Who is responsible
Yunlong RaoYulunoFerdinandstrasse 3033102 Paderborn · GermanyContact email[email protected]WhatsApp · +49 179 1699342Yunlong Rao is the contact for questions and requests concerning the personal information described on this page.
Website visits and hosting
Delivering a website requires technical information such as your IP address, requested resource, access time and browser information. A hosting provider may also process security and error records. Where applicable, the legal basis is Article 6(1)(f) GDPR: the legitimate interest in providing a reliable and secure website.
The website is hosted on Cloudflare Pages and delivered and protected by the global network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare processes connection and access data to deliver pages, detect attacks and investigate faults. Processing may take place in countries outside the EEA, including the United States.
Project enquiries and email
The enquiry form asks for your name, email address and project details. Your preferred package and timing are optional.
The current form prepares enquiry details in your browser for you to send through your email application. The website does not deliver enquiries through its own server or store them in a website database.
Choosing Email prepares a message in your email application. If you choose Open Gmail, the recipient, subject and prepared message are passed to Google to open a Gmail draft. We receive the email after you send it in the selected application. Your email provider processes information under its own policies.
After an external handoff, the fields remain on the current page. The website does not persist them in cookies or browser storage. The prepared text is written to your clipboard only when you choose the copy action.
After receipt, we use the message to answer you, clarify requirements and prepare an offer. For enquiries about your own prospective contract, the GDPR basis is Article 6(1)(b). For other enquiries, including contact persons acting for a company, it is Article 6(1)(f), based on the legitimate interest in communicating about requested services. Information needed for legal duties is processed under Article 6(1)(c).
Please provide only information needed to discuss the project. Do not include passwords, identity documents or sensitive personal information in an initial enquiry. We do not add enquiry contacts to a marketing list. Correspondence stays in the mailbox or WhatsApp channel used; we do not separately import it into a CRM, cloud drive or AI tool.
WhatsApp and telephone enquiries
You may choose to contact us through the WhatsApp link. It opens an external chat without sending a message or passing enquiry-form contents to WhatsApp. No WhatsApp chat plugin is embedded; the link does not cause requests to WhatsApp unless you follow it. You can also contact us by email.
We process the phone number, display name, messages and attachments you provide to answer your enquiry and discuss the project. The legal bases are the same as for email enquiries. Project details provided during a call are also used for the requested communication.
In the European region, the service is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp separately processes account, device, connection and usage information and may process data in countries including the United States. Its privacy policy explains applicable adequacy decisions, standard contractual clauses and retention rules. We delete unsuccessful enquiries we hold under the six-month rule below; WhatsApp’s own technical records follow its policy.
How long information is kept
Enquiries that do not lead to a project are deleted from the business mailbox, WhatsApp conversations and copies we retain within six months of the last substantive contact, unless continued discussions, a legal duty or a concrete legal claim requires longer retention. We periodically review and delete correspondence under this rule.
Contract and accounting records are retained for the statutory period applicable to each record. Information needed for a legal dispute is restricted to that purpose and retained only as long as necessary. Provider technical records and backups are retained as needed for delivery, system recovery, troubleshooting, security or legal obligations. The links below describe each provider’s published periods and retention criteria. Deleting our copy of an enquiry does not immediately delete all technical records retained by providers for these purposes or legal duties.
Service providers and international processing
Hosting, email and communication providers process information to supply their respective services. Accountants, advisers or authorities receive information only where necessary for their task or a legal obligation.
Our business mailbox, [email protected], uses Apple’s iCloud Mail, which processes email addresses, message contents and attachments. For our German account, the provider is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. Apple operates globally and may process data outside the EEA. Its privacy policy explains the standard contractual clauses used for European data transfers and how to obtain a copy.
Cloudflare’s Data Processing Addendum describes processing on behalf of customers and applicable international transfer safeguards, including standard contractual clauses. Cloudflare and Apple publish their processing purposes, retention criteria, recipients and rights-request channels at the links below. Google Analytics is covered in the next section; WhatsApp is covered in the contact-channel section.
Google Analytics and optional cookies
We use the standard version of Google Analytics 4 to understand traffic sources, page views, device and browser types, approximate regions, enquiry clicks. The production website loads Google's analytics script only after you accept optional cookies. It does not load before a choice or after rejection, and earlier visits and actions are not replayed after consent.
Analytics may use a randomly generated browser identifier, timestamps and session information. Page addresses are limited to known pages and selected campaign parameters; query strings and fragments are removed from referrers. We do not send names, email addresses, phone numbers or enquiry text as analytics events. Google Signals, advertising personalization, cross-device User-ID and enhanced user-provided data collection are disabled. No advertising account is currently connected.
Optional device storage and access rely on Section 25(1) TDDDG; the corresponding processing of personal data relies on your consent under Article 6(1)(a) GDPR. Rejection or withdrawal does not affect the website or enquiry functions. Google event- and user-level data retention is set to two months, with the reset on new user activity disabled. These settings do not apply to most aggregate reports. Browser cookie expiry is listed separately below.
Google processing and international transfers
The service is provided by Google Ireland Limited, Ireland. Google LLC in the United States and subprocessors may also process data. Requests to Google servers transmit communications data such as an IP address; this processing is not described as fully anonymous or confined to Germany.
Google's Data Processing Terms govern processing on our behalf. Google's published transfer arrangements include the applicable EU–US Data Privacy Framework adequacy decision and standard contractual clauses where required for transfers not covered by an adequacy decision. The links below explain its processing, transfer mechanisms and safeguards. We have accepted the applicable Google service and data-processing agreements.
Other cookies and embedded content
The website remembers your cookie choice in your browser as described in the Cookie policy. Enquiry fields are not persisted in cookies or browser storage. There are currently no advertising pixels, newsletters, customer accounts, embedded social feeds or remotely loaded Google Fonts.
Following an external link takes you to another provider's service and privacy policy. Hosting security features and any necessary cookies they use depend on the actual deployment configuration.
Your rights
Subject to the applicable conditions, you may request access, correction, erasure, restriction and portability of your personal information. You may withdraw consent at any time without affecting the lawfulness of earlier processing. There is no automated decision-making with legal or similarly significant effects in this enquiry process.
Where processing relies on legitimate interests, you may object for reasons relating to your particular situation. An objection to direct marketing does not require such reasons. Contact us at the address above to exercise your rights; only proportionate verification information will be requested.
You can complain to a supervisory authority, including the authority where you live or work. The authority for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).
Updates
This policy will be updated when the website’s functions, providers or processing arrangements change. The revision date appears at the top of the page. Material changes will be communicated as required by applicable law.