Legal

Privacy Notice

This text is a non-binding template and does not constitute legal advice. Please have it reviewed by a qualified lawyer before use.

1. Controller

The data controller is Vladimir Tudakov, trading as Pixel Syndicate Studio (Grafik- und Kommunikationsdesign), Frankfurter Allee 216, 10365 Berlin, Germany. Contact: hello@pixelsyndicate.world.

2. What data is processed

  • Account data — name and email when you create an account or place an order.
  • Order and billing data — collected by Paddle as Merchant of Record (name, email, billing address, payment method, tax identifiers). The studio receives a limited subset for record-keeping.
  • Support correspondence — anything you send us when you ask for help.
  • Technical data — IP address, browser, device, basic usage logs, needed to deliver the site securely.

3. Purposes and legal basis

  • Fulfilling orders and giving you access to the digital products you bought — performance of contract (Art. 6(1)(b) GDPR).
  • Handling billing, tax, and invoicing through Paddle — legal obligation and contract (Art. 6(1)(b) and (c) GDPR).
  • Responding to support requests — legitimate interest and contract (Art. 6(1)(b) and (f) GDPR).
  • Keeping the site secure, preventing fraud, debugging — legitimate interest (Art. 6(1)(f) GDPR).
  • Meeting German bookkeeping and tax retention obligations — legal obligation (Art. 6(1)(c) GDPR).

4. Recipients and processors

  • Paddle.com Market Ltd — Merchant of Record. Handles payments, billing, tax, fraud screening, and refund requests.
  • Hosting and infrastructure providers used to run the website and store account data.
  • Email provider used to send order confirmations and respond to support requests.
  • Professional advisers (such as our tax adviser) where strictly necessary.
  • Public authorities where required by law (for example, the Finanzamt for tax records).

5. International transfers

Some processors may store or access data outside the European Economic Area. Where that happens, transfers are protected by appropriate safeguards under the GDPR (typically Standard Contractual Clauses or an adequacy decision).

6. Retention

Personal data is kept only as long as needed for the purpose it was collected for. Account data is kept while your account is open and for a short period after, in case you come back or query a past order. Invoice and tax-relevant data is kept for the statutory periods required by German tax law (currently up to 10 years).

7. Your rights

You have the right to access, correct, delete, restrict, port, or object to the processing of your personal data, and to withdraw consent where processing is based on consent. You also have the right to complain to a supervisory authority (in Berlin: Berliner Beauftragte für Datenschutz und Informationsfreiheit). Requests can be sent to hello@pixelsyndicate.world and will normally be answered within one month.

8. Security

We use appropriate technical and organisational measures — encrypted transport (HTTPS), restricted access, hardened cloud infrastructure, and least-privilege access controls — to protect personal data against unauthorised access, loss, or alteration.

9. Cookies

The site uses cookies and similar storage that are strictly necessary to provide the service (for example, keeping you signed in and remembering your cart). It does not use third-party advertising or cross-site tracking cookies. Where any non-essential analytics are introduced in the future, they will be subject to your consent.