, preferred date, duration, type of production, name and email address, as well as optionally company, phone number and message. We use this data to check availability, agree on a date and respond by email. The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR.

f) Downloads, Lead Magnets and the Briefing Generator

For PDF downloads, playbooks, starter kits and the briefing generator we process your name, email address and – depending on the form – company, role and the content you provide. For gated downloads you confirm your email address via a link (double opt-in); the confirmation link expires after 7 days. The legal basis is your consent under Art. 6 para. 1 lit. a GDPR and Art. 6 para. 1 lit. b GDPR where the request serves to initiate a contract.

g) Event Registrations and Questionnaires

For event registrations we process your name, email address, company and optionally details of a plus one and a message. For questionnaires we process your name, email address, optionally your company, and your answers. The legal basis is Art. 6 para. 1 lit. b GDPR or your consent under Art. 6 para. 1 lit. a GDPR.

h) Chat Assistant and Related Origin Data

In the chat we store the conversation history, a random session identifier and the information you enter voluntarily (e.g. name, company, email address, phone number).

To classify business inquiries we additionally store technical origin attributes: the domain of a business email address or website, the referring page, the landing page, language, country and browser identification. Your IP address is not stored in plain text; we only store a truncated network range and a checksum. The legal basis is Art. 6 para. 1 lit. f GDPR; our legitimate interest lies in classifying and answering business inquiries and in preventing misuse.

3. Disclosure of Data

Your personal data will not be transmitted to third parties for purposes other than those listed below.

We only share your personal data with third parties if:

• You have given your express consent pursuant to Art. 6 para. 1 lit. a GDPR, for example to shipping service providers through consent to separate participation conditions in competitions
• The disclosure is required pursuant to Art. 6 para. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• In the event that there is a legal obligation to disclose pursuant to Art. 6 para. 1 lit. c GDPR
• This is legally permissible and required pursuant to Art. 6 para. 1 lit. b GDPR for the processing of contractual relationships with you

a) Processors

The following service providers process personal data on our behalf pursuant to Art. 28 GDPR:

• Hosting and database: Lovable Labs Incorporated (San Francisco, USA) with Supabase infrastructure for the website, form data and application logic.
• Website delivery: Cloudflare, Inc. (San Francisco, USA) as content delivery network.
• Email delivery: Resend, Inc. (Delaware, USA) for confirmation, newsletter and notification emails.
• AI assistants: Lovable AI Gateway (Lovable Labs Incorporated, USA), which forwards requests to Google (Gemini) language models.
• Applications: Personio SE & Co. KG (Munich, Germany).

Where data is transferred to the USA, this is based on standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR and/or the EU-US Data Privacy Framework.

b) Retention and Deletion

We delete personal data as soon as the purpose no longer applies and no statutory retention obligation exists. An automated deletion job runs daily in our system:

• Contact and inquiry data, chat histories and their origin attributes, studio bookings, questionnaire answers, event registrations and kit requests: 24 months from receipt.
• Unconfirmed newsletter sign-ups: 30 days.
• Proof of newsletter unsubscriptions: 12 months.
• Confirmation data for PDF downloads: 30 days after the link expires.
• Application documents: 6 months after the application process ends.

Statutory commercial and tax retention periods (§ 147 AO, § 257 HGB) remain unaffected.

4. Cookies and Similar Technologies

Cookies are small text files stored on your device. We use strictly necessary cookies and comparable storage so that the website works; the legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6 para. 1 lit. f GDPR.

All analytics and marketing technologies are only loaded after your active consent (Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR). Giving consent is voluntary; you can change or withdraw it at any time with effect for the future via "Cookie settings" in the footer. You can also block or delete cookies in your browser.

The following cookies and storage technologies are used on our website:

5. Google Tag Manager and Google Consent Mode

We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to manage analytics and marketing tags. Tag Manager itself does not store personal data in cookies; it only controls the delivery of the services described below. When it loads, your IP address is transmitted to Google.

Tag Manager is only loaded after your consent. In addition, we use Google Consent Mode: your choice from the cookie banner is passed on to the embedded Google services so that they only process data within the scope of your consent.

The legal basis is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.

6. Google Analytics 4

Following your consent to the statistics/analytics category, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of how our website is used (e.g. pages viewed, time on site, approximate location, device and traffic source).

In Google Analytics 4, IP addresses are truncated and not logged. A transfer of data to Google servers in the USA cannot be excluded; it takes place on the basis of standard contractual clauses or the EU-US Data Privacy Framework.

The legal basis is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time via "Cookie settings" in the footer. Further information: https://policies.google.com/privacy

7. Locally hosted fonts

We provide the Inter font on our own website. Your browser loads the font files from daviesmeyer.com. This does not require a connection to Google Fonts.

8. Microsoft Advertising (UET tag)

Following your consent to marketing cookies, we embed Universal Event Tracking (UET) from Microsoft Advertising (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The UET tag records your interactions on our website (e.g. page views and form submissions) and allows us to measure the performance of Microsoft/Bing ads and to build remarketing audiences.

The legal basis is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Any transfer to the USA is based on standard contractual clauses or the EU-US Data Privacy Framework. Further information: https://privacy.microsoft.com/en-us/privacystatement

9. OpenAI Ads (ChatGPT Ads)

With your consent to marketing cookies, we embed the OpenAI Ads conversion pixel (provider: OpenAI Ireland Ltd., Dublin, and OpenAI, L.L.C., San Francisco, USA). The pixel sets the __obref cookie and measures whether a visit originating from a ChatGPT ad resulted in an enquiry. The ad click reference (the "oppref" parameter) is only held in the browser's memory for the duration of your visit and is not stored as a cookie. Event data (e.g. page view, form submission, a random event ID) and – if you submit a form – your email address and name in hashed (pseudonymised) form are transmitted to OpenAI. The legal basis is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Any transfer to the USA is based on standard contractual clauses or the EU-US Data Privacy Framework. You can withdraw your consent at any time via "Cookie settings" in the footer. Further information: https://openai.com/policies/privacy-policy

10. Use of AI Assistants

We use AI-powered assistants on our website (chat assistant, event concierge, briefing generator). You are interacting with an AI system, not with a human. The content you enter is transmitted to our hosting and model provider in order to generate a response.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in efficiently handling user requests) or Art. 6(1)(b) GDPR where the communication serves the initiation of a contract. Please do not enter special categories of personal data or trade secrets. No automated decision-making producing legal effects within the meaning of Art. 22 GDPR takes place.

Further information on our use of AI and the labelling of AI-generated media is available on our AI Transparency page.

11. Data Subject Rights

You are entitled to the following data subject rights: