PRIVACY POLICY
Last updated: October 10, 2026
1. General Information
SQUAREFORM GmbH respects your privacy and is committed to protecting your personal data.This Privacy Policy explains how personal data is collected, processed, and protected when you visit our website at https://squareform.studio or contact us.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The controller responsible for processing personal data is:SQUAREFORM GmbH
Hermann-Mächtig-Strasse 10
14469 Potsdam
Germany
Phone: +49 178 63 26 359
Email: hello@squareform.studio
Website: https://squareform.studio
For questions about privacy or the processing of your personal data, please contact us using the details above.
3. Website Hosting and Technical Infrastructure
Our website is created and hosted using Cargo, a website publishing platform provided by Cargo Collective, Inc.Cargo Collective, Inc.
3006 N. Coolidge Avenue
Los Angeles, CA 90039
United States
Website: https://cargo.site
When you access our website, technical information may be processed to deliver website content, maintain availability, and ensure the security and proper functioning of the website.
This may include:
- IP address
- Browser type and version
- Operating system
- Date and time of access
- Referring website
- Requested resources and technical connection information
The legal basis for processing technically necessary information is Article 6(1)(f) GDPR. Our legitimate interest is to provide a secure, reliable, and functional website.
Cargo acts as a service provider and processes certain personal data on our behalf.
Further information is available in Cargo's Privacy Policy and Data Processing Agreement.
4. International Data Transfers
Our website is hosted through Cargo, a service provider based in the United States.As part of website operation, personal data may be transferred to or processed in countries outside the European Economic Area.
Where required, appropriate safeguards are used to protect personal data in accordance with applicable data protection laws.
Cargo's Data Processing Agreement incorporates the European Commission's Standard Contractual Clauses for relevant international data transfers.
Further information about these safeguards can be found in Cargo's Data Processing Agreement.
5. Cookies and Similar Technologies
Our website does not intentionally use Google Analytics or comparable third-party analytics services.We do not use advertising tracking technologies for personalized advertising.
However, our website platform may use technically necessary cookies or similar technologies to enable website functionality, security, or operation.
Where cookies or comparable technologies are strictly necessary for providing the website, their use may be permitted without prior consent under applicable law.
Any non-essential cookies or tracking technologies, if introduced in the future, will be subject to applicable consent requirements.
You can manage or delete cookies through your browser settings.
6. Contact and Communication
If you contact us by email or telephone, we process the personal data you voluntarily provide.This may include your name, email address, telephone number, and the content of your communication.
We use this information exclusively to respond to your inquiry, communicate with you, and, where applicable, prepare or perform contractual services.
Depending on the nature of your inquiry, processing is based on Article 6(1)(b) GDPR, where it concerns contractual or pre-contractual measures, or Article 6(1)(f) GDPR, based on our legitimate interest in responding to business inquiries.
We retain correspondence only for as long as necessary for its purpose or as required by applicable statutory retention obligations.
7. Internal Creative Research and Pinterest API
SQUAREFORM GmbH may use the Pinterest API and compatible Model Context Protocol (MCP) tools for internal creative research and concept development.These tools are intended exclusively for internal use and are not offered as publicly accessible services.
The purpose is to discover and organize visual references, inspiration boards, and other creative research materials.
Depending on the permissions granted and the functionality available through the Pinterest API, the integration may process:
- Pinterest account identifiers
- Pin and board information
- Publicly available content and associated metadata
- Information required to authenticate API access
Access to Pinterest is authorized through its official authentication mechanisms.
Authentication credentials and access tokens are intended to be stored securely within our internal technical environment.
The integration is not intended for advertising tracking, profiling individuals, or collecting personal information for marketing purposes.
Where personal data is processed, this is intended to be limited to what is necessary for internal creative research, based on our legitimate interests under Article 6(1)(f) GDPR, subject to any overriding rights and interests of affected individuals.
Any processing through the Pinterest API must comply with Pinterest's applicable Developer Guidelines and API Terms.
Further information about Pinterest's data practices is available at https://policy.pinterest.com/privacy-policy.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or to comply with legal obligations.The applicable retention period depends on the type of information and the purpose of processing.
For example, business correspondence may be retained where statutory commercial or tax retention obligations apply.
Technical website data is retained according to the operational requirements and applicable retention policies of our hosting provider.
When personal data is no longer required and no legal obligation justifies further retention, it is deleted or anonymized as appropriate.
9. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or loss.Our website uses HTTPS encryption to protect information transmitted between your browser and the website.
Our hosting provider implements additional technical and organizational security measures as described in its Data Processing Agreement.
No method of electronic transmission or storage can be guaranteed to be completely secure.
10. Your Rights Under the GDPR
Subject to the conditions and limitations of applicable data protection law, you have the following rights:- Right of access (Article 15 GDPR): Request information about the personal data we process concerning you.
- Right to rectification (Article 16 GDPR): Request correction of inaccurate or incomplete personal data.
- Right to erasure (Article 17 GDPR): Request deletion of personal data where applicable.
- Right to restriction (Article 18 GDPR): Request restrictions on certain processing activities.
- Right to data portability (Article 20 GDPR): Receive certain personal data in a structured, commonly used, machine-readable format.
- Right to object (Article 21 GDPR): Object to processing based on legitimate interests or other applicable grounds.
- Right to withdraw consent (Article 7(3) GDPR): Withdraw consent at any time where processing is based on consent.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, please contact hello@squareform.studio.
11. Right to Object
Where we process personal data based on Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation.We will cease processing the relevant personal data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or processing is necessary for the establishment, exercise, or defense of legal claims.
Where personal data is processed for direct marketing, you may object at any time.
12. External Links
Our website may contain links to external websites or online services.When you follow these links, the privacy practices of the respective external provider apply.
We encourage you to review the privacy policies of external websites before providing personal information.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our website, technical infrastructure, legal requirements, or data processing practices.The current version will be published at:
https://squareform.studio/privacy-policy