Privacy policy

1. Controller

The controller for the processing of personal data on this website is SNA – Studios New Amerika GmbH, Theaterstraße 66, 52062 Aachen, Deutschland, backoffice [at] timberresheim.com.

2. Hosting and server logs

The site is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, the server automatically stores log files containing the IP address, date and time, page requested, data volume, browser and operating system. This data serves the secure operation of the site and is deleted after a short period. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in reliable operation). A data processing agreement is in place with the host.

3. Audience measurement without cookies

We count visits with our own method on our server. We store the page requested, the referring page, language, device class (phone or desktop), time on page and clicks on purchase and contact links. No cookies are set and no IP addresses are stored. To recognise repeat visits on the same day, a hash is derived from the IP address, browser and a secret that changes daily; after two days it can no longer be attributed. The legal basis is Art. 6 (1) (f) GDPR. If you do not wish to be counted, open the site once with ?stat=off appended; your browser remembers this.

4. Place of origin

We determine the city and country of a visit from the IP address on our own server, using a location database stored on our web space. The IP address is not stored and is not transmitted to third parties; only the city, region and country are stored. The legal basis is Art. 6 (1) (f) GDPR. The location database is provided by DB-IP: IP Geolocation by DB-IP (licence CC BY 4.0).

5. Purchases via Stripe

Purchases through the buy buttons are processed by Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland). When you buy, you leave our site; Stripe collects your name, shipping and billing address, e-mail address and payment details and sets its own cookies on its pages. We receive your name, address, e-mail address and the amount from Stripe in order to fulfil the purchase, ship the work and issue the invoice. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract); the data is retained for the periods required by commercial and tax law. Stripe’s privacy notice: stripe.com/privacy.

6. Embedded videos

Some pages embed videos from Vimeo (Vimeo.com, Inc., New York, USA) or YouTube (Google Ireland Ltd., Dublin). When you open such a page, your browser connects to the provider, which receives your IP address. We use Vimeo’s Do Not Track parameter and YouTube’s privacy-enhanced mode, so no cookies are set unless you play the video. The legal basis is Art. 6 (1) (f) GDPR.

7. Newsletter

For the newsletter we only need your e-mail address and preferred language. Sign-up uses double opt-in: you receive an e-mail with a confirmation link, and only then are you added. As proof we store the time of confirmation. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time via the unsubscribe link in every e-mail. The sign-up form and the confirmation are processed by Cloudflare Workers (Cloudflare, Inc., San Francisco, USA; certified under the EU-US Data Privacy Framework); to prevent abuse, a hash of your IP address is stored there for one hour, and unconfirmed sign-ups expire after seven days. E-mails are sent via Amazon Simple Email Service (Amazon Web Services EMEA SARL, Luxembourg) with servers in the EU. We do not track opens or clicks. We keep the address list ourselves and do not pass it on; after you unsubscribe, the address is only kept as blocked so that you receive no further e-mails.

8. Contact by e-mail

If you write to us, we process your details to answer your enquiry (Art. 6 (1) (b) and (f) GDPR). The data is kept while the enquiry is open and for as long as statutory retention periods require.

9. No cookies, no profiles

This website sets no cookies and builds no user profiles. A value is stored in your browser only if you switch off counting with ?stat=off.

10. Your rights

You have the right to access the data stored about you, to rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6 (1) (f) GDPR. Please contact the address above. You may also lodge a complaint with a data protection supervisory authority, for example the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.

Last updated: 6 November 2026