Privacy Policy
Last updated:
This Privacy Policy explains what personal data we process when you visit our website or contact us, the purposes for which we process this data, and the rights you have in relation to your personal data.
Personal data refers to any information that identifies you or can be used to identify you as an individual.
Our website does not use cookies for analytics or marketing purposes. We use Framer Analytics to gain privacy-conscious insights into how our website is used. In addition, certain technical data is processed when you access our website, and personal data is processed when you contact us by email or telephone. Our website also contains standard links to social media platforms.
Data Controller
The controller responsible for processing personal data on this website is:
glance.design GmbH & Co. KG
Basler Straße 163
79539 Lörrach
Germany
Phone: +49 7621 42204620
Email: hello@glance.design
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
Website Hosting and Technical Access Data
Our website, glance.design, is hosted by Framer. The service provider is Framer B.V., based in the Netherlands (hereinafter referred to as "Framer").
Framer provides the technical infrastructure required to store our website and deliver its content to your browser.
When you access our website, Framer automatically processes certain information transmitted by your browser. This includes, in particular:
IP address
Date and time of access
Page or file requested
Referrer URL (the previously visited website)
Browser type and version
Operating system used
This data is necessary to display our website, ensure its stability and security, and detect potential misuse or cyberattacks. We do not combine this information with data from other sources.
The legal basis for this processing is Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest lies in providing a secure, reliable and technically functional website.
Technical access data is processed for as long as necessary to operate the website, troubleshoot technical issues and maintain security. In the event of a security-related incident, data may need to be retained for a longer period to investigate and prevent potential threats. Once it is no longer required, the data will be deleted unless statutory obligations require otherwise.
Framer processes personal data on our behalf under a data processing agreement in accordance with Article 28 GDPR.
Framer uses subprocessors for hosting and network infrastructure. As a result, personal data may also be processed outside the European Union (EU) or the European Economic Area (EEA).
For further information about the conditions governing such transfers, please refer to the section "Data Recipients, Retention Periods and Provision of Data".
Further information is available in Framer's Privacy Statement:
https://www.framer.com/legal/privacy-statement/
Website Analytics with Framer Analytics
We use Framer's integrated analytics functionality to better understand how visitors interact with our website. This includes insights into which pages are viewed, where visitors come from and which types of devices are used.
According to Framer, Framer Analytics operates without cookies or persistent user identifiers.
To count unique visitors on a daily basis, Framer generates a hash value on the server using the visitor's IP address and browser identifier, together with a key that changes and is deleted daily.
The IP address is also used to estimate the visitor's country and, according to the provider, is not stored in Framer Analytics.
We receive statistical reports about website usage. We do not intend to identify returning visitors across multiple days or create personal user profiles.
As a precaution, we treat the initial processing of IP addresses and browser identifiers as the processing of personal data.
Where personal data is processed, the legal basis is Article 6(1)(f) GDPR.
Our legitimate interest is to analyse website usage in a data-minimising manner in order to improve our content, website structure and user experience.
Processing is limited to these statistical purposes.
For information about your right to object, please refer to the section "Your Rights".
Further technical information provided by Framer is available at:
https://www.framer.com/help/articles/gdpr-and-cookies/
Fonts
The fonts used on this website are delivered via Framer's servers.
When these fonts are loaded, no connection is established to servers operated by Google or other font providers.
Cookies
Our website does not use cookies for analytics, marketing or advertising purposes.
Framer's integrated website analytics operates without cookies or persistent user identifiers.
Where information is stored on or accessed from your device and this is strictly necessary to provide a digital service you have expressly requested, consent is not required under Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Any associated processing of personal data is based on Article 6(1)(f) GDPR, insofar as such processing is necessary to ensure the secure and functional operation of our website.
For any additional storage or access activities that require consent, we will obtain your consent in advance in accordance with Section 25(1) TDDDG and, where applicable, Article 6(1)(a) GDPR.
You can configure your browser to notify you when cookies are being set or to reject cookies altogether.
Contacting Us by Email or Telephone
If you contact us by email or telephone, we process the information you provide, particularly your name, email address, telephone number and the content of your enquiry, in order to handle your request and respond to you.
Clicking an email or telephone link on our website opens the corresponding application on your device. Simply clicking such a link does not transmit a message to us.
For email communication, we use Microsoft 365, particularly Exchange Online.
The service provider is:
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18, D18 P521
Ireland
In providing and securing the email service, Microsoft processes information including sender and recipient addresses, message content, attachments, and technical transmission and security data.
The processing of personal data on our behalf is governed by the Microsoft Products and Services Data Protection Addendum (DPA), in accordance with Article 28 GDPR.
Processing by affiliated companies or subprocessors outside the EU or EEA cannot be ruled out.
For further details, please refer to the section "Data Recipients, Retention Periods and Provision of Data".
Additional information is available at:
https://privacy.microsoft.com/en-us/privacystatement
The legal basis for processing your data is Article 6(1)(b) GDPR if your enquiry relates to an existing contract or is necessary to take steps prior to entering into a contract, such as when you contact us about a potential project.
In all other cases, processing is based on our legitimate interest in effectively handling and responding to enquiries addressed to us, pursuant to Article 6(1)(f) GDPR.
We delete the personal data associated with your enquiry once your request has been fully addressed and the data is no longer required for this purpose.
Data may be retained for a longer period where statutory retention obligations apply or where it is necessary for the establishment, exercise or defence of legal claims.
Processing required to comply with statutory retention obligations is based on Article 6(1)(c) GDPR.
Requests for deletion are assessed in accordance with applicable legal requirements and do not necessarily result in immediate deletion in every case.
Links to Social Media Platforms
Our website contains standard links to our profiles on social media platforms, such as Instagram and LinkedIn.
We do not use social media plugins or embedded social media feeds.
Simply displaying these links does not establish a connection to the respective social media platforms.
If you click on one of these links, the social media provider will, for technical reasons, receive certain information, particularly your IP address and potentially additional browser and referrer information.
If you are logged in to the respective platform, the provider may be able to associate your visit with your user account.
Any subsequent processing of personal data is governed by the privacy policy of the respective social media provider.
This Privacy Policy covers the links provided on our website. Data processing that takes place when you visit our profiles on these platforms must be assessed separately.
Encryption and Data Transmission Security
Our website uses HTTPS with TLS encryption.
You can recognise an encrypted connection by the "https://" prefix in your browser's address bar.
Encryption helps protect data transmitted between your browser and our website.
For email communication, the level of protection also depends on the email systems involved. Standard email communication does not automatically provide end-to-end encryption.
Please note that data transmission over the internet, including email communication, may be subject to security vulnerabilities.
Complete protection against unauthorised access by third parties cannot be guaranteed.
Data Recipients, Retention Periods and Provision of Data
Recipients of personal data
Personal data may be accessed by authorised employees within our company who are responsible for handling the relevant matters, as well as by service providers whose involvement is necessary.
These include, in particular:
Framer, for website hosting and visitor analytics
Microsoft, for email communication
Personal data may also be disclosed to other recipients where necessary for the performance of a contract, required by law or permitted under another applicable legal basis.
Such recipients may include public authorities or professional advisers who are subject to confidentiality obligations.
We engage data processors in accordance with Article 28 GDPR.
International data transfers
When using Framer and Microsoft, personal data may be transferred to affiliated companies or subprocessors located outside the EU or EEA, particularly in the United States.
Such transfers are subject to the requirements of Articles 44 et seq. GDPR.
Transfers may be based on a valid adequacy decision under Article 45 GDPR or on appropriate safeguards under Article 46 GDPR, particularly the European Commission's Standard Contractual Clauses and, where necessary, supplementary protective measures.
Transfers may rely on the EU-US Data Privacy Framework only where the specific US recipient holds a valid certification and the relevant processing activities are covered by that certification.
You may request information about the safeguards applicable to a particular transfer, as well as a copy of those safeguards, using the contact details provided above.
Data retention
Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary to fulfil the purpose for which it was collected.
The data will subsequently be deleted unless statutory retention obligations require continued storage.
Where such obligations apply, deletion will take place once the applicable retention periods have expired.
Provision of personal data
You are not legally or contractually required to actively provide personal data simply to visit our website.
However, certain technical access data is necessary to deliver the website to your browser.
Contacting us is voluntary. If you do not provide the information required to process your enquiry, we may be unable to respond to your request.
Automated decision-making
We do not engage in automated decision-making, including profiling, within the meaning of Article 22 GDPR.
Your Rights
Under applicable data protection law, you have the following rights, subject to the relevant legal requirements:
Right of access (Article 15 GDPR): You have the right to obtain information about the personal data we process concerning you, including its origin, the recipients of the data and the purposes of processing.
Right to rectification (Article 16 GDPR): You have the right to request the correction of inaccurate personal data.
Right to erasure (Article 17 GDPR): You have the right to request the deletion of your personal data.
Right to restriction of processing (Article 18 GDPR): You have the right to request that the processing of your personal data be restricted.
Right to data portability (Article 20 GDPR): You have the right to receive personal data that we process automatically on the basis of your consent or a contract in a commonly used, machine-readable format.
Right to object (Article 21 GDPR): You have the right to object to certain types of processing of your personal data, as explained below.
Withdrawal of consent
Where the processing of personal data is based on your consent, you have the right to withdraw that consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn (Article 7(3) GDPR).
For any questions regarding data protection or to exercise your rights, you may contact the data controller using the contact details provided above.
Right to Object under Article 21 GDPR
Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.
Where your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
If you object to processing for direct marketing purposes, your personal data will no longer be used for those purposes.
Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR.
You may do so, in particular, in the EU Member State of your habitual residence, your place of work or the place of the alleged infringement.
The supervisory authority responsible for our company is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Germany.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our website or applicable legal requirements.
The version published on this page at any given time shall apply.
Last updated: 5 November 2026