PRIVACY POLICY
1.CONTROLLER
The controller responsible for the processing of personal data through this website within the meaning of the General Data Protection Regulation (GDPR) is:
PUBLICA
Olena Tolstova
Graphic and Communication Design
Schaufußstr. 48
01277 Dresden
Germany
Phone: +49 1512 404-68-87
Email: publica@publica.media
2.GENERAL INFORMATION & DATA PROCESSING
We process personal data only to the extent necessary to operate and secure this website, respond to enquiries, initiate and perform contractual relationships and, where you have provided your consent, for analytics and marketing purposes.
Personal data means any information relating to an identified or identifiable natural person.
Depending on the respective purpose, the processing of personal data is based in particular on:
3.HOSTING & WEBSITE PLATFORM
This website is operated using the Tilda website platform.
When you access the website, technical information may be processed automatically. This may include:
The purpose of this processing is to provide the website technically, maintain its security and stability and enable the functions requested by users.
The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in the secure and reliable operation of our website.
Tilda states in its current Data Processing Agreement that users operating websites and collecting third-party data act as controllers, while Tilda acts as processor. Tilda also lists infrastructure and subprocessors and provides safeguards for relevant international transfers, including Standard Contractual Clauses for EU/EEA data.
Where personal data is transferred outside the European Union or European Economic Area, such transfers are made only in accordance with the requirements of Art. 44 et seq. GDPR, including, where applicable, adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.
4.SERVER LOG FILES
When you visit this website, technical information may automatically be recorded in server log files.
This information may include:
The legal basis is Art. 6(1)(f) GDPR.
Log data is retained only for as long as necessary for these purposes, unless a longer retention period is required for security, legal or evidentiary reasons.
5.CONTACT & PROJECT INQUIRIES
If you contact us through a contact form, by email or through another communication channel provided by us, we process the information you provide.
This may include:
The legal basis is Art. 6(1)(b) GDPR where the communication relates to pre-contractual measures or a contractual relationship.
For general business enquiries that do not yet relate to a specific contractual request, processing may additionally be based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to business communications.
6.FILE UPLOADS
If you upload files through our website, such as briefs, reference material, existing brand assets, images, documents or other project-related materials, we process these files solely for the purpose of responding to your enquiry or performing the requested project.
Please do not submit special categories of personal data or other sensitive personal information unless this is strictly necessary for the relevant project and has been expressly agreed with us.
7.COOKIES & CONSENT MANAGEMENT
Our website uses strictly necessary technologies and, subject to your consent, analytics and marketing technologies.
Strictly necessary cookies or similar technologies may be used without separate consent where they are strictly necessary to provide a digital service or function expressly requested by you.
Optional analytics and marketing technologies are activated only after you have given the required consent through our cookie consent management tool.
Under Section 25 TDDDG, storing information on a user's device or accessing information already stored on that device generally requires prior informed consent unless one of the statutory exceptions applies.
Where consent is required for storing or accessing information on your device, the legal basis is Section 25(1) TDDDG.
Where personal data is subsequently processed on the basis of your consent, the legal basis is Art. 6(1)(a) GDPR.
You can choose between:
Accept All
to allow all optional analytics and marketing technologies;
Reject All
to reject all optional technologies requiring consent;
Settings
to select individual categories according to your preferences.
You may change or withdraw your consent at any time with effect for the future through the Cookie Settings available on our website.
Rejecting optional cookies does not prevent access to the essential functions of the website.
8.GOOGLE ANAYTICS 4
Subject to your consent, we use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics 4 enables us to analyse the use of our website and improve its content, usability and performance.
Depending on your consent settings and our technical configuration, Google Analytics may process information including:
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time through the Cookie Settings.
Google may process data outside the European Union or European Economic Area. Where such transfers take place, they are carried out using the applicable safeguards under Art. 44 et seq. GDPR.
9.GOOGLE ADS CONVERSION TRACKING
Subject to your consent, we use Google Ads Conversion Tracking, a service provided by Google Ireland Limited.
Conversion tracking helps us determine whether users who interact with our advertisements subsequently perform certain actions on our website.
Such actions may include, for example:
Depending on the configuration, Google Ads may process information including:
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
10.GOOGLE ADS REMARKETING PERSONALISED ADVERTISING
Where you have provided your consent, we may also use Google Ads for remarketing, audience creation and personalised advertising.
This may allow us to show advertisements to users who have previously interacted with our website and to evaluate the effectiveness of advertising campaigns.
Google requires advertisers receiving data from users in the EEA to collect appropriate consent and transmit relevant consent signals where Google services are used for measurement, remarketing and personalised advertising.
These functions are activated only after the required marketing consent has been provided.
11.GOOGLE CONSENT MODE
We use Google Consent Mode to communicate your consent choices to Google services.
Depending on your selection in our cookie consent tool, the following consent signals may be used:
Google states that both ad_user_data and ad_personalization must be granted for personalised advertising functionality.
Consent Mode does not replace your consent choice. It is a technical mechanism used to communicate and respect the choices you make through our consent management tool.
12.META PIXEL
Subject to your consent, we use the Meta Pixel provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland
The Meta Pixel enables us to measure the effectiveness of advertisements displayed on Facebook and Instagram, evaluate advertising campaigns and, where you have consented, create advertising audiences for remarketing purposes.
Depending on the configuration, the Meta Pixel may process information including:
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
Meta may process certain data outside the European Union or European Economic Area. Where such transfers take place, appropriate safeguards under applicable data protection law are used.
13.SOCIAL MEDIA LINKS
Our website contains links to our profiles on social media platforms, in particular Instagram and Facebook.
If these are simple external links, no direct connection to the respective platform is established merely by loading our website.
A connection to the social media provider is generally established only when you actively open the relevant link.
The processing of personal data on the respective social media platform is governed by the privacy policy and terms of the respective provider.
This section is separate from the Meta Pixel described above.
14.WEB FONTS
Where technically possible, fonts used on this website are hosted locally or delivered through the website infrastructure.
This is intended to avoid establishing a direct connection to external font providers merely for the purpose of loading a font.
If an external font service is introduced in the future, this Privacy Policy will be updated accordingly where required.
15.RECIPIENTS of PERSONAL DATA
We may use external service providers in connection with the technical operation of the website, communication, analytics and advertising.
Recipients may include, in particular:
Where a service provider processes personal data on our behalf, such processing is carried out under an appropriate data processing arrangement where required by law.
Where providers process data as independent controllers or joint controllers, the respective contractual and legal arrangements apply.
We do not sell personal data.
16.INTERNATIONAL DATA TRANSFERS
When using certain service providers, personal data may be processed outside the European Union or European Economic Area.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met.
Depending on the recipient and destination country, the legal basis for such transfer may include:
17. Storage Period
We retain personal data only for as long as necessary for the respective purpose.
Where statutory commercial, accounting or tax retention obligations apply, personal data may be stored for the corresponding statutory retention period.
Personal data may also be retained where necessary to establish, exercise or defend legal claims.
The retention periods of individual cookies and tracking technologies can be found in our Cookie Settings.
18.YOUR RIGHTS
Subject to the applicable legal requirements, you have the right to:
To exercise your rights, please contact:
publica@publica.media
19. RIGHT TO OBJECT
Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
20.RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible at the controller's place of establishment is:
Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
Email: post@sdtb.sachsen.de
The authority currently lists this Dresden visitor address and email address on its official website.
21.DATA SECURITY
We implement appropriate technical and organisational measures to protect personal data against:
Please note that no transmission of data over the Internet can be guaranteed to be completely secure.
22.CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where the functions of the website, the services we use, our processing activities or applicable legal requirements change.
The current version is available on this website.
Last updated: September 2026
The controller responsible for the processing of personal data through this website within the meaning of the General Data Protection Regulation (GDPR) is:
PUBLICA
Olena Tolstova
Graphic and Communication Design
Schaufußstr. 48
01277 Dresden
Germany
Phone: +49 1512 404-68-87
Email: publica@publica.media
2.GENERAL INFORMATION & DATA PROCESSING
We process personal data only to the extent necessary to operate and secure this website, respond to enquiries, initiate and perform contractual relationships and, where you have provided your consent, for analytics and marketing purposes.
Personal data means any information relating to an identified or identifiable natural person.
Depending on the respective purpose, the processing of personal data is based in particular on:
- Art. 6(1)(b) GDPR, where processing is necessary to take steps at your request prior to entering into a contract or to perform a contract;
- Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests and such interests are not overridden by your interests or fundamental rights and freedoms;
- Art. 6(1)(a) GDPR, where you have given your consent.
3.HOSTING & WEBSITE PLATFORM
This website is operated using the Tilda website platform.
When you access the website, technical information may be processed automatically. This may include:
- IP address;
- date and time of access;
- pages requested;
- browser type and version;
- operating system;
- device information;
- referrer URL;
- other technical log data.
The purpose of this processing is to provide the website technically, maintain its security and stability and enable the functions requested by users.
The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in the secure and reliable operation of our website.
Tilda states in its current Data Processing Agreement that users operating websites and collecting third-party data act as controllers, while Tilda acts as processor. Tilda also lists infrastructure and subprocessors and provides safeguards for relevant international transfers, including Standard Contractual Clauses for EU/EEA data.
Where personal data is transferred outside the European Union or European Economic Area, such transfers are made only in accordance with the requirements of Art. 44 et seq. GDPR, including, where applicable, adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.
4.SERVER LOG FILES
When you visit this website, technical information may automatically be recorded in server log files.
This information may include:
- IP address;
- date and time of access;
- page requested;
- browser type and version;
- operating system;
- referrer URL;
- device information;
- technical request and error information.
The legal basis is Art. 6(1)(f) GDPR.
Log data is retained only for as long as necessary for these purposes, unless a longer retention period is required for security, legal or evidentiary reasons.
5.CONTACT & PROJECT INQUIRIES
If you contact us through a contact form, by email or through another communication channel provided by us, we process the information you provide.
This may include:
- name;
- email address;
- telephone number;
- messenger contact details;
- company information;
- project information;
- budget information;
- project timeline;
- messages and enquiries;
- files and other materials voluntarily submitted by you.
The legal basis is Art. 6(1)(b) GDPR where the communication relates to pre-contractual measures or a contractual relationship.
For general business enquiries that do not yet relate to a specific contractual request, processing may additionally be based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to business communications.
6.FILE UPLOADS
If you upload files through our website, such as briefs, reference material, existing brand assets, images, documents or other project-related materials, we process these files solely for the purpose of responding to your enquiry or performing the requested project.
Please do not submit special categories of personal data or other sensitive personal information unless this is strictly necessary for the relevant project and has been expressly agreed with us.
7.COOKIES & CONSENT MANAGEMENT
Our website uses strictly necessary technologies and, subject to your consent, analytics and marketing technologies.
Strictly necessary cookies or similar technologies may be used without separate consent where they are strictly necessary to provide a digital service or function expressly requested by you.
Optional analytics and marketing technologies are activated only after you have given the required consent through our cookie consent management tool.
Under Section 25 TDDDG, storing information on a user's device or accessing information already stored on that device generally requires prior informed consent unless one of the statutory exceptions applies.
Where consent is required for storing or accessing information on your device, the legal basis is Section 25(1) TDDDG.
Where personal data is subsequently processed on the basis of your consent, the legal basis is Art. 6(1)(a) GDPR.
You can choose between:
Accept All
to allow all optional analytics and marketing technologies;
Reject All
to reject all optional technologies requiring consent;
Settings
to select individual categories according to your preferences.
You may change or withdraw your consent at any time with effect for the future through the Cookie Settings available on our website.
Rejecting optional cookies does not prevent access to the essential functions of the website.
8.GOOGLE ANAYTICS 4
Subject to your consent, we use Google Analytics 4, a web analytics service provided by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics 4 enables us to analyse the use of our website and improve its content, usability and performance.
Depending on your consent settings and our technical configuration, Google Analytics may process information including:
- page views;
- sessions;
- interactions with website content;
- referring sources;
- date and time of visits;
- browser information;
- device information;
- operating system;
- approximate geographic information;
- technical identifiers;
- conversion and user journey information.
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time through the Cookie Settings.
Google may process data outside the European Union or European Economic Area. Where such transfers take place, they are carried out using the applicable safeguards under Art. 44 et seq. GDPR.
9.GOOGLE ADS CONVERSION TRACKING
Subject to your consent, we use Google Ads Conversion Tracking, a service provided by Google Ireland Limited.
Conversion tracking helps us determine whether users who interact with our advertisements subsequently perform certain actions on our website.
Such actions may include, for example:
- visiting a defined page;
- submitting a contact form;
- sending a project enquiry;
- registering;
- completing another defined conversion action.
Depending on the configuration, Google Ads may process information including:
- advertising identifiers;
- browser and device information;
- IP address;
- page views;
- advertising interactions;
- conversion events;
- referring URLs;
- campaign information;
- timestamps.
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
10.GOOGLE ADS REMARKETING PERSONALISED ADVERTISING
Where you have provided your consent, we may also use Google Ads for remarketing, audience creation and personalised advertising.
This may allow us to show advertisements to users who have previously interacted with our website and to evaluate the effectiveness of advertising campaigns.
Google requires advertisers receiving data from users in the EEA to collect appropriate consent and transmit relevant consent signals where Google services are used for measurement, remarketing and personalised advertising.
These functions are activated only after the required marketing consent has been provided.
11.GOOGLE CONSENT MODE
We use Google Consent Mode to communicate your consent choices to Google services.
Depending on your selection in our cookie consent tool, the following consent signals may be used:
- analytics_storage;
- ad_storage;
- ad_user_data;
- ad_personalization.
Google states that both ad_user_data and ad_personalization must be granted for personalised advertising functionality.
Consent Mode does not replace your consent choice. It is a technical mechanism used to communicate and respect the choices you make through our consent management tool.
12.META PIXEL
Subject to your consent, we use the Meta Pixel provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
Ireland
The Meta Pixel enables us to measure the effectiveness of advertisements displayed on Facebook and Instagram, evaluate advertising campaigns and, where you have consented, create advertising audiences for remarketing purposes.
Depending on the configuration, the Meta Pixel may process information including:
- page views;
- interactions with website content;
- browser information;
- device information;
- IP address;
- referrer information;
- technical identifiers;
- advertising identifiers;
- timestamps;
- conversion events.
- visiting defined pages;
- submitting a form;
- sending an enquiry;
- registering;
- completing another defined conversion action.
The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for subsequent processing of personal data is Art. 6(1)(a) GDPR.
Meta may process certain data outside the European Union or European Economic Area. Where such transfers take place, appropriate safeguards under applicable data protection law are used.
13.SOCIAL MEDIA LINKS
Our website contains links to our profiles on social media platforms, in particular Instagram and Facebook.
If these are simple external links, no direct connection to the respective platform is established merely by loading our website.
A connection to the social media provider is generally established only when you actively open the relevant link.
The processing of personal data on the respective social media platform is governed by the privacy policy and terms of the respective provider.
This section is separate from the Meta Pixel described above.
14.WEB FONTS
Where technically possible, fonts used on this website are hosted locally or delivered through the website infrastructure.
This is intended to avoid establishing a direct connection to external font providers merely for the purpose of loading a font.
If an external font service is introduced in the future, this Privacy Policy will be updated accordingly where required.
15.RECIPIENTS of PERSONAL DATA
We may use external service providers in connection with the technical operation of the website, communication, analytics and advertising.
Recipients may include, in particular:
- website and hosting providers;
- IT service providers;
- communication and email providers;
- analytics providers;
- advertising platforms.
Where a service provider processes personal data on our behalf, such processing is carried out under an appropriate data processing arrangement where required by law.
Where providers process data as independent controllers or joint controllers, the respective contractual and legal arrangements apply.
We do not sell personal data.
16.INTERNATIONAL DATA TRANSFERS
When using certain service providers, personal data may be processed outside the European Union or European Economic Area.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met.
Depending on the recipient and destination country, the legal basis for such transfer may include:
- an adequacy decision of the European Commission;
- an applicable recognised data-transfer framework;
- Standard Contractual Clauses approved by the European Commission;
- another legally recognised transfer mechanism.
17. Storage Period
We retain personal data only for as long as necessary for the respective purpose.
Where statutory commercial, accounting or tax retention obligations apply, personal data may be stored for the corresponding statutory retention period.
Personal data may also be retained where necessary to establish, exercise or defend legal claims.
The retention periods of individual cookies and tracking technologies can be found in our Cookie Settings.
18.YOUR RIGHTS
Subject to the applicable legal requirements, you have the right to:
- obtain information about your personal data;
- request rectification of inaccurate personal data;
- request deletion of personal data;
- request restriction of processing;
- receive personal data in a portable format where the statutory requirements are met;
- object to certain processing activities;
- withdraw consent at any time with effect for the future.
To exercise your rights, please contact:
publica@publica.media
19. RIGHT TO OBJECT
Where we process your personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
20.RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible at the controller's place of establishment is:
Sächsische Datenschutz- und Transparenzbeauftragte
Maternistraße 17
01067 Dresden
Germany
Email: post@sdtb.sachsen.de
The authority currently lists this Dresden visitor address and email address on its official website.
21.DATA SECURITY
We implement appropriate technical and organisational measures to protect personal data against:
- accidental or unlawful loss;
- destruction;
- alteration;
- unauthorised disclosure;
- unauthorised access;
- other unlawful processing.
Please note that no transmission of data over the Internet can be guaranteed to be completely secure.
22.CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where the functions of the website, the services we use, our processing activities or applicable legal requirements change.
The current version is available on this website.
Last updated: September 2026