Privacy
In short: no cookies for visitors, no tracking, no ads. I only store data when you write to me, send a briefing or request an appointment.
1. Controller
Leo Köppen, Address, Leipzig. Email: hello@firstpersonstudio.com
2. Hosting
This site is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit, Netlify processes technically necessary data (IP address, time, requested address, browser) in server logs in order to deliver the site and protect it from abuse. The legal basis is my legitimate interest in secure, fast operation (Art. 6(1)(f) GDPR). Netlify is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.
3. No cookies, no tracking
I don’t set any cookies for visitors and don’t use any analytics, advertising or social media services. Fonts and all files are on my own server; no content is loaded from Google or other providers. Your browser’s local storage only holds a briefing you’ve started, so you can pick it up again later; it only leaves your device when you send it. You can delete it at any time with “Start over” or in your browser settings.
4. Briefing, appointments and files
When you fill in the briefing or request an appointment, I process your details (name, email, optionally phone, your answers, uploaded files and the time of your consent) in order to answer your request and prepare a quote. The legal basis is pre-contractual measures (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. The data is stored in Netlify Blobs. If no commission results from the request, I delete it after 180 days at the latest; if it does, the statutory retention periods apply.
5. Sending emails
I send confirmations and notifications via Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). This involves processing the recipient address and the content of the email. This is based on standard contractual clauses. Legal basis as under 4.
6. Spam protection
To protect against automated requests, I limit the number of requests per IP address for a short time. For this, the IP address is stored for no more than one hour (Art. 6(1)(f) GDPR).
7. External links
Links to my work open other people’s websites. A connection to their servers is only made when you click; their privacy policies apply there.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw any consent you have given at any time with effect for the future. An email to hello@firstpersonstudio.com is enough. You can also lodge a complaint with a data protection supervisory authority, for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).
Last updated: October 2026