Privacy Policy

The controller responsible for data processing on this website is:

Leo Stevovic
Filipa Kovačevića bb
85310 Budva, Montenegro
contact@apexstackstudio.com

We process personal data of our users only to the extent necessary to provide a functional website along with our content and services, or where we have a legal basis or your consent. We do not sell data and do not pass it on for advertising purposes.

When you send us an inquiry via the contact form, we process your name, email address, optionally company and phone number, your preferred contact method and project type, and your message. We send a confirmation email containing a confirmation link (double opt-in) to the address provided. This ensures the address really belongs to you and protects third parties from messages sent abusively in their name. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries and preventing abuse).

Using our client portal requires an account, which is only ever created by invitation. In doing so, we process your email address, your name and project-related data (project status, files, quotes, invoices and messages) in order to provide you with your project's progress. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Sign-in relies on technically necessary session cookies, without which a secure login would not be possible.

This website, the associated database, file storage and email delivery run on servers we rent from the following provider:

Gericke KG (MC Host24), Mühlenstr. 8a, 14167 Berlin, Deutschland

A data processing agreement pursuant to Art. 28 GDPR is in place with this provider. The servers are located in Germany. The data processed through this hosting is not transferred to third countries outside the EU or EEA. The only exception is our internal push notifications to our own devices: these are delivered via the Apple Push Notification service (Apple Inc., One Apple Park Way, Cupertino, CA, USA). Only a generic notification without the inquirer's personal data is transmitted, and the transfer is otherwise covered by the safeguards provided by Apple.

For internal operations we use push notifications to our own device (Apple Push Notification service, Apple Inc.). Only a subject line and a short note are transmitted so that we can respond to your inquiry promptly. No processing takes place on your device.

We store personal data only for as long as necessary for the respective purpose:

• Contact form inquiries that do not lead to an engagement: deleted no later than 12 months after the last contact.
• Unconfirmed inquiries (confirmation link never clicked): deleted after 30 days.
• Client and project data during an ongoing engagement: for its duration.
• Records relevant under tax or commercial law (in particular invoices): 10 years in line with statutory retention periods.
• Server log data: 14 days.

We use only technically necessary cookies, for example to keep you signed in after logging into the client portal. These cookies are required for the website to function and are exempt from consent. We do not use analytics, tracking or marketing cookies and do not embed any external advertising networks.

You have the right at any time to:

• request information about your personal data processed by us under Art. 15 GDPR,
• request correction of inaccurate data under Art. 16 GDPR,
• request deletion of your data under Art. 17 GDPR, unless a statutory retention obligation applies,
• request restriction of processing under Art. 18 GDPR,
• receive your data in a common format under Art. 20 GDPR (data portability),
• object to the processing of your data under Art. 21 GDPR,
• withdraw consent at any time under Art. 7(3) GDPR.

To exercise any of these rights, simply write to contact@apexstackstudio.com.

You also have the right to lodge a complaint with the data protection supervisory authority responsible for you if you believe that the processing of your personal data violates applicable law.

We update this privacy policy whenever changes to our services or the legal situation make it necessary. The version available on this page applies.