Privacy Policy – Élan Social Studios

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Elan Social Studios LLC
55 NE 5th Street
Miami, FL 33132
USA
Email: elansocialstudios@gmail.com

2. EU Representative

As we are not established in the European Union, we have appointed the following representative in the EU pursuant to Art. 27 GDPR. You and the supervisory authorities may contact our representative on all matters relating to the processing of personal data:

Anne Schmidt
Sonnhalde 28
88709 Meersburg
Germany

3. Overview

We process personal data only to the extent necessary to provide a functional website, to respond to inquiries and to perform our services. The legal bases we rely on are:

  • Consent (Art. 6(1)(a) GDPR), e.g. for analytics and marketing cookies.

  • Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), e.g. when you request a proposal or become our client.

  • Legal obligations (Art. 6(1)(c) GDPR), e.g. retention obligations under tax law.

  • Legitimate interests (Art. 6(1)(f) GDPR), e.g. the secure and efficient operation of our website and communication with business contacts.

Where we store information on your device or access information already stored on it (e.g. cookies), we do so only with your consent pursuant to Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and comparable laws, unless this is strictly necessary to provide the website.

4. Hosting and Server Log Files

Our website is hosted by Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA ("Squarespace"). When you visit our website, Squarespace automatically collects technical data that your browser transmits, such as your IP address, date and time of access, pages visited, referrer URL, browser type and operating system.

This data is necessary to deliver the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free and secure provision of our website. Squarespace processes this data on our behalf under a data processing agreement. Fonts displayed on our website are provided through Squarespace and may be loaded from Squarespace's or Adobe's servers.

For more information, see Squarespace's privacy policy: https://www.squarespace.com/privacy

5. Cookies and Consent Management

Our website uses cookies and similar technologies. Strictly necessary cookies are set to provide the website (e.g. to store your consent choices). All other cookies, in particular for analytics and marketing, are only set after you have given your consent.

We use the consent management platform Cookiebot, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to obtain and document your consent. Cookiebot stores your consent choice, a consent ID, the date and time of consent and anonymized technical data. The legal basis is Art. 6(1)(c) GDPR, as we are legally required to obtain and demonstrate consent.

You can change or withdraw your consent at any time with effect for the future via the "Cookie Preferences" link in the footer of our website.

6. Contact Form and Email

When you contact us via our contact form or by email, we process the data you provide (e.g. name, company, email address, phone number and your message) in order to handle your inquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in responding to inquiries addressed to us.

We delete your data once your inquiry has been fully processed and there is no further need for storage, unless statutory retention obligations apply. Contact form submissions are processed via Squarespace (see Section 4).

7. Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to analyze how visitors use our website, e.g. pages visited, time spent, device and browser information, approximate location and the source of your visit.

In Google Analytics 4, IP addresses are not logged or stored. The data collected is generally transmitted to and stored on Google servers, which may also be located in the USA (Google LLC). We have concluded a data processing agreement with Google. Event data is deleted after 2 months and user data after 14 months; the retention period for user data is reset with each new visit.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the "Cookie Preferences" link. We use Google Consent Mode, which means Google tags only set cookies if you have consented.

More information: https://policies.google.com/privacy

8. Google Ads, Conversion Tracking and Remarketing

With your consent, we use Google Ads, an online advertising service provided by Google Ireland Limited (see Section 7), including the following functions:

  • Conversion tracking: When you reach our website via a Google ad, a cookie is set that allows us and Google to see that someone clicked on an ad and later performed a certain action (e.g. submitted the contact form). We do not receive any information that personally identifies you.

  • Remarketing: Google may use cookies to show you our ads on other websites and in Google services based on your previous visit to our website.

Data may be transmitted to Google LLC in the USA. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the "Cookie Preferences" link. You can also manage personalized advertising in your Google account settings: https://adssettings.google.com

More information: https://policies.google.com/technologies/ads

9. Clients and Business Contacts

When you request a proposal or become our client, we process the data of you and your contact persons that is required to prepare and perform the contract, such as names, business contact details, communication, contract and billing data. The legal basis is Art. 6(1)(b) GDPR and, for business contacts acting on behalf of a company, Art. 6(1)(f) GDPR. We retain contract and billing data for as long as required by applicable tax and commercial law.

Where we process personal data on behalf of our clients (e.g. data from their websites or advertising accounts), we act as a processor and conclude a separate data processing agreement with the client.

10. Processing in the USA and Third-Country Transfers

Our company is based in the USA. Personal data that you provide to us directly, or that we collect through our website, is therefore processed in the USA. The GDPR applies to this processing insofar as we offer our services to persons in the EU or monitor their behavior on our website.

Where we use service providers in the USA or other countries outside the EU/EEA, transfers are based on:

  • the EU-U.S. Data Privacy Framework, where the recipient is certified under it (Art. 45 GDPR), and

  • EU Standard Contractual Clauses (Art. 46(2)(c) GDPR) as an additional or alternative safeguard.

Please note that the USA does not provide the same level of data protection as the EU, and US authorities may, under certain circumstances, access personal data.

11. Storage Duration

Unless a specific storage period is stated in this Privacy Policy, we store personal data only for as long as necessary for the purpose for which it was collected. If you withdraw your consent or request deletion, we delete your data unless we are legally required to retain it or have another legal basis for storage.

12. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw your consent at any time with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please contact us at elansocialstudios@gmail.com or our EU representative (see Section 2).

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR).

13. Right to Object

Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21(1) GDPR). If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where we process your data for direct marketing purposes, you have the right to object at any time; we will then no longer process your data for this purpose (Art. 21(2) GDPR).

14. Obligation to Provide Data and Automated Decision-Making

You are not obliged to provide personal data. However, without certain data we cannot respond to your inquiry or conclude a contract with you. We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Data Security

Our website uses SSL/TLS encryption to protect the transmission of your data. We take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in our services or legal requirements. The current version is always available on our website.

Last updated: October 6, 2026