CreativeBuildWorks // Canvas Online
Response SLA: < 2 Hours
Creative BuildWorks
Home / Legal
Legal & Compliance

Legal Policies

CreativeBuildWorks, registered at 44143 Paderborner Straße 75, Dortmund, Germany. All data processing, commercial terms, and service commitments are transparently documented in full regulatory compliance.

01 Privacy Policy (GDPR)

1.1 Data Controller. CreativeBuildWorks, registered at 44143 Paderborner Straße 75, Dortmund, Germany, is the data controller responsible for processing your personal data. You may contact our data protection officer at [email protected].

1.2 Data We Collect. When you submit a contact form or inquiry, we collect your name, email address, phone number (if provided), company name, and any message content you provide. We also collect standard web analytics data including IP address, browser type, and page visit timestamps.

1.3 Purpose of Processing. Your personal data is processed solely for the following purposes: responding to your inquiries and project requests, delivering contracted services, sending transactional communications related to your project, and maintaining compliance with applicable tax and commercial record-keeping regulations.

1.4 Legal Basis. We process your data under Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures) and Article 6(1)(f) (legitimate interest in responding to business inquiries). For marketing communications, we rely on your explicit consent under Article 6(1)(a).

1.5 Data Retention. Contact form submissions are retained for 24 months from the date of submission. Contract-related data is retained for the duration of the contractual relationship plus 10 years as required by German commercial law (§ 257 HGB).

1.6 Data Sharing. We do not sell, rent, or trade your personal information to third parties. Data may be shared with essential service providers (hosting, email delivery) who process data on our behalf under strict data processing agreements compliant with Article 28 GDPR.

1.7 Your Rights. Under the GDPR, you have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21) of your personal data. You also have the right to lodge a complaint with the supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

1.8 International Transfers. Your data is processed within the European Economic Area (EEA). If any data transfer outside the EEA occurs, we ensure appropriate safeguards under Article 46 GDPR, including Standard Contractual Clauses.