Privacy policy

1. Controller

Timo Sonnenschein, Coconana Studios, Torellstr. 6, 10243 Berlin, Germany, Email: info@coconana-studios.com

2. In short

This website uses no cookies, no tracking and no analytics, and it loads nothing from other providers (such as fonts, scripts or videos from third-party servers). Personal data is processed only where this is technically necessary to provide the website, or when you contact us.

3. Hosting

The website runs on a server of OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider. The server is located in France (EU).

4. Visiting the website

When you visit the website, our server processes the connection data that is technically required (IP address, date and time, requested page, browser type) in order to deliver the page to your device and to encrypt the connection. We do not keep access logs; this data is only held in memory while your request is being handled. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is providing the website securely and reliably.

5. Contacting us by email

If you contact us by email, we process the information you send us (email address, name, content of your message) in order to handle your enquiry. Emails are stored on our own mail server at the hosting provider named above and are deleted once they are no longer needed for your enquiry and no statutory retention periods apply. The legal basis is Art. 6(1)(b) GDPR for enquiries relating to a contract, and Art. 6(1)(f) GDPR for all other enquiries.

Our mail server records connection data (IP address of the sending server, sender and recipient address, date and time) in order to deliver messages and to protect against spam and abuse; incoming messages are checked for spam automatically. These logs are deleted after 14 days. IP addresses that repeatedly attempt abusive connections are blocked. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a secure and reliable mail service.

6. Backups

To protect against data loss, our server, including stored emails, is backed up regularly to backup storage of the hosting provider named above in France (EU). Backups are kept for 30 days and then deleted automatically, so deleted data may remain in backups for up to 30 days.

7. Encryption

For security reasons this website uses TLS encryption, which you can recognise by “https://” in the address bar.

8. Your rights

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict the processing of your data (Art. 18 GDPR)
• receive your data in a portable format (Art. 20 GDPR)
• object to the processing of your data (Art. 21 GDPR)

To do so, write to the email address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for our location: the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

Last updated: November 2026