Privacy Policy
This policy explains how personal data is processed on this website, in line with the EU General Data Protection Regulation (GDPR) and the German Digital Services Act (DDG).
1. Controller
The controller responsible for processing on this website is Lennard Bäthge (full address in the Legal Notice). Contact: prismatixwav@gmail.com.
2. Hosting and server log files
This site is hosted by Vercel Inc. (USA). When you visit, the host automatically processes technical data in server log files: your IP address, date and time of the request, the page requested, referrer, and your browser and operating system. This is required to deliver the site reliably and securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a stable, secure website). Vercel acts as a processor under a data processing agreement; data may be transferred to the USA, safeguarded by the EU-US Data Privacy Framework and standard contractual clauses.
3. Content and media delivery (Sanity)
Text, images and audio are managed in and delivered through Sanity (sanity.io). When your browser loads media from cdn.sanity.io, your IP address is transmitted to Sanity and its infrastructure provider (Google Cloud) solely to deliver the requested content. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement is in place, EU data residency is used where available, and standard contractual clauses cover any transfer outside the EU.
4. Fonts
Fonts are self-hosted on this website and served from the same domain (via Next.js font optimisation). No connection is made to Google Fonts or any third-party font server, and no data is transmitted to Google for fonts.
5. Booking form
If you send a booking enquiry, the data you enter (name, email, and the details you provide) is transmitted by email via Resend (resend.com) so we can respond. Legal basis: Art. 6(1)(b) GDPR (steps taken prior to a contract) and Art. 6(1)(f) GDPR (interest in handling enquiries). Resend acts as a processor; data is stored in the USA under the EU-US Data Privacy Framework and standard contractual clauses. Enquiries are kept only as long as needed to process them and to meet any legal retention duties.
6. Newsletter / drop list
If you subscribe with your email address, it is used solely to send you the updates you signed up for, processed via Resend. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time with effect for the future, via the unsubscribe link or by emailing us. Withdrawal does not affect processing carried out before it.
7. Cookies and analytics
This website does not use tracking cookies, advertising, or analytics services, and does not create user profiles. Only the technically necessary processing described above takes place, so no cookie consent banner is required. The only item stored in your browser is a small flag that remembers you dismissed the one-time notice that this site uses no tracking cookies; it is technically necessary and needs no consent.
8. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21). Where processing is based on consent, you may withdraw it at any time (Art. 7(3)). To exercise any of these, contact prismatixwav@gmail.com.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the controller is Die Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen).
10. Changes to this policy
We may update this policy to reflect changes to the website or legal requirements. Last updated: June 2026.