Privacy notice

1. Data controller

The controller is Melise Sakar, Draft Studio M – Technical Drafting Office. The full business address is provided in the legal notice. For privacy requests, email draftstudiom@gmail.com or call +49 157 50745386.

2. Website access and hosting

This website is provided through OpenAI Sites using Cloudflare infrastructure. Visiting the website involves processing technical connection data, including IP address, access time, requested URL, browser and device information, and technical error and security data. This supports the availability, stability and security of the website. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in operating a secure business website.

Contact form information is stored in a database; uploaded files are stored in non-public object storage within the hosting infrastructure. Technical service providers may have access in the course of providing their services. Depending on the deployment, processing may take place outside the EU or EEA. The applicable contractual, transfer and retention terms of the hosting providers govern the public operation of the site.

Further information: OpenAI privacy information and Cloudflare privacy information.

3. Contact form and project enquiries

We process the information you submit: company, contact name, email address and, where supplied, phone number, required service, timeframe and project description. Your name, email address and a short project description are required. Company, phone number, service, timeframe and files are optional. The form cannot be submitted without the required information; you can contact us by email or telephone instead.

We use this information to respond to your enquiry, prepare a proposal and coordinate the project. Article 6(1)(b) GDPR applies to pre-contractual steps and performance of a contract. For enquiries made on behalf of a company and other business communications, processing is based on Article 6(1)(f) GDPR and our legitimate interest in handling business correspondence. We do not use enquiries for advertising or automated decision-making.

Once the sending account is configured, Resend is used for automated email notifications and acknowledgements. Recipient and sender addresses and the necessary message contents are passed to the email provider. Project files remain in the protected enquiry inbox. Further information: Resend privacy information.

4. File uploads

You may submit project documents. We store their contents, filenames, file sizes and types, and their association with your enquiry. Files are not publicly accessible. Only submit necessary documents that you are authorised to share. Remove unrelated personal names, addresses and other personal information before uploading. Special-category data, such as health information, is not required for project enquiries.

Documents are processed for the same purposes and under the same legal bases as the associated enquiry. To prevent form abuse, a daily hash is derived from the connection address; the application does not store the raw IP address for this purpose. These limited security records are cleared after two days when the form is used again. The legal basis is Article 6(1)(f) GDPR.

5. Email, telephone, WhatsApp and Instagram

When you contact us by email or telephone, we process your contact details and correspondence to respond to your request. Gmail is used for email. Please also refer to Google’s privacy policy for the email provider’s processing.

WhatsApp and Instagram are included only as external links. Visiting this website does not load embedded content from those services. A connection to the relevant provider is established only when you open its link. If you communicate through these services, their privacy policies also apply: WhatsApp and Instagram. Email and telephone are available as alternatives.

6. Cookies, analytics and external content

This website has no first-party analytics, marketing or tracking tools. Fonts and project images are served without external font or image providers. Access to a protected draft and the protected enquiry inbox may involve technically necessary sign-in and security features of the hosting platform. No consent to advertising tracking is required.

7. Retention

Enquiries and files are retained only as long as necessary to handle the enquiry, deliver a subsequent project or protect legitimate interests. They are deleted when no longer needed, unless retention duties or the establishment, exercise or defence of legal claims require otherwise. Technical log retention is also subject to the applicable operational and deletion rules of the hosting providers.

8. Your rights

Subject to the legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you can withdraw it for the future. Where processing relies on legitimate interests, you can object on grounds relating to your particular situation.

You may also lodge a complaint with a data protection supervisory authority. The authority in Saarland is the Independent Data Protection Centre Saarland: www.datenschutz.saarland.de.

Last updated: October 2026