https://www.vossdesignobjects.com Last updated: 22 August 2026CONTROLLERThe controller responsible for the processing of personal data on this website is:Voß Design Objects Owner and sole proprietor: Nick Voß Niederforstbacherstraße 63 52078 Aachen GermanyTelephone: +49 171 2927493 Email: vossnick@protonmail.com Website: https://www.vossdesignobjects.com
GENERAL INFORMATIONWe take the protection of personal data seriously. We process personal data only where this is necessary to operate and secure this website, present our artistic work, provide multilingual content, analyse the use of the website with consent, respond to enquiries and prepare or perform contractual relationships.“Personal data” means any information relating to an identified or identifiable natural person.The legal bases referred to in this policy are those provided by Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”).Access to, or storage of, information on a visitor’s device is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (“TDDDG”).WEBSITE HOSTING AND SERVER LOG DATAThis website is created and hosted using Squarespace.The relevant service provider for customers outside the United States is:Squarespace Ireland Limited Squarespace House Ship Street Great Dublin 8, D08 N12C IrelandSquarespace, Inc. in the United States and other Squarespace group companies and service providers may also be involved in providing the service.When the website is accessed, Squarespace may automatically process technical information required to deliver, operate and secure the website. This may include:IP addressDate and time of accessPages and files requestedReferrer URLBrowser type and browser versionOperating systemDevice informationLanguage settingsHTTP status informationAmount of data transferredThe purposes of this processing are to display the website correctly, maintain technical stability, detect misuse, defend against attacks and ensure the security and availability of the service.The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and professional operation of this website.To the extent Squarespace processes personal data on our instructions, Squarespace acts as our processor. Squarespace may process limited website usage and security information for its own purposes in accordance with its privacy policy.Further information:https://www.squarespace.com/privacySquarespace Data Processing Addendum:https://www.squarespace.com/dpaSQUARESPACE ACTIVITY LOG AND BASIC WEBSITE STATISTICSSquarespace may process limited visitor and page-access data even where analytics cookies have not been accepted. Individual page views may be counted separately without connecting them to a returning visitor across multiple sessions.Squarespace may also maintain a limited activity log for up to seven days. Depending on the Squarespace configuration, this log may contain:IP addressDate and time of accessPage visitedApproximate geographic locationReferrer URLBrowser informationOperating systemThis data is used exclusively for technical monitoring, security, troubleshooting and limited aggregate website statistics.The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the security and stability of the website, identifying technical problems and understanding the basic reach of our website.Persistent identification of visitors and the connection of visits across multiple sessions through non-essential analytics cookies takes place only after consent.INTERNATIONAL DATA TRANSFERSIn connection with Squarespace, Google, Weglot and other service providers described in this policy, personal data may be processed outside the European Economic Area, including in the United States.Transfers to countries outside the European Economic Area take place only where the requirements of Articles 44–49 GDPR are met.Depending on the provider and the processing involved, the legal safeguards may include:An adequacy decision of the European CommissionParticipation in the EU–US Data Privacy FrameworkStandard Contractual Clauses approved by the European CommissionAdditional contractual, organisational and technical safeguardsSquarespace states that Squarespace, Inc. participates in the EU–US Data Privacy Framework and uses Standard Contractual Clauses where necessary.Google LLC states that it participates in the EU–US Data Privacy Framework and uses recognised transfer mechanisms, including Standard Contractual Clauses, where required.Weglot states that its primary servers are located in the European Union. Where Weglot uses service providers outside the European Union, transfers may be protected by an adequacy decision, the EU–US Data Privacy Framework or Standard Contractual Clauses.Switzerland, where Proton AG is established, is covered by an adequacy decision of the European Commission.Information about the safeguards used by the providers is available in their respective privacy and data-processing documentation. A copy of, or further information about, safeguards applicable to processing carried out on our behalf may also be requested by contacting:vossnick@protonmail.comSQUARESPACE COOKIE CONSENT TOOLWe use the Squarespace Cookie Consent Tool to obtain and manage visitors’ choices regarding non-essential cookies and similar technologies.The cookie banner provides options to accept, decline or manage non-essential cookies. Non-essential analytics, performance, advertising and marketing technologies must remain disabled until the relevant consent has been provided.The consent tool stores the visitor’s privacy choices so that the choice does not need to be requested again on every page. Depending on the configuration, the following preference cookies may be used:ss_performancecookiesAllowed – stores the choice concerning analytics and performance cookies; duration: 30 daysss_marketingcookiesAllowed – stores the choice concerning marketing cookies; duration: 30 daysThe processing of consent choices is based on Article 6(1)(c) GDPR where necessary to comply with legal consent and accountability obligations. Otherwise, the processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the reliable management and implementation of visitors’ privacy choices.Storage of the consent preference on the visitor’s device is based on Section 25(2) TDDDG because it is necessary to remember and implement the visitor’s choice.Consent can be changed or withdrawn at any time through the “Manage Cookies” or “Cookie Settings” function available on this website.Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.COOKIES AND SIMILAR TECHNOLOGIESCookies are small text files or data elements stored on a visitor’s device. We distinguish between necessary technologies and non-essential technologies used for analytics, external media or other optional functions.7.1 Necessary technologiesNecessary technologies may be used to:Securely deliver the websitePrevent fraud and cross-site request forgerySupport website navigationRemember language and privacy preferencesMaintain technical stabilityDepending on the functions used, necessary technologies may include:Crumb – protects against cross-site request forgery; duration: sessionss_performancecookiesAllowed – stores the analytics cookie preference; duration: 30 daysss_marketingcookiesAllowed – stores the marketing cookie preference; duration: 30 daysWeglot language preference technologies – remember the visitor’s selected language or translated page versionWhere associated personal data is processed, the legal basis is Article 6(1)(f) GDPR. Access to or storage of information on the visitor’s device is based on Section 25(2) TDDDG where the technology is strictly necessary.7.2 Analytics and performance cookiesWith the visitor’s consent, Squarespace Analytics may use the following cookies:ss_cid – identifies unique visitors and connects sessions; duration: two yearsss_cpvisit – identifies unique visitors and connects sessions; duration: two yearsss_cvisit – records a visit; duration: 30 minutesss_cvr – identifies unique visitors and connects sessions; duration: two yearsss_cvt – records the current visit; duration: 30 minutesThe legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.Current information concerning Squarespace cookies is available at:https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-usesWe do not intentionally use Google Analytics, the Meta Pixel or behavioural advertising technologies on this website at the date of this policy.SQUARESPACE ANALYTICSIf a visitor consents to analytics and performance cookies, we use Squarespace Analytics to understand the general use and performance of the website.The information may include:Pages viewedVisits and sessionsApproximate duration of visitsTraffic sourcesBrowser and device informationApproximate geographic informationClicks and interactions with website contentThe purpose is to measure the reach of the website, identify technical or content-related improvements and improve the presentation of our artistic work.The legal basis is Article 6(1)(a) GDPR. Where information is stored on or accessed from the visitor’s device, Section 25(1) TDDDG additionally applies.Consent is voluntary and can be withdrawn at any time through the cookie settings.WEBSITE TRANSLATION WITH WEGLOTThis website uses Weglot to provide multilingual content and a language-selection function.The provider is:Weglot SAS 7 cité Paradis 75010 Paris FranceWhen the website is accessed, Weglot may process technical information and website content required to provide the translated version. This may include:IP addressBrowser and device informationWebsite URLSelected languageOriginal and translated website contentTechnical request and error informationWeglot may use cookies or local-storage technologies to remember the visitor’s selected language. Depending on the configuration, these may include:wg-translations – stores translation informationwg-slugs – stores translated URL information where translated slugs are usedWG_CHOOSE_ORIGINAL – remembers a language or original-version choice; duration may be up to one monthThe purpose is to provide an accessible and consistent multilingual website and remember the visitor’s language preference.The processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is presenting our artistic work to an international audience and making the website available in the visitor’s selected language.Storage of a strictly necessary language preference on the visitor’s device is based on Section 25(2) TDDDG.Further information:https://www.weglot.com/privacyGOOGLE MAPSThe contact page contains an embedded Google Maps map to show the general location of Voß Design Objects in Aachen, Germany.The service is provided in the European Economic Area by:Google Ireland Limited Gordon House Barrow Street Dublin 4 IrelandGoogle LLC in the United States and other Google group companies and service providers may also be involved.When Google Maps is activated, the visitor’s browser establishes a connection to Google servers. Google may process:IP addressURL of the page visitedBrowser and device informationOperating systemLanguage settingsDate and time of accessApproximate location informationInteractions with the mapCookies and similar identifiersIf the visitor is signed in to a Google account, Google may associate the visit and interaction with that account in accordance with the visitor’s Google settings.Google Maps must be activated only after the visitor has provided the relevant consent through the cookie banner or another consent mechanism.The legal basis is Article 6(1)(a) GDPR. Access to or storage of information on the visitor’s device is based on Section 25(1) TDDDG.Consent is voluntary and can be changed or withdrawn at any time through the cookie settings. The map may not be available without consent, but the remaining website can still be used.Google may process certain information for its own purposes in accordance with its privacy policy.Further information:https://policies.google.com/privacyGoogle Maps terms:https://www.google.com/help/terms_maps/GOOGLE reCAPTCHASquarespace currently loads Google reCAPTCHA resources as a security and abuse-prevention component.The service is provided in the European Economic Area by Google Ireland Limited. Google LLC in the United States and other Google group companies or service providers may also be involved.Google reCAPTCHA is designed to distinguish genuine visitors from automated or abusive activity. Google may process:IP addressReferrer URLWebsite keyBrowser and device informationOperating systemLanguage settingsDate and duration of accessCookies or local-storage informationInformation concerning interactions with the websiteGoogle may use the _GRECAPTCHA cookie or similar technologies for security and risk-analysis purposes.The purpose is to protect the website and its technical systems against automated access, spam, fraud and misuse.The processing of personal data is based on Article 6(1)(f) GDPR. Our legitimate interest is the security and integrity of the website.Where storage of or access to information on the visitor’s device is strictly necessary for the security function requested by the visitor, Section 25(2) TDDDG applies. Where the technology is not strictly necessary, it must be activated only after consent in accordance with Article 6(1)(a) GDPR and Section 25(1) TDDDG.Further information:https://policies.google.com/privacyInformation about Google services on partner websites:https://policies.google.com/technologies/partner-sitesCONTACT BY EMAIL OR TELEPHONEVisitors can contact us by email or telephone.If a visitor contacts us, we process the information provided in order to respond to the enquiry. This may include:NameEmail addressTelephone numberContent of the messageInformation concerning an artwork, commissioned work, exhibition or collaborationAny other information provided voluntarilyOur email correspondence is processed using Proton Mail, operated by:Proton AG Route de la Galaise 32 1228 Plan-les-Ouates Geneva SwitzerlandIf an enquiry concerns the possible purchase of an artwork, a commissioned work or another contractual relationship, the legal basis is Article 6(1)(b) GDPR.For general enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to messages concerning our artistic work and activities.Providing personal data is voluntary. Without the contact information required to respond, however, we may be unable to process the enquiry.Ordinary enquiry data is generally deleted no later than twelve months after the enquiry has been conclusively answered, unless:A contractual relationship arisesStatutory retention obligations applyThe data is required for the establishment, exercise or defence of legal claimsAnother legal basis permits or requires longer storageFurther information about Proton:https://proton.me/legal/privacyEXTERNAL LINKS AND SOCIAL MEDIAThis website contains ordinary external links to third-party platforms, including:Instagram and Facebook, operated by MetaLinkedInPinterestBehance, operated by AdobeMerely displaying an ordinary external link does not cause us to transmit personal data to the relevant platform.If a visitor clicks an external link, the visitor leaves our website. The relevant provider may then process personal data according to its own privacy policy. This may include:IP addressBrowser and device informationAccount informationInformation concerning the interaction with the platformIf the visitor is logged in to the relevant platform, the visit may be associated with that account.We do not control the independent processing carried out by these providers.Meta:https://privacycenter.instagram.com/policy/LinkedIn:https://www.linkedin.com/legal/privacy-policyPinterest:https://policy.pinterest.com/privacy-policyAdobe and Behance:https://www.adobe.com/privacy/policy.htmlCATEGORIES OF RECIPIENTSPersonal data may be disclosed, where necessary, to:Website hosting and platform providersTranslation service providersAnalytics providersMap and security service providersEmail providersTechnical contractorsLegal or professional advisersPublic authorities where disclosure is required by lawWe do not sell visitors’ personal data.We do not share personal data for cross-context behavioural advertising and do not use personal data for targeted advertising on this website.STORAGE PERIODSWe store personal data only for as long as necessary for the purposes described in this policy.The relevant period is determined by:The purpose of the processingThe duration of an enquiry or contractual relationshipStatutory retention obligationsApplicable limitation periodsSecurity requirementsThe need to establish, exercise or defend legal claimsData is deleted or anonymised when it is no longer required and no legal obligation or overriding justification requires continued storage.Specific cookie durations are described in this policy.The Squarespace Activity Log may display visitor activity for up to seven days.Ordinary enquiries are generally deleted no later than twelve months after completion unless continued storage is justified or legally required.Retention periods applied independently by Squarespace, Google, Weglot, Meta, LinkedIn, Pinterest, Adobe and Proton are governed by the respective providers’ policies where those providers act as independent controllers.DATA SUBJECT RIGHTS UNDER THE GDPRSubject to the statutory requirements, data subjects have the following rights:Right of access under Article 15 GDPRRight to rectification under Article 16 GDPRRight to erasure under Article 17 GDPRRight to restriction of processing under Article 18 GDPRRight to data portability under Article 20 GDPRRight to object under Article 21 GDPRRight to withdraw consent under Article 7(3) GDPRTo exercise these rights, contact:vossnick@protonmail.comWe may request information necessary to verify the identity of the person making the request.The exercise of these rights is subject to the statutory requirements, limitations and exceptions.RIGHT TO OBJECTWhere personal data is processed on the basis of Article 6(1)(f) GDPR, data subjects have the right, on grounds relating to their particular situation, to object at any time to the processing.We will then stop processing the personal data unless we demonstrate compelling legitimate grounds that override the interests, rights and freedoms of the data subject, or the processing is required for the establishment, exercise or defence of legal claims.RIGHT TO WITHDRAW CONSENTWhere processing is based on consent, consent may be withdrawn at any time with effect for the future.Cookie consent can be withdrawn through the cookie settings available on the website.Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.RIGHT TO LODGE A COMPLAINTData subjects have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.The supervisory authority responsible for our place of business is:Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen Kavalleriestraße 2–4 40213 Düsseldorf GermanyTelephone: +49 211 38424-0 Email: poststelle@ldi.nrw.de Website: https://www.ldi.nrw.deINFORMATION FOR VISITORS IN THE UNITED KINGDOMWhere the UK General Data Protection Regulation applies, visitors in the United Kingdom may have rights corresponding to access, correction, erasure, restriction, portability, objection and withdrawal of consent.Requests can be submitted to:vossnick@protonmail.comVisitors may also have the right to complain to the UK Information Commissioner’s Office:https://ico.org.ukINFORMATION FOR VISITORS IN SWITZERLANDWhere the Swiss Federal Act on Data Protection applies, visitors in Switzerland may exercise the rights available to them under applicable Swiss data protection law, including the right to request information about the processing of their personal data and, where the statutory requirements are met, correction or deletion.Requests can be submitted to:vossnick@protonmail.comInformation about Swiss data protection rights is available from the Federal Data Protection and Information Commissioner:https://www.edoeb.admin.chVISITORS IN OTHER COUNTRIESDepending on the visitor’s place of residence and the laws applicable to the particular processing, additional privacy rights may apply.Where applicable law provides a right to access, correct, delete or obtain a copy of personal data, or to object to particular processing, a request may be submitted to:vossnick@protonmail.comWe do not discriminate against visitors for exercising applicable privacy rights.CHILDREN’S PRIVACYThis website is not specifically directed at children.We do not knowingly request or collect personal data from children through registration, customer accounts, newsletters or similar functions.If we become aware that personal data relating to a child has been provided without the legally required authorisation, we will delete the data unless continued processing is permitted or required by law.AUTOMATED DECISION-MAKINGWe do not use automated decision-making that produces legal effects or similarly significantly affects a visitor within the meaning of Article 22 GDPR.Any automated technical risk assessment performed by security services such as Google reCAPTCHA is used solely for website security and does not result in a legally significant decision by us.SECURITYWe use appropriate technical and organisational measures to protect personal data against:Accidental or unlawful destructionLossAlterationUnauthorised disclosureUnauthorised accessMisuseThis website uses SSL/TLS encryption. An encrypted connection can generally be recognised by the “https” address and the lock symbol displayed by the browser.Nevertheless, no transmission of information over the internet can be guaranteed to be completely secure.CHANGES TO THIS POLICYWe may update this Privacy and Cookie Policy if the website, the services used or the applicable legal requirements change.The current version is always made available on this website. The date of the latest update appears at the beginning of the policy.
