Aspire Digital Design
    Book a Demo
    Legal & Privacy

    Data Protection Policy

    Transparent information on how we collect, process, and protect your personal data in accordance with GDPR and BDSG.

    Data Controller Details

    Singh Digital Solutions

    (Trading As: Aspire Digital Design Agency)

    Inhaber / Owner: Milap Singh

    Bahnhofstr. 33A, 13125 Berlin, Germany

    info@info.aspiredigitaldesign.de

    +49 15888 656 757

    USt-IdNr. / VAT: DE452431057 | Steuernummer: 35/535/01822

    1. Introduction & Responsible Party

    This Data Protection Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

    Data Controller:

    Singh Digital Solutions

    (Trading As: Aspire Digital Design Agency)

    Inhaber / Owner: Milap Singh

    Bahnhofstr. 33A, 13125 Berlin, Germany

    USt-IdNr. / VAT: DE452431057 | Steuernummer: 35/535/01822

    2. Scope of Data Processing

    We process personal data only to the extent necessary to provide our services, fulfill legal obligations, and protect our legitimate business interests. Affected groups include:

    • Website Visitors

      Technical log data & usage analytics collected during your visit.

    • Prospective Clients

      Information submitted via demo forms, consultation requests & calls.

    • Active Clients

      Data processed during project delivery (web design, SEO, AI setup).

    • Newsletter Subscribers

      Contact info collected via double opt-in consent for updates.

    3. What Data We Collect

    3.1 Data You Provide Directly

    Contact Information:

    Full name, business name, email address, phone number, postal address.

    Business Information:

    Industry sector, business goals, budget range, service choices.

    Account & Billing:

    Billing address, VAT ID, transaction history (processed via Stripe/PayPal).

    Communication & Project:

    Contact form messages, emails, chatbot logs, logos, copy & brand assets.

    3.2 Data Collected Automatically

    When visiting our website, technical connection data is automatically logged: Anonymized IP address, date/time stamp, browser type and version, operating system, device type, referrer URL, and pages viewed.

    5. Cookies & Tracking Technologies

    We use cookies and similar technologies to run our website smoothly. Essential cookies enable core functions, while analytics cookies are only set with your explicit consent.

    Essential Cookies (Required):

    Session state, language selection (EN/DE), theme toggle preference. Retention: Session to 12 months.

    Analytics & Performance (Optional):

    Anonymized usage statistics to improve performance and navigation. Can be opted out at any time.

    6. Third-Party Tools & Data Processors

    We rely on trusted data processors under strict Data Processing Agreements (DPAs) per Art. 28 GDPR:

    Google Analytics & Search Console

    Traffic analytics with anonymized IP enabled. Compliant under EU-US Data Privacy Framework.

    Privacy
    Stripe & PayPal

    PCI-DSS certified payment processing. We do not store credit card details on our own servers.

    Privacy
    Google Workspace & Cloud Hosting

    Encrypted email communication and cloud hosting on EU server infrastructure.

    Privacy

    7. International Data Transfers

    Where service providers process data outside the European Economic Area (EEA), adequate data protection is guaranteed through EU Standard Contractual Clauses (SCCs) and certification under the EU-U.S. Data Privacy Framework.

    8. Data Retention Periods

    We retain personal data only as long as necessary for the respective purpose or statutory retention periods:

    Active Client DataContract duration + 3 months
    Financial Records10 years (per German Commercial Code HGB)
    Inquiries & Support3 years after last correspondence

    9. Your Rights Under GDPR

    Under the GDPR, you hold the following rights regarding your personal data:

    Right of Access (Art. 15 GDPR):

    Request details and a copy of all data stored about you.

    Right to Rectification (Art. 16 GDPR):

    Correction of inaccurate or incomplete personal data.

    Right to Erasure (Art. 17 GDPR):

    Request deletion when data is no longer needed.

    Right to Object (Art. 21 GDPR):

    Object to processing based on legitimate interests.

    Supervisory Authority (Berlin):

    Berliner Beauftragte für Datenschutz und Informationsfreiheit
    Friedrichstr. 219, 10969 Berlin, Germany
    Tel: +49 (0)30 13889-0 | Web: www.datenschutz-berlin.de

    10. Data Security Measures

    We employ technical and organizational security measures (TOMs) to safeguard your data against loss, manipulation, or unauthorized access: SSL/TLS encryption (HTTPS), encrypted data storage, strict access control, and daily automated backups.

    11. Special Notes for Specific Services

    11.1 Web Design Services

    Content & brand assets provided are used strictly for project delivery.

    11.2 CRM & AI Setup

    For CRM configuration, we act as a data processor for customer-managed leads.

    Questions About Data Protection?

    If you have any questions regarding the collection, processing, or deletion of your personal data, please contact us.