Privacy Policy

studiokurbos

Privacy Policy

studiokurbos GmbH is a privately-owned and independent design studio. We work holistically for our clients in the fields of automotive, product design, and user experience, creating vehicles, products, and user interfaces for brands and markets around the world. When you visit our website, personal data is processed. Protecting this data is important to us. Below, we explain how your data is processed.

I. Responsible Party according to Art. 4 No. 7 GDPR

1. Name of the responsible entity

studiokurbos GmbH

2. Managing Director

Andreas Kurbos

3. Address of the responsible entity

Königstraße 32 70173 Stuttgart

II. Data Protection Officer

You can reach our Data Protection Officer at: datenschutz@kurbos.com

III. Purpose and Data Minimization

We collect, store, and use your personal data only according to the regulations of the European Union and German data protection laws. Below, we inform you about the type, scope, and purposes of the collection and use of personal data. No further processing for other purposes will occur. You can access this information anytime from this website.

IV. Data Transmission Security

If data transmission occurs, it is done using a secure data transmission method (e.g., SSL/TLS encryption). Look for the "s" in "http(s)" in the URL (the web address you enter). This indicates that your input on the internet is secure. Additional Information: Your web browser contains detailed explanations about security procedures and encryption under its help section.

V. Processing Your Personal Data

Your personal data is processed in the following cases:

1. Data Transmission and Logging for System and Statistical Purposes (Logfiles)

Your internet browser automatically sends data to our web server when you access our website. This includes the date and time of access, the URL of the referring website, the retrieved file, the amount of data sent, the browser type and version, the operating system, and your IP address. This data is stored separately from other data you enter while using our services. We cannot assign this data to a specific person. This data is analyzed for statistical purposes and then deleted.

2. Cookies

This website uses cookies. Cookies are small files that store specific information related to your device (PC, smartphone, etc.). They help with website usability (e.g., saving login information) and collecting statistical data about website usage to improve the service. Users can influence the use of cookies through a consent management tool. Most browsers also offer options to restrict or block cookies. However, note that without cookies, the use and comfort of the website may be limited.

3. Personal Data

If you have provided us with personal data (such as name, email address) via email, we collect, store, and use this data to respond to your inquiries. We may disclose this data to authorities if required for legal purposes, such as criminal investigations or protecting intellectual property rights. We will not share your data with third parties without your explicit consent.

4. Applications

You can send us your application materials via email. We process your personal data (such as name, email, phone, cover letter, resume, and any other application documents) for recruitment purposes. Our HR team reviews the applications and creates an internal digital file that the relevant department manager can access. The HR team handles further processing, and your data is not transferred to other countries or third parties. Data is stored during the application process and deleted after a maximum of six months. If we are very interested in your application, we might keep your data longer, with your permission, in case a suitable position opens up.

5. Usage Data

We collect and use personal data as needed to provide our online services. This includes data to identify you and details about your use of our services.

6. Contact

You can contact us via email. Your personal data (email address, and possibly name) will be processed and may be forwarded to the relevant contact person.

7. Video Surveillance at the Entrance

To protect our office and monitor access, we use video surveillance at the entrance. This helps with enforcing property rights and preventing various crimes. The responsible party for video surveillance is studiokurbos GmbH, Königstraße 32, 70173 Stuttgart, studio@kurbos.com. The surveillance captures video and audio data of individuals (employees, suppliers, customers, visitors, unauthorized persons). The legal basis for this data processing is our legitimate interest in enforcing property rights and protecting valuable assets under GDPR Art. 6(1)(f) and § 4(1) BDSG. The data is processed with respect to privacy, and cameras are positioned to minimize the impact. Data may be shared with law enforcement if needed. Additionally, data collected via the doorbell is sent to a Google server, which is certified under the EU-U.S. Transatlantic Data Protection Framework. Video and audio recordings are automatically deleted after 3 hours unless needed for legal reasons.

Your Rights: You have the right to access, delete, correct, restrict processing, and object to the processing of your data. Contact us at datenschutz@kurbos.com or by mail to exercise these rights. If you believe we are not handling your data properly, you can file a complaint with a data protection authority. For further questions, our Data Protection Officer is available at datenschutz@kurbos.com.

VI. Data Subjects and Categories

This includes customers, website visitors, business partners, and employees. Data collected may include name, address, email address, and IP address, only as described in the purpose and data minimization sections.

VII. Legal Basis

The legal basis for storing, processing, and sharing your data is your consent (Art. 6(1)(a) GDPR) if given, or legitimate interests (Art. 6(1)(f) GDPR) where there is no significant impact on your rights. It also includes legal obligations (Art. 6(1)(c) GDPR) for business and tax purposes.

VIII. Data Deletion / Storage Duration

Data will be deleted once the purpose is fulfilled and no legal retention period applies. Generally, data is stored only as long as needed for the stated purposes.

IX. Recipients of Data

Your personal data is shared with third parties only if necessary for contract fulfillment, with your consent, or if required by law (e.g., to tax authorities). You can withdraw consent at any time.

X. Data Transfer to Third Countries

Unless stated otherwise, we do not transfer data to third countries.

XI. Rights of Affected Individuals

You can request information about how your data is processed from the responsible entity. You also have the right to correction, deletion, restriction of processing, and objection. You can request data portability and lodge complaints with a data protection authority if you think your data is not handled properly. You can withdraw your consent for data processing at any time. Your withdrawal does not affect the legality of processing before it. To withdraw consent, email datenschutz@kurbos.com.

Right to Object

You have the right to object at any time to the processing of your personal data that is based on Article 6(1)(f) GDPR, due to your particular situation. This also applies to profiling based on GDPR provisions.

To exercise this right, you can contact us directly using the contact information provided in the imprint.

If you object, we will stop processing your personal data unless we can demonstrate compelling reasons for the processing that override your interests, rights, and freedoms, or if the processing is necessary for asserting, exercising, or defending legal claims.

If you object to direct marketing, we will no longer process your personal data for that purpose.

XII. Google Services

Below, we inform you about the Google services used on our website:

1. Google Analytics

We use Google Analytics, a web analytics service by Google. Google Analytics uses cookies to collect data about your use of the website. This data is sent to and stored on Google’s servers in the USA. IP anonymization is enabled on our site, which shortens your IP address within EU member states or other countries in the European Economic Area to ensure anonymous data collection. In rare cases, the full IP address may be sent to a Google server in the USA and shortened there. Google uses this data to analyze your use of the website, compile reports on website activity, and provide other related services. Your IP address is not combined with other Google data.

For more details, visit Google’s data usage explanation here: https://policies.google.com/technologies/partner-sites?hl=en, and Google’s advertising policies here: https://policies.google.com/technologies/ads?hl=en. You can also find information on how to opt-out of personalized ads here: https://adssettings.google.com/authenticated.

2. Google Tag Manager

We use Google Tag Manager to manage and deploy Google services and other third-party services. Google Tag Manager itself does not set cookies or collect personal data; it just manages tags.

3. Hotjar

We use Hotjar to understand our users better and improve our website. Hotjar collects data on user behavior and device information, including anonymized IP addresses, screen size, device type, browser information, location (only country), and preferred language. Hotjar stores this data in a pseudonymized user profile and is contractually prohibited from selling the data.

4. SalesViewer

We use SalesViewer® technology to collect data for marketing, market research, and optimization purposes based on legitimate interests (Article 6(1)(f) GDPR). A JavaScript code collects company-related data and encrypts it with a one-way function (hashing). The data is pseudonymized and not used to identify website visitors personally.

Data collected with SalesViewer® is deleted when it is no longer needed, and you can object to data collection and storage at any time by clicking this link: https://www.salesviewer.com/opt-out. An opt-out cookie will be set on your device, and if you delete cookies, you will need to click the link again.

XIII. Social Media

1. Privacy Policy for Social Media

We provide information about data processing when you visit our social media pages. We receive anonymized visitor statistics from the social network, showing how users interact with our page but not providing personal data. We share joint responsibility with the social network provider for these statistics (Article 26 GDPR), with the social network taking primary responsibility. We use this data for business and communication purposes to stay competitive.

When you visit our social media pages, cookies are placed on your device, which are effective for up to two years unless deleted. The social network processes this information, even if you do not have an account with them. If you have an account, the network collects and processes data you’ve provided, such as age, gender, relationship status, job, lifestyle, interests, and purchase behavior. The network also collects geographic data and personalizes information and ads.

If you don’t have an account, the network collects your IP address, device information, region, and browsing behavior to estimate demographic data. You can prevent data collection by adjusting cookie settings in your browser or using “Do Not Track” options.

Social networks may use servers in the USA and other non-EU countries with varying data protection levels. In such cases, additional safeguards, such as EU Commission standard contractual clauses, are used.

We maintain a presence on:

Facebook and Instagram: Operated by Facebook Inc., USA, or Facebook Ireland Ltd. for EU users. For more information, visit Facebook’s privacy policy: https://www.facebook.com/privacy/explanation, cookie policy: https://www.facebook.com/policies/cookies, and page insights data: https://www.facebook.com/legal/terms/information_about_page_insights_data.

LinkedIn: Operated by LinkedIn Corporation, USA, or LinkedIn Ireland Unlimited Company. For more details, see LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Behance: Operated by Adobe Systems Software Ireland Limited. For more details, see Adobe’s privacy policy: https://www.adobe.com/privacy/policies.html.

XIV. External Links

Our website contains links to third-party sites. If it is not clear, we will indicate that it is an external link. studiokurbos GmbH has no control over the content or design of these external sites and the privacy guarantees in this policy do not apply to them.