Privacy policy
Last updated: October 2026
This is a translation for convenience. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
brin-web.com, owner Maxim Brinster
Kreuzburger Str. 22
22045 Hamburg, Germany
Email: info@brin-web.com
You will find further details in our legal notice. We are not required to appoint a data protection officer under Art. 37 GDPR and Section 38 BDSG. If you have any questions about data protection, simply write to us at the address above.
2. Overview
Our services are aimed exclusively at businesses. We only process personal data to the extent necessary to run this website, respond to enquiries and prepare or carry out projects. We do not use cookies, analytics or marketing tools, or third-party content such as Google Fonts, YouTube or maps. We do not sell data and do not make automated decisions within the meaning of Art. 22 GDPR.
3. Hosting and server log files
This website is hosted on Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit the website, Cloudflare processes technically necessary data such as your IP address, date and time of access, the page requested, referrer, browser and operating system, in order to deliver the website, keep it stable and protect it against attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website securely, quickly and reliably. Cloudflare acts as our processor, and a data processing agreement pursuant to Art. 28 GDPR is in place. For transfers to the USA, Cloudflare is certified under the EU-US Data Privacy Framework (European Commission adequacy decision, Art. 45 GDPR); the EU standard contractual clauses (Art. 46(2)(c) GDPR) apply in addition.
4. Contact form and contact by email
If you contact us via the contact form or by email, we process your details (e.g. name, email address, optionally phone number, company and message, and the result of the project check if applicable) to respond to your enquiry and prepare a quote. Providing this information is voluntary, but we cannot reply without contact details.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to concluding a contract with your company. If you write to us as an employee or contact person of a company, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in handling the enquiry and communicating with our (potential) business clients.
[PLACEHOLDER: name the form backend and the email provider for info@brin-web.com, e.g. “Form data is forwarded via Cloudflare Pages Functions to our mailbox at provider XY”, each with data processing agreement and third-country basis if applicable]
5. Client and contract data
If your enquiry turns into a project, we process the contact details of your contact persons as well as contract, project and billing data in order to carry out and invoice the project (Art. 6(1)(b) GDPR) and to meet our legal obligations (Art. 6(1)(c) GDPR).
6. Storage period
We delete personal data as soon as the purpose no longer applies. We delete enquiries that do not result in a project no later than twelve months after the last contact. Data subject to retention obligations under tax or commercial law (e.g. quotes, invoices and business letters, Section 147 of the German Fiscal Code) is kept for the statutory period of up to ten years, with its processing restricted during that time.
7. Fonts
This website uses the fonts “Bricolage Grotesque” and “DM Sans”. The fonts are hosted locally on our server. No connection is made to servers of Google or other font providers when you visit the website.
8. Browser storage (session storage)
For the duration of your browser session, we store in your browser’s session storage whether you have already seen the intro game and – if you use it – the result of the project check, so it can be added to your contact form. This information does not leave your browser unless you submit the form, and it is deleted when you close the browser window.
The legal basis for the storage is Section 25(2)(2) TDDDG, as it is strictly necessary for the function you explicitly requested; for any further processing, Art. 6(1)(f) GDPR.
9. Analytics and tracking
We currently do not use any analytics, tracking or marketing tools. Should this change, we will ask for your consent beforehand (Art. 6(1)(a) GDPR, Section 25(1) TDDDG) and update this privacy policy.
10. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).
Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). An informal message to info@brin-web.com is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
12. Changes
We update this privacy policy when our website, our services or the legal situation change. The version published here applies.