Privacy Policy

Last updated: 1 September 2026

We take the protection of your personal data seriously. This Privacy Policy explains how personal data is processed when you visit and use customerstory.de.

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

[legal name of the website owner]
GlenStory
Straße der AWG 5
15745 Wildau
Germany

Email: [email address]

2. Website hosting and Squarespace

This website is operated using Squarespace.

For customers in the European Economic Area, the relevant Squarespace entity is:

Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8
Ireland
D08 N12C

When you access this website, technical information may be processed in order to display the website and ensure its stability and security.

This may include, in particular:

  • IP address

  • date and time of access

  • requested pages or files

  • browser and device information

  • operating system

  • referring website

  • technical connection information

The processing of this information insofar as it is necessary for the secure and reliable operation of the website is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure and technically reliable provision of our website.

Squarespace may process data outside the European Economic Area. Squarespace states that it relies on the EU-U.S. Data Privacy Framework and, where applicable, Standard Contractual Clauses and other safeguards recognised under European data protection law.

3. Cookies and similar technologies

This website uses cookies and similar technologies.

Some cookies are necessary for the technical operation and security of the website. Where access to or storage of information on your device is strictly necessary to provide a service requested by you, this is permitted under Section 25(2) TDDDG.

Other cookies and technologies, including those used for analytics or certain third-party services, are used only where the required consent has been obtained.

The legal basis for storing or accessing non-essential information on your device is Section 25(1) TDDDG. Where personal data is subsequently processed on the basis of your consent, the legal basis is Art. 6(1)(a) GDPR.

You can accept or reject non-essential cookies through the cookie consent options provided on this website and can change or withdraw your consent at any time with effect for the future.

4. Squarespace Analytics

Squarespace provides analytics functions that can help us understand how visitors use our website.

Depending on the settings and consent provided, information processed for analytics purposes may include:

  • pages visited

  • visits and sessions

  • traffic sources

  • browser and device information

  • approximate geographical information

  • interactions with the website

Squarespace analytics and performance cookies are non-essential and are used only where the required consent has been provided.

The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time through the cookie settings.

5. Google Analytics

We use Google Analytics, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics helps us understand how visitors use our website and how our website performs.

Depending on your consent and our configuration, Google Analytics may process information such as:

  • pages viewed

  • website interactions

  • time and duration of visits

  • browser and device information

  • operating system

  • traffic source

  • approximate geographical information

  • technical identifiers

According to Google, individual IP addresses of users in the European Union are not logged or stored by Google Analytics. IP addresses may be used temporarily to derive approximate geographical information before being discarded.

Google Analytics is used only after the required consent has been provided.

The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can withdraw your consent at any time through the cookie settings.

Google may process data on servers outside the European Economic Area, including in the United States. Google LLC states that it participates in the EU-U.S. Data Privacy Framework. Google also uses other recognised safeguards, including Standard Contractual Clauses, where required.

Further information about Google's processing of personal data is available in Google's Privacy Policy.

6. YouTube

Our website may contain videos embedded from YouTube, a service provided by Google.

For users in the European Economic Area, the relevant Google entity is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

When a YouTube video is loaded or played, Google and YouTube may process information including:

  • your IP address

  • browser and device information

  • information about the page you are visiting

  • technical connection information

  • information about your interaction with the video

If you are signed in to a Google or YouTube account, Google may be able to associate your interaction with that account.

Where consent is required for the loading of embedded YouTube content or related technologies, the content is loaded only after the relevant consent has been provided.

The legal basis in these cases is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings.

Google may process data outside the European Economic Area, including in the United States. Google LLC states that it participates in the EU-U.S. Data Privacy Framework and also uses other recognised safeguards where required.

Further information is available in Google's Privacy Policy.

7. Contact

If you contact us by email or through a contact form, we process the information you provide in order to respond to your enquiry.

This may include:

  • your name

  • email address

  • company name

  • telephone number, if provided

  • information about your project

  • the contents of your message

If your enquiry relates to a potential contract or project, processing is based on Art. 6(1)(b) GDPR.

For other enquiries, processing may be based on Art. 6(1)(f) GDPR. Our legitimate interest is the efficient handling of communications and enquiries.

We retain enquiry data only for as long as necessary to process the respective enquiry, unless statutory retention requirements or other legitimate reasons require longer storage.

8. Recipients of personal data

We do not sell your personal data.

Personal data may be disclosed to service providers where this is necessary for operating the website or providing the respective service.

These may include, in particular:

  • Squarespace

  • Google

  • YouTube

  • technical infrastructure and service providers

Where required by law, appropriate data-processing agreements and safeguards are used.

9. International data transfers

Some service providers used on this website may process personal data outside the European Union or European Economic Area.

Where an adequacy decision of the European Commission applies, transfers may be based on that decision.

Where no adequacy decision applies, appropriate safeguards may be used, including Standard Contractual Clauses pursuant to Art. 46 GDPR.

10. Storage period

We process personal data only for as long as necessary for the respective purpose.

Personal data may be retained for a longer period where required by statutory retention obligations or where storage is necessary for the establishment, exercise or defence of legal claims.

Once the relevant purpose no longer applies and no legal obligation requires further retention, the data is deleted or anonymised.

11. Your rights

Subject to the applicable legal requirements, you have the right to:

  • access your personal data under Art. 15 GDPR

  • request correction under Art. 16 GDPR

  • request deletion under Art. 17 GDPR

  • request restriction of processing under Art. 18 GDPR

  • receive certain personal data in a portable format under Art. 20 GDPR

  • object to processing based on legitimate interests under Art. 21 GDPR

  • withdraw consent at any time under Art. 7(3) GDPR

Withdrawal of consent applies with effect for the future and does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us using the contact details listed above.

12. Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for Brandenburg is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg

Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany

13. Changes to this Privacy Policy

We may update this Privacy Policy if our website, the services used on it or the applicable legal requirements change.

The current version is available on this website.

Last updated: 1 September 2026