Privacy policy

NewStep UG (haftungsbeschränkt)
Thierschstraße 20
80538 München
Deutschland

Email: info@newstep-talents.com
Phone: +49 (0)174 8715132

We process personal data only where necessary to provide this site, communicate with you, take pre-contractual steps, perform a contract, comply with legal duties or pursue legitimate interests. The legal bases are Article 6(1)(b), (c), (f) and, where consent is requested, (a) GDPR.

This website is provided through ChatGPT Sites. OpenAI group infrastructure providers and Cloudflare may process IP address, time, requested URL, referrer, browser, device, operating system and security or error data to deliver and protect the site. The legal basis is our legitimate interest in secure and reliable operation.

More information: OpenAI Privacy Policy and Cloudflare Privacy Policy.

Language and display mode are stored locally in your browser. Our public website currently does not use its own analytics, advertising or marketing cookies. Stripe may use necessary technologies on its separately hosted checkout page under its own policy.

When you contact us by email or through the contact form, we process your name, email address, talent field, selected plan, message, time and technical delivery data to respond and, where relevant, prepare or perform a contract.

For a free talent-profile application, we additionally process location, short biography, goals and any voluntary portfolio, social-media or file links on the basis of your consent to the review. Acceptance is not guaranteed; nothing is published automatically or without separate coordination and approval. Applications that are not accepted are normally deleted no later than six months after the review ends unless you consent to longer retention or a legitimate evidentiary interest applies.

We use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, to send contact and transactional email. Resend processes sender and recipient addresses, message content, and delivery information. Transfers to the United States rely on safeguards provided in Resend’s data processing agreement, including EU Standard Contractual Clauses. More information: Resend Privacy Policy and Resend Data Processing Addendum.

We use Stripe for paid orders. Stripe may process contact, billing, payment, product, price, tax, device and fraud-prevention data.

After payment confirmation, Stripe sends technical order and status information to us through a secured webhook. We store the order number, Stripe references, plan, amount, payment status and processing status. Through the personal project questionnaire, we process the content, goals, design preferences and share links required to perform the contract. Legal bases are contract performance, legal obligations and secure payment processing. Full card or bank details are not stored on our servers.

More information: Stripe Privacy Policy.

When you use our order, withdrawal or cancellation functions, we store your contact and contract information, declaration, timestamp and reference number in the website database. This is required to process and document your request.

To create profiles, websites, branding or social content, we process the text, media, links, professional information and preferences you provide. Publication is limited to the agreed scope. If content includes other people, you must have the required rights and permissions.

Recipients can include hosting, infrastructure, payment, email, domain and technical providers. Transfers outside the EEA take place only on an adequacy decision, EU Standard Contractual Clauses or another lawful basis.

Data is retained only as long as needed for its purpose. Contract, payment and invoice data is retained for statutory commercial and tax periods. Withdrawal and cancellation records are retained for the contract term and relevant limitation or evidence periods. Hosted sites are normally archived for 60 days after termination before deletion, unless continuation or transfer is agreed.

Subject to legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection. You may withdraw consent for the future and complain to a supervisory authority. Contact info@newstep-talents.com. Our competent authority is the Bavarian State Office for Data Protection Supervision, www.lda.bayern.de.

Paid contracts are generally concluded only with adults or with the approval or representation of a guardian. We do not make decisions producing legal or similarly significant effects solely by automated means. Stripe may use its own automated fraud-prevention processes.

We update this policy when our website, providers or legal requirements change. The version published here applies.