LEGAL

Privacy policy

Last update:

1. Overview

This Privacy Policy explains how levlab.studio (“we,” “our,” or “us”) collects, uses, stores, and protects personal data when you visit this website, contact us, or interact with our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

2. CONTROLLER

levlab.studio
Tiffany Winteler
Balanstraße 123
81549 Munich
Germany
hello@leblab.studio

3. Information We Collect

We may collect the following types of information:

Information you provide directly
This includes contact details and message content when you contact us by email, contact form, or other communication channels.

Inquiry information
If you reach out about working together, we may process information about your business, audience, project, goals, current monetization, and any details you choose to share.

Technical and usage data
When you visit the website, technical data may be processed automatically, such as IP address, browser type, device information, pages visited, date and time of access, referring pages, and general usage behavior.

Analytics and cookie data
If analytics or similar tools are used, we may collect information about how visitors interact with the website. Non-essential cookies or tracking technologies are only used where legally required consent has been obtained.

4. How We Use Your Information

We use personal data to:

  • respond to inquiries and messages

  • assess potential collaborations or service requests

  • provide, improve, and manage our services

  • maintain and improve the website

  • understand how visitors use the website

  • comply with legal obligations

  • protect the website, our systems, and our legitimate business interests

We do not sell personal data.

5. Legal Bases for Processing

Depending on the context, we process personal data on the following legal bases:

Art. 6(1)(b) GDPR — Contract or pre-contractual steps
When you contact us about working together or request information about our services.

Art. 6(1)(f) GDPR — Legitimate interests
When processing is necessary to operate, secure, and improve this website, respond to general inquiries, and manage business communication.

Art. 6(1)(a) GDPR — Consent
Where we ask for your consent, for example for certain cookies, analytics, tracking tools, or optional communications.

Art. 6(1)(c) GDPR — Legal obligation
Where processing is required to comply with legal, tax, accounting, or regulatory obligations.

6. Contact Forms and Email Communication

If you contact us by email or through a contact form, we process the information you provide in order to respond to your message and handle your request.

This may include your name, email address, company or creator profile, message content, and any additional information you choose to share.

7. Cookies and Analytics

This website may use cookies or similar technologies to provide functionality, improve the website, and analyze website usage.

Essential cookies may be used where necessary for the website to function properly. Non-essential cookies, analytics, or tracking technologies are only used where consent is required and has been given.

You can adjust cookie settings through your browser or, where available, through the website’s cookie consent settings.

8. Third-Party Services and Processors

We may use third-party service providers to operate this website and manage communication, analytics, hosting, forms, or related services.

These providers may process personal data on our behalf and only as necessary to provide their services. Where required, we use appropriate data processing agreements and safeguards.

Possible service providers may include:

  • website hosting and infrastructure providers

  • form and email service providers

  • analytics providers

  • scheduling or communication tools

  • payment or invoicing tools, if relevant

Add exact providers here once you know them, for example Framer, Google Analytics, Google Fonts, Calendly, Mailchimp, Brevo, etc.

9. International Data Transfers

Some third-party providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, such as adequacy decisions, standard contractual clauses, or other legally recognized transfer mechanisms.

10. Data Retention

We keep personal data only for as long as necessary for the purposes described in this Privacy Policy.

Contact and inquiry data is usually kept for as long as needed to respond to the request and manage potential collaboration. Business, accounting, and legal records may be kept for longer where required by law.

11. Your Rights

Under the GDPR, you have the right to:

  • request access to your personal data

  • request correction of inaccurate data

  • request deletion of your data

  • request restriction of processing

  • object to processing based on legitimate interests

  • withdraw consent at any time, where processing is based on consent

  • request data portability, where applicable

  • lodge a complaint with a data protection supervisory authority

To exercise your rights, contact us at:

[hello@levlab.studio]

12. Security

We take appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

However, no digital platform or transmission method can be guaranteed to be completely secure.

13. Links to Other Websites

This website may contain links to external websites or services. We are not responsible for the privacy practices, content, or security of third-party websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, tools, or legal requirements.

The latest version will always be available on this page.

15. Contact

For privacy-related questions, requests, or concerns, contact:

Tiffany Winteler
Email: [hello@tiffanywinteler.com]