Datenschutzerklärung

1 · Controller (Verantwortlicher)

The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:

Christoph Hellmuth · Design Engineering Studio
Nuremberg, Germany (see Impressum for full postal address)
Email: post@christophhellmuth.com

2 · Hosting & Server Log Files

When you visit this website, our hosting provider automatically collects and stores technical access data in server log files that your browser transmits automatically:

• IP address of the requesting device (anonymized or truncated after a short retention period)
• Date and time of the request, requested URL, and HTTP status code
• Referrer URL and browser/operating system user-agent string

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure, stable, and error-free delivery of this website). Log files are not merged with other data sources and are deleted automatically after 7–14 days.

3 · Cookies, Local Storage & Consent Management (§ 25 TDDDG)

This website follows strict privacy by default. No tracking cookies or third-party scripts are loaded when you visit the site unless you explicitly opt in.

Strictly Necessary Storage (§ 25(2) TDDDG, Art. 6(1)(c)/(f) GDPR)

• studio-consent (localStorage, 12 months): Stores your cookie consent decision, version, and timestamp so you are not prompted on every page view.
• theme (localStorage, until cleared): Stores your explicit light/dark mode preference if you toggle the theme control.

Optional Categories (Art. 6(1)(a) GDPR, § 25(1) TDDDG)

Optional Analytics and External media remain disabled by default and are only activated if you grant consent via the banner or the preferences modal. You can review, change, or withdraw your consent at any time with future effect (Art. 7(3) GDPR) by clicking Cookie settings here or in the footer of every page.

4 · Self-Hosted Web Fonts

For consistent typography, this website uses the open-source typefaces Merriweather, Cabin, Inter, Archivo, Lora, and JetBrains Mono. All font files (.woff2) are self-hosted locally on our own web server (/fonts/). When you open a page, your browser makes no connection to Google Fonts servers (fonts.googleapis.com / fonts.gstatic.com), and no IP address is transmitted to Google.

5 · Interactive Health Check & Audit Checklist

The 6-question Design System Health Check on the home page and the interactive 40-Point Audit Checklist run entirely in your browser using client-side JavaScript. Your answers and scores are calculated locally on your device and are never transmitted to a server.

6 · Contact Form, Direct Email & Lead Magnet Checklist Opt-In

Contact Inquiries & Consultation Requests

When you contact us via the contact form or by email (post@christophhellmuth.com), we process the data you provide (name, work email, company, and message) solely to respond to your inquiry and prepare or perform pre-contractual measures.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual inquiries in B2B contexts) and Art. 6(1)(a) GDPR (your explicit consent via the form checkbox). We delete inquiry data once it is no longer required, subject to statutory commercial and tax retention periods (6 to 10 years under § 147 AO / § 257 HGB).

40-Point Audit Checklist Opt-In ("Get the checklist")

When you request the 40-Point Design System Audit Checklist and opt in to studio updates, we process your name, work email, and optional company name based on your explicit consent (Art. 6(1)(a) GDPR). You can withdraw your consent and unsubscribe at any time by replying to any email or messaging post@christophhellmuth.com.

7 · Your Rights under the GDPR (Betroffenenrechte)

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Request confirmation and a copy of the personal data we process about you.
• Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): Request deletion of your personal data where no statutory retention obligation applies.
• Right to restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).
• Right to withdraw consent (Art. 7(3) GDPR): Withdraw any consent given at any time with effect for the future.
• Right to object (Art. 21 GDPR): Object to processing based on legitimate interests (Art. 6(1)(f) GDPR).
• Right to lodge a complaint (Art. 77 GDPR): You have the right to complain to a data protection supervisory authority. The competent authority for Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de).