Privacy Policy

Fabian Braun
Trading as / Geschäftsbezeichnung: AeroMotion Studio
Nürtinger Straße 77
72667 Schlaitdorf
Germany

Email: hello@aeromotion.studio
Phone: +49 151 72148058

This policy covers the public AeroMotion Studio website, including its “Join the Team” application form. AeroMotion Studio is Fabian Braun's business name.

The public website is hosted in Germany by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL receives the technical requests needed to deliver the pages and files and operate the hosting infrastructure.

ALL-INKL processes website and mailbox data on our instructions under an agreement pursuant to Article 28 GDPR. Its listed technical subprocessor is Neue Medien Münnich GmbH, Hauptstraße 68, 02742 Friedersdorf, Germany, which provides personnel and technical infrastructure for these hosting services.

These requests contain your IP address, the requested page or file, date and time, response status and transferred data volume. They can also contain browser and operating-system information and the referring page if your browser sends it. Server access and error logs can contain this information. We use technical access data to deliver the website, diagnose faults and protect it against attacks and misuse. The legal basis is Article 6(1)(f) GDPR; these operational and security purposes are our legitimate interests. The connection data is necessary to retrieve the website.

The hosting account is configured to create complete access logs, including full IP addresses, and retain these logs for seven days. Data needed as evidence of a specific incident may be retained for the duration of the investigation and any resulting legal proceedings. This does not determine how long correspondence or applications are retained; those purposes are described separately below.

Webalizer report generation is disabled in this hosting account. The previous Webalizer reports and their statistical working files have been removed.

Images, videos, Poppins fonts, scripts and 3D model resources are served from this website. The videos are local files, not embedded YouTube or Vimeo players. There are no external font requests, embedded maps, social-media feeds or advertising pixels in the public website. Optional Matomo analytics is described separately below when enabled.

Gallery controls, 3D viewers, the helium calculator and navigation keep their state in memory. The homepage does not use localStorage or sessionStorage to retain that state. Calculator inputs are processed in your browser. If you choose to continue to the separate enquiry tool, the selected calculator values are passed to that tool in the link's fragment; simply using the calculator does not submit a project enquiry.

When you submit the “Join the Team” form, the website first requests a verification challenge. It then sets the first-party cookie am_application, restricted to /api/application, with a maximum lifetime of 30 minutes. It uses Secure, HttpOnly and SameSite=Strict protection. The cookie links the challenge and submission to the same form session and protects against misuse and duplicate submissions. It is not set merely by reading the pages or opening the form.

ALTCHA verification runs in a locally served browser worker and is checked by our own intake service at ALL-INKL. No external CAPTCHA provider receives your data. Verification processes a random session identifier, challenge and answer, submission identifier, content hash and timestamps. The server derives a keyed hash from the connecting IP address to enforce temporary request limits. These technical checks do not assess your suitability for employment or freelance work.

The cookie is required for the application submission you request, under § 25(2) no. 2 TDDDG. The associated personal-data processing is based on Article 6(1)(f) GDPR: our legitimate interest is protecting the application service and its submissions. Blocking this necessary cookie prevents application submission; you can contact us by email instead.

If you contact hello@aeromotion.studio or telephone us, we process your contact details, message and information you provide to respond and, where requested, prepare or perform services. The homepage's email links open your email application; clicking a link does not itself send a message. The homepage does not use an email-sending API or a general contact-message form.

Our mailbox and incoming and outgoing email are provided by ALL-INKL.COM – Neue Medien Münnich, identified in section 2, on its servers in Germany. Article 6(1)(b) GDPR applies where processing is necessary for a contract with you or steps you request before a contract. Other correspondence is processed under Article 6(1)(f) GDPR, based on our legitimate interest in handling enquiries. Access is limited to the people handling the correspondence and the mail providers involved in its transmission, including the provider you use to contact us.

General enquiries that do not result in a contract or another continuing obligation are deleted 90 days after their documented final handling. Correspondence needed for a contract, a legal retention obligation or a specific legal claim is assessed separately and kept only as required for that purpose. The applicable statutory period depends on the record and its legal starting date; it is not a general 90-day deletion rule for all business email. Deletion covers the mailbox and internal working copies.

The form collects the type of engagement sought, name, email address, city/base, country, areas of interest, experience and motivation, availability and willingness to travel, and preferred language. Telephone number and portfolio/profile link are optional. It also submits the privacy-acknowledgement identifier and technical submission details. Please do not include identity documents, bank details or health information. The form does not accept attachments.

Fabian Braun uses these details to assess your application and contact you. For applications for employment, processing necessary to decide whether to establish an employment relationship is based on § 26(1), first sentence, and (8) BDSG in conjunction with Article 88 GDPR. For freelance engagements, necessary pre-contractual processing at your request is based on Article 6(1)(b) GDPR. The privacy checkbox acknowledges this information; it is not consent to advertising or to an indefinite talent pool.

Applications pass through the protected ALL-INKL intake and are transferred to our internal administration. The hosting copy of the application content is removed only after confirmed permanent internal storage. A temporary technical receipt without the application content remains for no more than 30 minutes to identify a repeated submission. Authorised people handling personnel and crew applications can access the internal records. No application is automatically accepted or rejected, and no account or talent-pool entry is automatically created.

Unsuccessful applications and selection notes are deleted four calendar months after the communicated end of the process, rejection or documented withdrawal. We review unsolicited applications within three months of receipt and close the process if there is no concrete opportunity. Following a successful application, only the information needed for the employment or freelance relationship is retained for that purpose. A specific legal obligation or dispute may require restricted retention of the necessary records until that purpose ends. Article 6(1)(c) GDPR covers legal obligations and Article 6(1)(f) GDPR covers necessary claims handling. Marking a record “archived” does not itself delete it. Contact us to withdraw your application or request earlier deletion. Required fields are needed to assess and reply to the application; there is no obligation to apply.

Restricted encrypted business backups can retain earlier copies after deletion from active systems. The current backup rotation retains 30 daily and twelve monthly recovery sets; offline copies depend on their actual rotation. They are used only for necessary recovery, and deleted records must be removed again before restored data returns to ordinary use. These are separate from the ALL-INKL transfer copy and are not described as expiring after 30 days.

Project-enquiry buttons open the separate tool at inquiry.aeromotion.studio. Its privacy information covers its project form, storage and processing. The homepage does not automatically load that tool. The application form on this website is covered by section 6 above.

Instagram and other external resources are ordinary links. Their content is not embedded. Following a link connects you to the respective provider, which receives your request and processes data under its own privacy information. The local delivery of this homepage and its media does not itself require a connection to these providers or an international transfer to them.

Subject to the applicable conditions, you have rights of access and a copy of your data (Article 15 GDPR), rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18). For automated processing based on your consent or a contract, Article 20 provides the right to receive the relevant data in a structured, commonly used, machine-readable format and, where technically feasible, have it transmitted to another controller.

If processing is based on consent, you may withdraw it at any time for the future without affecting the lawfulness of processing before withdrawal. To exercise your rights, contact Fabian Braun at hello@aeromotion.studio or use the postal address or telephone number above. We do not make decisions based solely on automated processing that produce legal or similarly significant effects, and we do not use profiling for such decisions.

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR, under Article 21(1). We will cease that processing unless we can demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is necessary for legal claims.

If your data is processed for direct marketing, you may object at any time without giving reasons. We will stop using your data for that purpose.

You may complain to a data protection supervisory authority under Article 77 GDPR, particularly in the EU Member State of your habitual residence, place of work or the alleged infringement.

The competent authority in Baden-Württemberg is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany; postal address: Postfach 10 29 32, 70025 Stuttgart. Email: poststelle@lfdi.bwl.de.

Submit a complaint to the supervisory authority

With your consent, we use Matomo, hosted in our ALL-INKL account in Germany at analytics.aeromotion.studio, to understand visits to our public pages and use of our contact buttons. The software and tracking requests load only after you choose “Accept analytics”. Rejecting analytics does not restrict use of this website.

Matomo receives the technical connection data needed for the request, including your IP address, browser information and time. The tracking code sends the public page path and title, a referring website without its query string or fragment, and counts of clicks on email, telephone and project-enquiry links or confirmed receipt of a team application. It sends no form contents, email addresses, telephone numbers, application details, URL query strings or fragments. A project-enquiry link click does not mean an enquiry was submitted. We do not use user IDs, cross-domain tracking, advertising integrations, session recordings or automatic link tracking. The tracker is configured without analytics cookies and with browser-feature detection disabled. Matomo masks two bytes of the IP address before storing it and uses the masked address for location enrichment. Referrer information is reduced to the referring domain on the server.

The legal bases are Article 6(1)(a) GDPR and § 25(1) TDDDG. Processing is voluntary. You can withdraw or change your choice at any time using “Analytics settings” in the footer. Withdrawal stops future tracking and does not affect the lawfulness of processing before withdrawal. The necessary first-party preference cookie am_analytics_consent stores only your yes/no choice for up to six months (Secure, SameSite=Lax, path /). Storing and reading that choice is necessary to respect your requested privacy setting under § 25(2) no. 2 TDDDG; Article 6(1)(f) GDPR covers our legitimate interest in respecting and recording that setting.

Matomo is configured to delete individual visit and action records older than 30 days and aggregated reports older than 13 months. These settings concern the Matomo analytics database; the separate seven-day server logs are described in section 2.

Access to reports is restricted to authorised administrators and people with the analytics permission. ALL-INKL processes the hosting data under the agreement described in section 2. This setup does not use Matomo Cloud or send analytics reports to a separate analytics service provider. The data protection rights and contact options above also apply to analytics data.