Privacy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

INCE Studio, owner Abdullah Ince Elfriede-Bial-Straße 1 40476 Düsseldorf Germany Email: hello@byince.com

We are not legally required to appoint a data protection officer and have therefore not done so. If you have any questions about data protection, you can contact us at any time using the details above.

We only process personal data if one of the following legal bases permits it:

• Art. 6 (1) (a) GDPR: you have given your consent.
• Art. 6 (1) (b) GDPR: processing is necessary for a contract or pre-contractual measures, such as answering a project inquiry.
• Art. 6 (1) (c) GDPR: we are legally obliged to process the data, for example due to retention obligations under tax and commercial law.
• Art. 6 (1) (f) GDPR: processing is necessary to protect our legitimate interests and your interests do not override them, for example for the secure and stable operation of this website.

Storing information on your device or accessing it is additionally governed by Section 25 of the German Telecommunications and Digital Services Data Protection Act (TDDDG).

This website is run on Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare provides the servers, a global content delivery network, the domain's name resolution and protection against attacks. When you visit the website, your request is sent to a Cloudflare data center, usually at a location near you, where the page is generated and delivered. The store files and cached content such as the weather data are also stored with Cloudflare. They contain no information about you.

We have a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare processes the data only on our instructions. As Cloudflare is based in the USA, a transfer of personal data to the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision pursuant to Art. 45 GDPR. In addition, Standard Contractual Clauses of the European Commission pursuant to Art. 46 GDPR are in place.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the website quickly, securely and reliably. For more information, see Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Each time the website is accessed, the server automatically records information transmitted by your browser:

• IP address
• date and time of the request
• page or file requested
• referrer URL, i.e. the previously visited page
• browser type and version, operating system
• HTTP status code and amount of data transferred

This data is technically necessary to deliver the website and also serves security purposes, such as defending against attacks and analyzing errors. It is not combined with other data sources. Cloudflare stores log files only for as long as necessary for these purposes and then deletes them automatically. They are kept longer only if they are needed to investigate a specific security incident.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free and secure operation of the website.

On your first visit, we automatically direct you to the appropriate language version: visits from Germany receive the German website, visits from other countries the English one. For this, the server evaluates the country that Cloudflare determines from your IP address. Only the country code, such as "DE", is used. It is neither stored nor linked to any other data. If you have changed the language yourself, your choice applies instead (see Cookies).

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in showing you the website directly in a language you understand. You can change the language yourself at any time.

This website uses only strictly necessary cookies, and only when you use a feature yourself: the language switcher, the cart or the checkout. Merely visiting the website does not store any cookie. There are no analytics, marketing or third-party cookies, which is why no cookie banner is required.

• Name: ince_locale
• Purpose: stores the language you selected (German or English) so that it is kept on your next visit and is not overridden by the automatic language selection by country
• Content: only the language code "de" or "en"
• Provider: byince.com (first-party cookie, set in your browser)
• Duration: one year, or until you delete it

• Name: ince_cart
• Purpose: remembers the items in your cart when you move between pages or come back later
• Content: only the item identifiers, e.g. "berlin"
• Provider: byince.com (first-party cookie, set in your browser)
• Duration: 30 days, or until you delete it

• Name: ince_order
• Purpose: unlocks the downloads only in a browser that belongs to your order, meaning after checkout or after you enter the confirmation code from our email. Anyone who only knows a page address cannot get to the files
• Content: the order number, an expiry time and a checksum, no information about you
• Provider: byince.com (first-party cookie, set in your browser)
• Duration: 24 hours

• Name: ince_pending
• Purpose: remembers that this browser requested a confirmation code. The code from the email only works here, so a forwarded email gives nobody access
• Content: the order number, a random number, an expiry time and a checksum, no information about you
• Provider: byince.com (first-party cookie, set in your browser)
• Duration: 20 minutes, deleted once the code is entered correctly

These cookies are strictly necessary for the features you expressly request. The legal basis is therefore Section 25 (2) no. 2 TDDDG, and no consent is required. The related processing is based on Art. 6 (1) (f) GDPR. You can delete or block cookies in your browser settings at any time. The website remains usable, but your language choice and cart will not be saved, and to download files you need to allow cookies for this website.

Exception: if Cloudflare classifies a request as suspicious, for example during an attack, a short security check may appear instead of the page. Once you pass it, Cloudflare stores the cookie "cf_clearance" so the check does not appear again. It contains no information about you and is valid for a few hours at most. The legal basis is Section 25 (2) no. 2 TDDDG and Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting the website against attacks.

This website uses the typefaces Archivo and Martian Mono. They are downloaded when the website is built and served directly from our own server. No connection to Google or any other font provider is established when you visit the website, so no data is transferred to third parties.

On the home page we show the time and current weather at our location in Düsseldorf. The time is calculated locally in your browser. Our server retrieves the weather data from the Open-Meteo service about every 15 minutes and keeps it cached. Your browser requests it only from our own server. No connection is made between your device and Open-Meteo, and no data about you is transmitted to Open-Meteo. Your location is not requested for this.

You can reach us by email at hello@byince.com or via the inquiry form. The form itself does not send any data. Your details initially remain in your browser and, when you submit, are handed over to your own email app as a prepared email. We only receive it once you send that email from your app.

We process the information you provide to us:

• name and email address
• company, if provided
• your selections in the form and your message
• technical email data such as the time it was sent

We use this data solely to handle your inquiry and to get in touch with you. If your inquiry relates to a contract, the legal basis is Art. 6 (1) (b) GDPR; in all other cases it is Art. 6 (1) (f) GDPR. Our legitimate interest lies in answering inquiries.

The data is deleted once your inquiry has been fully dealt with and no further communication is expected. If the inquiry leads to an engagement, we retain business correspondence in accordance with the statutory retention obligations under the German Commercial Code and Fiscal Code. The legal basis is then Art. 6 (1) (c) GDPR.

Emails to hello@byince.com are received by Cloudflare and forwarded to our mailbox without being stored permanently. The mailbox is operated by a service provider with whom we have a data processing agreement. Transmission is encrypted, provided your email provider supports this. Please do not send us particularly sensitive information via unencrypted channels.

When you add something to the cart, your browser remembers the items in the cookie "ince_cart" (see Cookies). Our server reads it to show the cart on every page. We store no other data about the cart.

This cookie is strictly necessary for the cart you request. The legal basis is Section 25 (2) no. 2 TDDDG and Art. 6 (1) (b) GDPR.

Purchases in the store are processed by Paddle.com Market Limited, Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom. Paddle acts as reseller (Merchant of Record). Your purchase contract is concluded with Paddle; Paddle collects the payment, issues the invoice and remits the VAT.

Only when you click "Checkout" does your browser load Paddle's script and payment window. Paddle then receives your IP address and technical information about your browser. In checkout you give Paddle your email address, country, where applicable postal code and VAT ID, and your payment details directly. Paddle may use its own cookies or similar technologies for this. Paddle is the controller for this processing; details are in Paddle's privacy policy at paddle.com/legal/privacy.

From Paddle we receive the order details, i.e. order number, items purchased, amount, country and your email address. We use them to provide the files, answer questions about the order and meet legal obligations. We never see payment details such as card numbers.

When checkout opens, we record your language and the time and content of your consent to the immediate download in the order, so that we can prove it.

The legal basis is Art. 6 (1) (b) GDPR (contract) and, for retention, Art. 6 (1) (c) GDPR. Loading checkout at your request is based on Section 25 (2) no. 2 TDDDG. An adequacy decision of the EU Commission exists for the United Kingdom.

After your purchase we email you a link to your downloads. We also email you confirmation codes for a new device when you request one, and a message when a new version that is part of your purchase comes out. We use the service Resend (Plus Five Five, Inc., USA) as a processor under Art. 28 GDPR. Resend processes your email address and the content of the message for this. The transfer to the USA is based on the EU-US Data Privacy Framework or the EU Commission's standard contractual clauses.

For every download our server checks the order with Paddle. In doing so we process your IP address briefly and only in hashed form to limit abusive requests.

When a download starts, we record for the order when files were first and last downloaded, how often and which version. This lets us prove that delivery has begun and your right of withdrawal has ended. We keep this information with the order data.

Every downloaded file contains a license identifier. We derive it from the order number, and it contains no information about you. When you use the product, it appears in the source code of your store or website. Only we can match it to an order, in order to enforce the usage rights.

The legal basis is Art. 6 (1) (b) GDPR and, for abuse protection, the license identifier and proof of download, Art. 6 (1) (f) GDPR. We keep order data for as long as commercial and tax retention periods require, usually up to ten years.

This website contains simple links, for example to our LinkedIn profile. These are not embedded plugins: merely visiting our website does not transfer any data to these providers. Only when you click a link are you taken to the provider's website, where their privacy policy applies, over which we have no control.

For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by "https://" in your browser's address bar and the padlock symbol. Data you transmit to us cannot be read by third parties.

We only share your data where this is necessary for the purposes described. Recipients are the processors named above, i.e. the host and the email service providers, and, for purchases, Paddle as an independent controller. Data is transferred to countries outside the EU or EEA only to the extent described above and only on the basis of an adequacy decision or appropriate safeguards pursuant to Art. 44 et seq. GDPR. We do not sell data or share it for advertising purposes.

Unless a more specific period is stated in this policy, we store personal data only for as long as necessary for the respective purpose. It is then deleted, unless statutory retention periods prevent this. In that case, processing is restricted and the data is deleted once the period has expired.

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. You are under no legal or contractual obligation to provide us with personal data. However, the website cannot be delivered without the technically necessary data, and we cannot answer your inquiry without contact details.

You have the following rights with regard to your personal data at any time:

• access to the stored data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent with effect for the future (Art. 7 (3) GDPR)

Simply contact us at hello@byince.com. Exercising your rights is free of charge.

Where we process your data on the basis of Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR (Art. 77 GDPR). You can do so in particular in the member state where you live or work. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf, Germany ldi.nrw.de

We update this privacy policy when the website, our service providers or the legal requirements change. The version published here applies.