Data Privacy
Privacy Policy
TIMO MILANO – Timo Kreitz
Last updated: 30 October 2026
1. Data Controller
The controller responsible for the processing of personal data on this website is:
TIMO MILANO – Timo Kreitz
Wühlischstr. 45 A
10245 Berlin
Germany
Email: studio@timomilano.com
Website: https://www.timomilano.com
For any questions regarding the processing of your personal data, you can contact us using the email address above.
2. General Information on Data Processing
We take the protection of your personal data seriously. We process personal data confidentially and in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR), as well as applicable German data protection laws.
This Privacy Policy explains what personal data is collected when you visit this website, how it is processed, for what purposes it is used and what rights you have as a visitor.
Personal data means any information relating to an identified or identifiable natural person.
3. Website Hosting and Technical Infrastructure
This website is created and hosted using the website platform Squarespace.
Service provider:
Squarespace, Inc.
8 Clarkson Street
New York, NY 10014
United States
When you access this website, technical information may automatically be collected and stored in server log files. This information may include:
IP address of the accessing device
Date and time of access
Pages and files accessed
Browser type and version
Operating system
Referrer URL
Internet service provider
Technical information relating to website usage and security
This information is processed to ensure the secure, stable and technically reliable operation of the website, to identify technical errors and to prevent misuse.
The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure and functional website.
Squarespace may process personal data in countries outside the European Economic Area, including the United States.
Where personal data is transferred to a third country, such transfers are carried out in accordance with the requirements of Chapter V GDPR. Depending on the applicable circumstances, this may include an adequacy decision, such as the EU-U.S. Data Privacy Framework, or appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Further information about Squarespace's data processing practices can be found at:
https://www.squarespace.com/privacy
4. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Cookies are small text files stored on your device when you visit a website. They help ensure the proper functioning of the website and may also be used to analyse website traffic or improve the user experience.
Cookies and similar technologies may be divided into the following categories:
Essential cookies
These cookies are necessary for the basic operation, security and functionality of the website. They may be used without consent where they are strictly necessary to provide a service explicitly requested by the visitor.
Analytics and performance cookies
These cookies may collect information about how visitors interact with the website, such as pages visited and general usage patterns. They are only used where the required consent has been obtained.
Non-essential cookies and similar technologies are only activated with your prior consent.
The legal basis for processing personal data through non-essential cookies is Article 6(1)(a) GDPR, in conjunction with Section 25(1) of the German Telecommunications-Digital Services Data Protection Act (TDDDG), where applicable.
You may withdraw or change your consent at any time through the cookie settings provided on this website.
The use of technically necessary cookies is based on Article 6(1)(f) GDPR and, where applicable, the exception under Section 25(2) TDDDG.
5. Contact by Email
If you contact us by email, the personal information you provide will be processed in order to respond to your enquiry and handle any subsequent communication.
This may include:
Your name
Your email address
The content of your message
Any additional information you voluntarily provide
The legal basis for processing is Article 6(1)(b) GDPR if your enquiry relates to the initiation or performance of a contract. In other cases, processing is based on Article 6(1)(f) GDPR, reflecting our legitimate interest in responding to enquiries.
Your data will only be retained for as long as necessary to process your enquiry and will subsequently be deleted unless statutory retention obligations apply.
6. External Links
This website may contain links to external websites and third-party platforms.
When you click on an external link, you leave this website. The respective operators are solely responsible for the processing of personal data on those external websites.
Please refer to the privacy policies of the respective providers for further information.
7. Data Recipients
Personal data may be disclosed to third parties where necessary for the technical operation and maintenance of this website.
This may include Squarespace as the website hosting and platform provider, as well as technical service providers involved in operating and securing the website.
Where such providers process personal data on our behalf, the processing is governed by the applicable data protection requirements and, where required, a data processing agreement pursuant to Article 28 GDPR.
Personal data will not be sold to third parties.
8. Data Retention
Personal data is stored only for as long as necessary to fulfil the purposes for which it was collected or processed.
Where statutory retention obligations apply, the relevant data will be retained for the legally required period.
Once the purpose of processing has been fulfilled and no further legal retention obligations exist, the data will be deleted or anonymised.
9. Your Rights Under the GDPR
Under the General Data Protection Regulation, you have the following rights:
Right of access – Article 15 GDPR
You may request information about whether and how your personal data is being processed.
Right to rectification – Article 16 GDPR
You may request the correction of inaccurate or incomplete personal data.
Right to erasure – Article 17 GDPR
You may request the deletion of your personal data where the legal requirements are met.
Right to restriction of processing – Article 18 GDPR
You may request the restriction of the processing of your personal data under certain circumstances.
Right to data portability – Article 20 GDPR
You may request to receive personal data that you have provided in a structured, commonly used and machine-readable format, where applicable.
Right to object – Article 21 GDPR
You may object to the processing of your personal data where such processing is based on legitimate interests, for reasons relating to your particular situation.
Right to withdraw consent – Article 7(3) GDPR
Where processing is based on your consent, you may withdraw that consent at any time. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, please contact:
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection legislation.
The competent supervisory authority in Berlin is:
Berlin Commissioner for Data Protection and Freedom of Information
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
Email: mailbox@datenschutz-berlin.de
Website: https://www.datenschutz-berlin.de/
You may also lodge a complaint with another competent supervisory authority in accordance with Article 77 GDPR.
11. Data Security
This website uses SSL/TLS encryption to protect information transmitted between your browser and the website.
An encrypted connection can generally be identified by the use of "https://" in your browser's address bar.
Appropriate technical and organisational measures are taken to protect personal data against unauthorised access, loss, alteration or disclosure.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy whenever necessary to reflect changes in legal requirements, technical developments or the way this website operates.
The latest version will always be published on this website.
TIMO MILANO – Timo Kreitz
Berlin, Germany
studio@timomilano.com