DEVSTUDIOCRAFT. ← Back to site

Datenschutzerklärung

Privacy policy

Last updated: 23 October 2026

1. Controller

The controller under the General Data Protection Regulation (GDPR) is:

M2A Facility Management GmbH (DevStudioCraft, a brand of M2A Group)
Bürgermeister-Smidt-Straße 116, 28195 Bremen, Germany
Represented by the managing director Eng. Ayman Elbahrawy
Phone: +49 1522 2002210 · Email: [email protected]

2. Overview

We process personal data only as far as needed to run this website and to answer your inquiries. This website sets no cookies and uses no advertising or cross-site tracking. Fonts, media and our own scripts load from our own server. The only third-party script is Cloudflare Web Analytics, a cookieless visitor count (see section 6).

3. Hosting and server logs

This website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you open the website, Cloudflare automatically processes technical data that your browser sends: IP address, date and time of the request, requested page, referrer, browser and operating system. We need this data to deliver the website securely and to defend against attacks. The legal basis is our legitimate interest in a secure and reliable website (Art. 6 (1) (f) GDPR). We have a data processing agreement with Cloudflare. Transfers to the USA are based on the EU–U.S. Data Privacy Framework and, in addition, on Standard Contractual Clauses (Art. 46 GDPR).

4. Project inquiry form

When you send a project inquiry, we process the data you enter: name, email address, phone or WhatsApp number (optional), industry, the selected package and your message. We use this data only to answer your inquiry and prepare a possible project. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract) and Art. 6 (1) (f) GDPR (answering inquiries).

The form is delivered to us by email through Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which also sends you a confirmation email. Resend processes the data on our behalf under a data processing agreement. Transfers to the USA are based on Standard Contractual Clauses (Art. 46 GDPR). If the form cannot be delivered, your email program opens with a prepared message instead; in that case only your own email provider is involved.

5. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process the data you give us to handle your request (Art. 6 (1) (b) and (f) GDPR). If you contact us through WhatsApp, WhatsApp Ireland Limited (Meta) also processes your data under its own privacy policy; please use email or phone if you do not want this.

6. Cloudflare Web Analytics

We use Cloudflare Web Analytics (Cloudflare, Inc., see section 3) to count page views and measure page load performance. Your browser loads a script from static.cloudflareinsights.com, which reports the visited page, referrer, browser type and load timings. The service sets no cookies, stores nothing on your device, does not fingerprint visitors and does not build user profiles; we see only aggregated statistics. Your IP address is processed by Cloudflare to deliver the script but is not used for the statistics. The legal basis is our legitimate interest in understanding how our website is used and keeping it fast (Art. 6 (1) (f) GDPR). You can object at any time (section 8), for example by blocking the script in your browser.

7. Storage period

We delete inquiry data when it is no longer needed for its purpose — usually within 12 months if no contract follows. If a contract follows, statutory retention periods under commercial and tax law apply (up to 10 years, § 257 HGB, § 147 AO).

8. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15),
  • rectification (Art. 16) and erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21),
  • withdraw any consent you gave, with effect for the future (Art. 7 (3)).

To use these rights, email [email protected].

9. Right to lodge a complaint

You can complain to a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Am Wall 153–156, 28195 Bremen.

10. Changes

We update this policy when our website or the law changes. The current version is always available on this page.

Digital studio

Websites, e-commerce, landing pages and apps — designed and engineered to sell.

Bürgermeister-Smidt-Straße 116
28195 Bremen, Germany
Explore Work Services Capabilities Process Contact
Connect [email protected] +49 1522 2002210
Legal Impressum Privacy policy Terms
DEVSTUDIOCRAFT.
© 2026 DevStudioCraft — a brand of M2A Group, operated by M2A Facility Management GmbH. Made in Bremen — shipping worldwide.