Legal
Privacy Policy
Last updated: 4 September 2026
1. Introduction
EcoBeam Studio (“EcoBeam”, “we”, “us”, or “our”) respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, contact us, apply for a role, or work with us on a project.
We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. By using this website you acknowledge this policy. If you do not agree with it, please do not use the site or submit personal information to us.
2. Key Definitions
“Personal data” means any information relating to an identified or identifiable natural person — for example a name, email address, phone number, IP address, or application materials.
“Processing” means any operation performed on personal data, including collection, storage, use, disclosure, and deletion. “Controller” means EcoBeam Studio as the organisation that determines why and how personal data is processed for the purposes described here.
3. Data We Collect
We collect information you provide directly: name, email, company, project details, and any files or messages you send through our contact forms, email, or discovery calls.
If you apply for a role, we may also receive your CV, portfolio, salary expectations, and interview notes. From website use we may collect technical data such as IP address, browser type, device information, pages visited, and approximate location derived from IP.
We do not intentionally collect special categories of personal data. Please do not send us health, biometric, or similarly sensitive information unless we specifically ask for it as part of a legal process.
4. How We Use Your Data
We use personal data to respond to enquiries, prepare proposals, deliver projects, communicate about work in progress, and manage our studio operations.
We also use data to improve the website, measure performance, prevent abuse, and comply with legal, accounting, and tax obligations. We do not sell personal data and we do not use it for unrelated advertising networks.
5. Legal Basis
Depending on the context, we process personal data on one or more of the following bases: your consent (for example analytics cookies or optional marketing), performance of a contract or steps prior to entering a contract, our legitimate interests in running and protecting the studio, and compliance with a legal obligation.
You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before the withdrawal.
8. International Transfers
Some providers may process data outside the European Economic Area. Where that happens, we use appropriate safeguards such as Standard Contractual Clauses or an adequacy decision, together with any supplementary measures required.
9. Data Retention
We keep personal data only as long as needed for the purpose it was collected: typically for the duration of a project and a reasonable period afterwards for administration, legal claims, and tax records.
Enquiry data that does not become a project is usually deleted or anonymised within 24 months unless we have a legitimate reason to keep it longer. Application data is retained according to our hiring process and applicable law.
10. Your Rights
You have the right to access, rectify, or erase your personal data, to restrict or object to certain processing, and to data portability where applicable. Where processing is based on consent, you may withdraw that consent.
You also have the right to lodge a complaint with a supervisory authority. In Germany this is typically the data protection authority of the federal state where we are established, or the authority in your place of residence.
11. Security
We take technical and organisational measures appropriate to the risk — including access controls, encrypted connections, and limited internal access — to protect personal data against unauthorised use, loss, or alteration.
No method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to result in a high risk to your rights, we will inform you and the relevant authority as required by law.
12. Children
Our website and services are directed at businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always published on this page. Material changes will be indicated by updating the date at the top of the policy or by a notice on the site.
14. Contact
For privacy requests, contact EcoBeam Studio at contact@ecobeam.eu or write to 17 Mönckebergstraße, Hamburg 20095, Germany. Please include enough detail for us to identify you and respond.
Get in touch