DATA PRIVACY
Last updated - September 2026

‍

Welcome to Soft Serves. We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how personal data may be processed when you visit our website. Our website is designed to operate without tracking cookies, analytics tools or advertising technologies. We do not actively collect personal data from visitors through our website. This Privacy Policy is prepared in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.


2
Data Controller
The data controller responsible for the processing of personal data in connection with this website is:

Soft Serves GbR
Kolonnenstr. 29, 10829 Berlin, Germany
hello@softserves.de


3
Website Hosting – Webflow
‍Our website is hosted by Webflow, Inc., a website hosting and design platform. When you visit our website, technical information may be automatically processed by Webflow or its infrastructure providers. This may include:

IP address
Date and time of access
Browser type and version
Operating system
Referring URL
Pages and files accessed
Technical information required to deliver and secure the website

This information may be processed in server log files and is necessary for the technical operation, stability and security of our website. Depending on the hosting configuration and services used, personal data may also be transferred to countries outside the European Economic Area, including the United States. Where such transfers take place, appropriate safeguards must be in place in accordance with applicable data protection laws. Legal basis: Article 6(1)(f) GDPR (legitimate interests). Our legitimate interests include ensuring the secure, stable and reliable operation of our website. Technical data is retained only for as long as necessary for these purposes, subject to the applicable retention policies of our hosting provider. For more information about how Webflow processes personal data, please refer to its Privacy Policy.


‍4
Cookies and Similar Technologies
‍Our website does not use tracking, analytics or advertising cookies. We do not use cookies to create user profiles, monitor browsing behaviour or track visitors across websites. However, our hosting provider may use technically necessary technologies to ensure the proper functioning and security of the website. Where such technologies involve storing information on or accessing information from your device, we ensure that their use complies with applicable legal requirements, including Section 25 of the German Telecommunications-Digital Services Data Protection Act (TDDDG). Where consent is legally required, it will be obtained before the relevant technology is used.


‍5
Contact via Email
‍Our website provides a contact button that opens a pre-filled email in your default email application. Clicking this button does not automatically send personal data to us. You decide whether to send the email and what information to include. If you contact us by email, we process the personal data you provide, such as your email address, name and the contents of your message. We use this information exclusively to respond to your enquiry and, where applicable, to handle any subsequent communication. Legal basis: Article 6(1)(b) GDPR, where the enquiry relates to a contract or pre-contractual measures, or Article 6(1)(f) GDPR, where we have a legitimate interest in responding to general enquiries. We retain email correspondence only for as long as necessary to handle your enquiry and comply with any applicable statutory retention obligations.


‍6
Links to Instagram
‍Our website contains a link to our Instagram profile. The link allows you to visit our profile on Instagram. Simply visiting our website does not automatically transfer your personal data to Instagram through this link. When you click the link and visit Instagram, Meta Platforms Ireland Limited may process your personal data in accordance with its own privacy policy. We have no control over the data processing activities of Instagram. For more information, please refer to Instagram's Privacy Policy.


‍7
Data Sharing and Disclosure
‍We do not sell or rent personal data. Personal data may be shared with third parties where necessary for the technical operation of our website, where required by law or where otherwise permitted under applicable data protection legislation. In particular, our website hosting provider may process technical data as described in Section 3. Where required, appropriate data processing agreements and safeguards are in place.


‍8
International Data Transfers
‍Our website hosting provider may process personal data outside the European Economic Area. Where personal data is transferred to a country that does not benefit from an adequacy decision by the European Commission, appropriate safeguards, such as Standard Contractual Clauses, will be implemented where required. Further information about relevant international data transfers can be obtained from our hosting provider.


‍9
Data Retention
‍We do not actively collect personal data through our website. Technical data processed automatically by our hosting provider is retained only for as long as necessary for the purposes described in this Privacy Policy. If you contact us by email, we retain your correspondence for as long as necessary to respond to your enquiry and fulfil any applicable legal obligations.
‍

‍10
Your Rights Under the GDPR
‍Under the GDPR, you have the following rights, subject to the applicable legal requirements:

‍Right of access (Article 15 GDPR):
You may request information about the personal data we process about you.

‍Right to rectification (Article 16 GDPR):
You may request the correction of inaccurate personal data.

‍Right to erasure (Article 17 GDPR):
You may request the deletion of your personal data where the legal requirements are met.

‍Right to restriction of processing (Article 18 GDPR):
You may request the restriction of processing in certain circumstances.

‍Right to data portability (Article 20 GDPR):
You may request to receive certain personal data in a structured, commonly used and machine-readable format.

‍Right to object (Article 21 GDPR):
You may object to processing based on legitimate interests, where the legal requirements are met.

Where processing is based on your consent, you also have the right to withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal. To exercise your rights, please contact us using the contact details provided in our Imprint.


‍11
Right to Lodge a Complaint
‍You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection laws. In Germany, you may contact the supervisory authority responsible for the federal state in which our business is established.


‍12
Data Security
‍We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are reviewed and updated where necessary.


‍13
Changes to This Privacy Policy
‍We reserve the right to update this Privacy Policy to reflect changes in our website, our data processing activities or applicable legal requirements. The current version will always be available on this page. The date of the latest update is indicated at the beginning of the document.


‍14
Contact
‍If you have any questions about this Privacy Policy or the processing of your personal data, please refer to the contact details provided in our Imprint.

‍
‍