Privacy policy

1. Controller

2. Summary

• We do not use cookies or any analytics or tracking tools.
• All fonts are loaded from our own server. No data is sent to Google or other font providers.
• We only process personal data when you contact us via the contact form or by email, and in technically necessary server logs.

3. Hosting and server logs

This website is hosted by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (“AWS”). The files are stored in a data centre in Stockholm, Sweden, within the European Union, and delivered via the Amazon CloudFront content delivery network.

When you visit the website, technically necessary data is processed: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser and operating system. This is required to deliver the website securely and reliably and to fend off attacks. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement with AWS under Art. 28 GDPR. Data may be transferred to the USA. AWS is certified under the EU-US Data Privacy Framework, and the EU Commission’s standard contractual clauses also apply.

4. Contact form and email

When you send us a request via the contact form, we process your name, email address, optionally your company, the selected service and your message. The data is forwarded to us as an email via AWS Lambda and Amazon Simple Email Service in the Stockholm (EU) region and is not stored along the way. If you contact us by email, we process the data you provide.

We use this data solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, and otherwise our legitimate interest in responding to enquiries under Art. 6 (1) (f) GDPR.

We delete your data once your request has been fully processed, unless statutory retention obligations (e.g. under commercial or tax law) apply.

5. Client area

The client area is intended exclusively for clients with their own credentials. Data entered in the sign-in form is currently not transmitted to our server and is not stored.

6. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). Simply contact kontakt@north-creatives.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

8. Changes

We update this privacy policy when the website or legal requirements change. The version published here applies.

Last updated: October 2026