Privacy.

The controller under the GDPR is CreamusPretia GmbH, Mittelstraße 17, 82444 Schlehdorf, Germany, represented by its managing director, Talisa Gebhard. Email contact@creamuspretia.com, phone +49 8851 614779.

We are not legally required to appoint a data protection officer and have not done so. Please send any privacy questions to the address above.

The site runs on Microsoft Azure Static Web Apps, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, under a data processing agreement pursuant to Art. 28 GDPR.

Serving a web page involves some technical data, which Microsoft processes on our behalf: your IP address, the date and time of the request, the page requested, the amount of data transferred, the referring page, and your browser and operating system. This is needed to deliver the site and to keep it secure, which is our legitimate interest under Art. 6(1)(f) GDPR. We do not combine this data with other sources or use it to build profiles.

Static content may be served from Microsoft’s global network; the contact form is processed in a Western European data centre. Where data reaches the United States, the transfer relies on Microsoft Corporation’s certification under the EU-U.S. Data Privacy Framework (Art. 45 GDPR), backed by the EU Standard Contractual Clauses.

If you write to us through the form, we receive your name, your email address, the topic you selected and your message – and, only if you choose to give them, your organisation, phone number, industry, timing and how you heard of us, including who recommended us. We use them only to reply and, where relevant, to prepare a proposal.

Your enquiry is passed by an Azure function to LeadFlow, the enquiry system we built and run ourselves, also on Microsoft Azure. No third party has access to it. A copy reaches our inbox by email, sent through Azure Communication Services, likewise a Microsoft service. The same applies to emails you send us directly.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a possible contract, and otherwise our legitimate interest in answering the people who contact us (Art. 6(1)(f) GDPR).

Once your enquiry has been dealt with and no engagement follows, we delete your details – within twelve months at the latest. If an engagement does follow, German commercial and tax law requires us to keep the related records for six or ten years.

To keep automated submissions out, the form contains a field that only bots can see. It collects nothing further and relies on no external service.

We set no cookies and store nothing in your browser. There is no analytics, no tracking and no advertising. Fonts, images and the film are hosted alongside the site itself, so visiting it opens no connection to Google Fonts, video platforms or any other third party.

You may ask for access to your data (Art. 15 GDPR), its rectification (Art. 16) or erasure (Art. 17), the restriction of its processing (Art. 18), and its portability (Art. 20). Where we rely on legitimate interests, you may object at any time on grounds relating to your particular situation (Art. 21). A short email to contact@creamuspretia.com is enough.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Ours is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

We will update this notice when the site or the law changes. The version published here is the one that applies.