Fjordvarg-Design · Updated: 18 October 2026

Privacy Policy

1. Controller

Ricardo Figelius · Fjordvarg-Design
Am Bahnhof 3
04936 Hohenbucko, Germany
Email: fjordvarg-design@mail.de

2. Provision of this website

This website is hosted using Cloudflare Pages. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, processes technical connection data required to provide the website. This may include IP address, requested URL, time of access, browser information and technical error data. The processing helps deliver content, maintain stability and prevent attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. The site cannot be displayed without transmitting the necessary connection data.

Cloudflare operates an international network. Data may therefore be processed outside the European Union or European Economic Area, including in the USA. Cloudflare's data processing terms include, among other things, EU standard contractual clauses for relevant transfers. Details are available in Cloudflare's Data Processing Addendum and Cloudflare's Privacy Policy.

Technical data is processed only for as long as necessary to provide the website, ensure its security and, where appropriate, investigate disruptions. Storage by the hosting provider also depends on its service-specific terms; we do not maintain a separate visitor database ourselves.

3. When you email us

When you write to us, we use your email address, your name if you provide it, your message and any attachments to respond to your enquiry. Clicking the email button opens your email application; it does not automatically send a message. We use our mail.de mailbox to receive and send email.

For enquiries about a possible order, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, it is Art. 6(1)(f) GDPR and our legitimate interest in replying. Providing this information is voluntary, but we cannot respond without a contact address.

Enquiries are deleted once they have been dealt with and no further storage is necessary. Where statutory retention obligations apply or data is required to establish, exercise or defend legal claims, it will be retained for that purpose and deleted afterwards.

4. Facebook link

Our website includes a normal link to our Facebook page. We do not embed a Facebook plugin or Facebook content. Merely loading this website does not establish a connection to Facebook through that link. If you follow it, Facebook processes data under its own privacy policy. This notice applies to our website; the platform operator's notices also apply to your use of Facebook.

5. Cookies, fonts and analytics

We use Cloudflare Web Analytics to evaluate page views and technical performance information. Cloudflare may automatically insert a JavaScript measurement script (beacon) when delivering the website. According to Cloudflare, Web Analytics does not collect visitors' personal data and does not need analytics cookies. We do not set advertising or tracking cookies ourselves. In our assessment, the legal basis for this audience and performance analysis is Art. 6(1)(f) GDPR (our interest in improving the website and operating it securely). Images are served from our own hosting; no external font services are embedded. Section 2 explains Cloudflare and possible international transfers. See Cloudflare Web Analytics information.

We have also prepared an optional public page-view counter. Once enabled, opening our homepage increments an anonymous aggregate count stored in Cloudflare D1. Our counter table stores only the total number of page views, not individual visitor profiles, IP addresses or cookies. A page view does not represent a distinct person. Until the counter is enabled, no number is shown.

6. Your data protection rights

Where the statutory requirements are met, you have rights to access, rectification, erasure, restriction of processing and data portability. Where processing is based on consent, you may withdraw it at any time with effect for the future.

Objection: If processing is based on Art. 6(1)(f) GDPR, you may object for reasons relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds or processing is required for legal claims. You can contact us at the email address above.

You may complain to a data protection supervisory authority, in particular where you live or where you believe an infringement occurred. The authority responsible for our registered location is the Brandenburg State Commissioner for Data Protection and Access to Information (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany. See www.lda.brandenburg.de.

7. Automated decisions

We do not use automated decision-making with legal or similarly significant effects and do not engage in profiling on this website.

This is an English translation for convenience. For the original German wording, see our Datenschutzerklärung.

Customer accounts and saved previews

When a customer creates an account, we store their email address and password hash (PBKDF2 with an individual salt), but never their plain password. A technically necessary, secure, HttpOnly session cookie is used for login (valid for up to seven days).

Saved design settings (selected product, artwork and optional texts) are kept in Cloudflare D1. Saved preview PNG images are kept in a private Cloudflare R2 bucket, accessible only through the signed-in account. An uploaded original photo is not separately saved; it may be visible in the saved preview. Records remain until deleted by the user or the account is removed.

Providing an account and saving a chosen design is based on Article 6(1)(b) GDPR where necessary for the requested service. Cloudflare may process technical data internationally as described above. To request account deletion, contact us by email. Before launch, these details and any international transfers must be legally checked.