Website privacy policy

Last updated: 2026-11-04

The short version: This website sets no cookies, runs no analytics, shows no advertising and loads nothing from other companies' servers. The only data that arises is the technical access log kept by the hosting provider.

The apps have their own policies: Malai · Cnc2Go.

Controller

Controller within the meaning of Article 4 (7) GDPR:

No data protection officer has been appointed; the conditions of Article 37 GDPR and § 38 of the German Federal Data Protection Act are not met.

Visiting the website

This website consists of static files, with no database, login or contact form. When you open a page, our hosting provider's server processes technically necessary data: IP address, date and time, the address requested, the referring page, browser and operating system, and the amount of data transferred.

This is needed to deliver the page and to keep the service secure, for example to recognise attacks. The legal basis is Article 6 (1) (f) GDPR; our legitimate interest is technically sound and secure operation. We do not download or analyse these logs. The provider deletes or anonymises them after a short period.

Hosting

The website is delivered over the network of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which processes the access data above on our behalf as a processor (Article 28 GDPR). Transfers to the USA are covered by the European Commission's Standard Contractual Clauses; Cloudflare also participates in the EU-U.S. Data Privacy Framework, which is subject to an adequacy decision under Article 45 GDPR.

Email

If you email us, we process your address and message in order to reply (Article 6 (1) (b) or (f) GDPR). The email is forwarded via Cloudflare Email Routing to our mailbox at Google (Gmail). We delete it once it has been dealt with and no retention duty applies.

What this website does not do

• no cookies and no storage on your device
• no web analytics, no tracking pixels
• no advertising, no social media embeds
• no external fonts, scripts or maps

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and to object to processing based on legitimate interests (Article 21). To exercise any of them, write to contact@vantoxstudio.com.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the one responsible for us: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

Changes

If the way data is handled ever changes, this policy will be updated before the change takes effect. The date at the top shows the current version.