Legal
Privacy notice
This notice explains how Lichtvision Design GmbH processes personal data when you visit lichtvision.com. It follows the requirements of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
1. Controller
Lichtvision Design GmbH, Fritschestr. 27/28, 10585 Berlin, Germany. Represented by Dr. Karsten Ehling, Managing Director. Email: studio.berlin@lichtvision.com
2. Data we process
This website is a static, content-only site. We do not run a contact form, comments, login or e-commerce functionality. When you visit the site, our hosting provider automatically processes technical access data required to deliver the pages to your browser — IP address, user-agent, referrer URL, requested URL and timestamp. These logs are stored solely by our hosting provider acting as processor; we do not export, download or retain them ourselves (see section 8). They are used only to detect abuse, debug errors and ensure service reliability (legitimate interest, Art. 6 (1) f GDPR).
3. Cookies
We use a single strictly-functional cookie named NEXT_LOCALE to remember your language choice across visits. It is set only when you actively switch language via the switcher in the header, contains only a locale code (en, de, es, zh), has a lifetime of one year and is not shared with third parties. Under § 25 (2) no. 2 TDDDG (formerly TTDSG) and Art. 6 (1) f GDPR this cookie is exempt from consent because it is strictly necessary for the user-requested service (delivering the site in the chosen language). We set no tracking, marketing or analytics cookies.
4. Analytics
This site does not load any third-party analytics by default. If aggregated, cookieless page-view statistics are enabled in a future release, the analytics script will be served from our own domain via a first-party proxy so that no visitor IP address is transmitted to a third-party host. No cookies are set and no cross-site tracking takes place; no consent banner is required.
5. Third-party services
We do not embed third-party services that load resources from outside our own infrastructure — no Google Fonts, Google Maps, YouTube, social embeds, reCAPTCHA, Gravatar or similar. Web fonts (Inter Tight) are self-hosted and shipped with the site bundle; no request is made to fonts.googleapis.com or fonts.gstatic.com. All images are served from our own asset storage on Cloudflare R2.
6. Email contact
If you contact us by email, your message and contact details are processed solely to handle your enquiry (Art. 6 (1) b and f GDPR). Correspondence is retained for as long as necessary for the purpose of the enquiry and any statutory retention periods that apply.
7. Hosting
The English, German and Spanish versions of this website (lichtvision.com) are hosted on Cloudflare's global edge network (Cloudflare Workers), with static assets and images delivered from Cloudflare R2 object storage. Cloudflare operates a worldwide network, so requests are answered by the data centre closest to you; this can be located outside the EEA. A separate Chinese version (lichtvision.cn) is planned and will be hosted on Alibaba Cloud servers inside mainland China to comply with local network and ICP regulations and to ensure reliable delivery to visitors in China. Each hosting provider acts as a processor under Art. 28 GDPR (Cloudflare) or the equivalent obligations under Chinese data-protection law (Alibaba Cloud).
8. Cloudflare server logs and data processing
Cloudflare Inc. processes the following personal data on our behalf when you access lichtvision.com: IP address (including a truncated/hashed form used for rate limiting), requested URL, HTTP method, user-agent, referrer, access time and date, response status code, and approximate geolocation derived from the IP address (country/region). We do not operate any log export (Logpush) and do not store, download or otherwise retain these access logs ourselves. Lichtvision therefore has no direct access to raw server logs; their retention and deletion are handled by Cloudflare exclusively in its capacity as processor under our Data Processing Addendum. The data is used exclusively for abuse prevention, DDoS mitigation, bot management, performance optimisation and troubleshooting. Cloudflare acts as a processor under Art. 28 GDPR. We have entered into Cloudflare's Data Processing Addendum (DPA). Any transfers of personal data from the EEA, Switzerland or the UK to Cloudflare in the United States are safeguarded by the EU Standard Contractual Clauses (SCCs) approved by the European Commission (Module One/Controller-to-Processor), supplemented by the additional technical and organisational measures described in Cloudflare's DPA. You can request a copy of the DPA and SCCs by contacting us.
9. Recipients and transfers
We do not share personal data with third parties except where required by law or to operate the service (in particular our hosting provider acting as processor; we use no analytics provider). Visitors to lichtvision.com are served from Cloudflare's edge; any transfers outside the EEA performed by Cloudflare are covered by the EU Standard Contractual Clauses. Once the Chinese version goes live, visitors to lichtvision.cn will be served from Alibaba Cloud inside China and their access data will be processed in China under local law.
10. Your rights
Under Art. 15–22 GDPR you have the right to information, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. To exercise these rights, contact the controller above. You may also lodge a complaint with a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
11. Changes to this notice
We may update this notice to reflect changes in the website or in legal requirements. The current version is always available at this URL.