Privacy policy
Last updated: July 2026
1. Overview
This policy explains what personal data is processed when you visit maso.studio, book a call, or subscribe to one of our plans. We only process data that is required to operate this website and deliver our services.
2. Controller
Marco Sönnichsen, MASO.studio, Deezbülleck 3, 25899 Galmsbüll, Germany — phone +49 177 6275459, email marco@maso.studio.
3. Hosting
This website is hosted on Vercel (Vercel Inc., USA). When you visit the site, server log data (IP address, browser, timestamp) is processed to deliver the pages securely. Legal basis: Art. 6 (1) f GDPR (legitimate interest in a secure, performant website).
4. Fonts
This website uses locally hosted fonts. No connection to Google Fonts or other external font providers is established when you visit the site.
5. Cookies & local storage
This website only sets one technically necessary cookie (NEXT_LOCALE) to remember your language choice. No tracking, marketing, or analytics cookies are set. Legal basis: § 25 (2) TDDDG and Art. 6 (1) f GDPR (legitimate interest in providing the site in your language).
6. Web analytics (Vercel Analytics & Speed Insights)
With your consent we use Vercel Analytics and Vercel Speed Insights (Vercel Inc., USA) to collect anonymized usage and performance data. The services are only loaded after you agree in the cookie banner; no cross-site tracking cookies are set. Legal basis: Art. 6 (1) a GDPR (consent). You can change your choice anytime via the cookie settings link in the footer.
7. Scheduling via Cal.com
If you book a call, scheduling is handled by Cal.com, Inc. (USA). The data you enter (name, email, notes) is processed to arrange and hold the appointment. Legal basis: Art. 6 (1) b GDPR (pre-contractual measures).
8. Payments via Stripe
Subscriptions are processed by Stripe Payments Europe, Ltd. (Ireland). Stripe processes your payment data as an independent controller under its own privacy policy. We receive no full card details. Legal basis: Art. 6 (1) b GDPR (contract performance).
9. Contact form, email & WhatsApp
If you use our contact form, the data you enter (name, email, company, phone, message) is processed for two purposes: (1) it is transmitted to us by email via the delivery service Resend (Resend, Inc., USA), and (2) it is stored in our internal CRM and project tool, which runs on Supabase (Supabase, Inc.; database hosting in the United Kingdom, London region (eu-west-2) — a third country covered by the EU adequacy decision under Art. 45 GDPR), so that we can handle your inquiry and keep track of further contact. If you contact us by email, phone, or WhatsApp (WhatsApp Ireland Ltd. — its own privacy policy applies), we process your message and contact details for the same purpose. The form cannot be submitted without your consent to this processing. Legal basis: Art. 6 (1) a (consent) as well as b and f GDPR. You can withdraw your consent at any time with effect for the future by emailing marco@maso.studio.
10. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority.