Privacy Policy

1. Controller

webdesignsupreme, Wilhelmstraße 7A, 21614 Buxtehude, Germany. Email: support@webdesignsupreme.com. Phone: +49 175 3677208.

2. What this page covers

This policy explains what personal data webdesignsupreme processes when you visit this site, browse or buy a package, or send an enquiry, under the EU General Data Protection Regulation (GDPR) and the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG).

3. Data processed when you browse

Standard web-server log data (IP address, browser type, referring page, date and time of access) is generated automatically by the hosting infrastructure to keep the site running securely, and is not linked to your identity beyond what's needed for that purpose. Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure, working website.

4. Data processed in your cart

Your cart contents live in your browser's local storage (wds:cart:v1) so it survives a reload. This never leaves your device and is not shared with us. It's strictly necessary to the shopping feature you've asked for, so no consent banner covers it.

5. Data processed at checkout (demonstration checkout)

This site's checkout is a demonstration: no live payment provider is connected, and nothing you enter at checkout is transmitted to webdesignsupreme or to any payment processor. Card-style fields specifically are never written to storage or sent anywhere, and are cleared the moment you submit or leave the page. Your name, billing and order details are saved only in your own browser (wds:lastOrder:v1) as a local receipt, so you can find your order reference again after a reload — this data does not reach us either. If you want to place a real order, contact us directly using the details in section 1.

6. Data processed if you use the contact form

The contact form on /contact/ saves your submission locally in your browser (wds:leads:v1) so you have a record of what you sent. It is not automatically emailed or transmitted to webdesignsupreme — no lead-routing service is currently connected. For a message we will actually see and reply to, please email or call us directly; both are linked on the confirmation panel and throughout the site. Where you do reach us by email or phone, we process the personal data you provide (name, contact details, and whatever you tell us about your project) to respond to your enquiry, under Art. 6(1)(b) GDPR (steps prior to entering a contract) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries), as applicable.

7. Analytics (Google Analytics 4) — only after consent

We use Google Analytics 4, provided by Google Ireland Limited, to understand how the site is used. GA4 is switched off by default. It only loads, and only sets cookies, after you actively accept analytics in the cookie banner or in "Cookie settings." If you accept, Google may process data including your IP address and pages viewed, and may transfer this data to the United States under the European Commission's Standard Contractual Clauses. You can withdraw consent at any time from the footer's "Cookie settings" link or from /cookies/; this stops future analytics data collection and, where technically possible, deletes previously set Google cookies. Legal basis: consent (Art. 6(1)(a) GDPR, §25 TDDDG).

8. Data retention

Local-storage cart, order-receipt and contact-form records exist only on your device and persist until you clear your browser storage or they're overwritten by a newer entry. Consent choices are stored for 12 months, after which you'll be asked again. Server logs are retained only as long as needed for security and technical operation, then rotated out in the ordinary course of hosting.

9. Your rights

Under the GDPR you have the right to access, correct, delete, or restrict the personal data we hold on you, to receive it in a portable format, and to object to processing based on legitimate interest. To exercise any of these, email support@webdesignsupreme.com. You also have the right to lodge a complaint with a supervisory authority — in our case, the Landesbeauftragte für den Datenschutz Niedersachsen (LfD Niedersachsen), or the data protection authority in your own EU member state.

10. Changes to this policy

We'll update the "last updated" date above if this policy changes; material changes affecting analytics or data collection will be reflected here before they take effect.