Privacy policy
Controller
K+R Studios GbR (brand Clayrified)
Lindenstraße 3, 21435 Stelle, Germany
Email: contact@clayrified.com
Partners: see legal notice
Hosting
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When you visit it, Cloudflare processes technically necessary data such as your IP address, the time of access, the page requested and your browser identifier in order to deliver the website and protect it against attacks. The legal basis is our legitimate interest in operating the website securely and quickly (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, which safeguards the transfer to the USA (Art. 45 GDPR). We have concluded a data processing agreement with Cloudflare.
No tracking
This website does not use analytics tools from other providers and does not load content from other providers. Fonts and images are hosted on our own server. We measure reach ourselves and without cookies (see below). We only set a cookie if you take part in a vote (see below).
Links to TikTok, Instagram and YouTube
If you tap one of these links, you leave our website. The privacy policy of the respective provider applies there.
If you write to us, we process your details in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR) and delete them when they are no longer needed and no retention obligation applies.
Emails to our addresses are received and stored by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace). We have concluded a data processing agreement with Google. A transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).
Contact form
If you use our contact form, we process your name, email address and message in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Your details are stored in our database at Cloudflare (Cloudflare D1, storage location EU) and we answer you by email; the same rules as above apply. So that nobody can send the form in bulk, our server keeps shortened check values (HMAC) of the network, the email address and the message for 24 hours; neither the IP address nor the email address or the text can be derived from them. If the same message arrives again or too many arrive at once, we discard it. The legal basis is our legitimate interest in protection against misuse (Art. 6(1)(f) GDPR).
Course waitlist and newsletter
If you sign up for our waitlist at clayrified.com/waitlist, we process your email address, the time of sign-up and your confirmation in order to send you the free PDF, early access to our course and news about our courses and products by email. The legal basis is your consent (Art. 6(1)(a) GDPR). You only receive emails after you have confirmed your address with the link in our first email (double opt-in). Every email contains a link to unsubscribe; you can also withdraw your consent at any time by emailing contact@clayrified.com. We send these emails with Kit (Kit, Inc., formerly ConvertKit, USA), which processes the data on our behalf under a data processing agreement. Data is transferred to the USA; Kit is certified under the EU-U.S. Data Privacy Framework and the agreement also includes the EU standard contractual clauses. Kit records whether emails are opened and links are clicked so that we can see which emails are useful. We delete your data when you unsubscribe; we keep only the proof of your consent for three years so that we can defend ourselves against claims (Art. 6(1)(f), Art. 17(3)(e) GDPR).
Earlier course waiting list
If you sign up on our homepage for the waiting list of our course, we process your name, email address and the time of sign-up in order to let you know once when the course starts. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future, for example by emailing contact@clayrified.com. As with the contact form, your details are stored in our database at Cloudflare (Cloudflare D1, storage location EU). We delete them as soon as we have informed you about the start of the course or you withdraw your consent. We keep only the proof of your consent (email address and time of sign-up) for three years afterwards, so that we can defend ourselves against claims (Art. 6(1)(f), Art. 17(3)(e) GDPR).
Reach measurement without cookies
We count how often our pages are visited and how often our short links (for example to the shop, course, TikTok, Instagram and YouTube) are tapped. For this, our server increases a counter in our database at Cloudflare (Cloudflare D1, storage location EU) with every visit. A counter covers one day and combines all visits with the same details: the page or link target, the rough origin (for example Instagram, TikTok, a search engine or direct), the device type (phone or desktop), whether the page was opened in a social network's app, and the country. For taps on short links we also keep a counter per hour of the day (German time) and link target, without any further details. We do not store your IP address, your browser identifier or an identifier of your device. We do not set cookies and do not store anything on your device. The counters cannot be attributed to any person and cannot be linked across several visits. The server evaluates the IP address and browser identifier only at the moment of the visit in order to determine the country, device type and origin and to filter out visits by robots. The legal basis is our legitimate interest in understanding the reach and effect of our posts (Art. 6(1)(f) GDPR). Only we can see the evaluation, on a non-public page after logging in with a password. For this, after logging in we set a cookie for ourselves that keeps the login active for seven days; other visitors do not receive it. To protect against password guessing, the server remembers a heavily shortened check value of the network for 15 minutes for login attempts, from which no IP address can be derived.
Votes and ideas
If you suggest names for our characters or vote on our homepage, we store your suggestions and your vote in a database at Cloudflare with storage location in the EU (Cloudflare D1). So that each person votes only once, we then set a cookie with a random number. It contains no personal details and expires after one year. The cookie is strictly necessary for the vote you requested (Section 25(2) No. 2 TDDDG). So that a second vote from the same device is noticed even without the cookie, we also create a check value (hash) from your IP address and your browser identifier using a secret key and store it with your vote. We do not store your IP address itself. We delete the check value as soon as the vote has ended. The legal basis is our legitimate interest in a fair vote (Art. 6(1)(f) GDPR).
If you send us an idea for a story, we store the idea and, if you provide it, your name or Instagram name in the same database. We use this to evaluate the ideas and to credit you if we use your idea. The legal basis is our legitimate interest in shaping our stories together with our audience (Art. 6(1)(f) GDPR) and, for the voluntary name, your consent (Art. 6(1)(a) GDPR). We delete suggestions, votes and ideas no later than twelve months after receipt. To prevent bulk submissions, our server also keeps a shortened check value of the network for 24 hours, from which no IP address can be derived.
Shop
Our shop at shop.clayrified.com is operated by Fourthwall, Inc., PO Box 5696, Santa Monica, CA 90405, USA. Fourthwall acts as the seller there and handles payment. If you visit the shop or order there, Fourthwall processes your data under its own responsibility in accordance with its privacy policy (fourthwall.com/privacy-policy); data is transferred to the USA in the process. Fourthwall shows us the details of your order, for example name, email address, delivery address and items ordered. We use them to answer questions about your order and to send you updates to the lessons you bought (Art. 6(1)(b) GDPR), to clarify chargebacks and defend ourselves against claims (Art. 6(1)(f) GDPR) and to meet retention duties (Art. 6(1)(c) GDPR). We only send you marketing if you agreed to it in the shop.
Contacting companies about collaborations
Who: K+R Studios GbR (Clayrified), Lindenstraße 3, 21435 Stelle, Germany, contact@clayrified.com.
What: business contact details (name, role, business email address, company) from public sources such as company websites, and our correspondence with you.
Why: to propose a collaboration to your company. The legal basis is our legitimate interest in business development (Art. 6(1)(f) GDPR).
How long: as long as we are in contact. Without a reply we delete your details after six months. If you object, we keep only your email address on a blocklist so that we never contact you again.
Your rights: access, rectification, erasure, restriction and objection at any time (Art. 15 to 21 GDPR): simply reply “no” or write to contact@clayrified.com. You can also lodge a complaint with a supervisory authority; for us this is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen).
Recipients: emails are received and stored by Google Workspace (Google Ireland Limited), see “Email” above. We do not sell or share your details.
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
This is an English translation. The German version (Datenschutzerklärung) is authoritative.