Privacy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

vona Webagentur
Sylvia Michalk
c/o Kaminstudio Leipzig
Könneritzstr. 76
04229 Leipzig
Germany

Email: hello@vonalab.com
Phone: +49 (0) 155/67 11 55 98

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.

This website is deliberately built to use as little data as possible: it sets no cookies, embeds no third-party content (fonts, scripts and images are served from our own server), keeps no access logs and transmits form data only when you submit the contact form. Personal data arises only when you contact us on your own initiative — and, for technical reasons, briefly when pages are requested and in the server's error logs (see Hosting).

This website is hosted by an external service provider: Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

When a page is requested, the server briefly processes your IP address and the information your browser sends along (such as the address requested and the browser type) in order to deliver the page to you. The server is configured so that no access logs are kept; the host does not keep access logs for this website either and does not use tracking. Access data is therefore not stored and not merged with other data sources.

The exception is the server's technical error logs: they serve troubleshooting and securing operations and may contain IP addresses. They are not merged with other data sources and are kept only as long as necessary for that purpose.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and uninterrupted operation of the website).

Transmission between your browser and the server is encrypted (TLS).

When you use the contact form, your details (name, email address, subject and message, and optionally phone number and company) are transmitted to our server over an encrypted connection (TLS) and forwarded from there as an email to our mailbox. They are not stored in a database. To protect against misuse (spam), the server checks before sending that the form was not submitted too quickly and limits the number of requests per sender. For this purpose your IP address is kept only as an irreversible check value (hash) and for at most 24 hours. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in protection against misuse).

If you contact us via the form, by email or by phone, we process the data you provide (e.g. name, email address, phone number, content of the inquiry) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your inquiry is aimed at a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries).

We delete the data as soon as your request has been fully dealt with and no statutory retention obligations apply. When emails are received and sent, our mail server logs technically necessary connection data (for example time and sender or recipient address), but not the content of the message.

This website does not set any cookies. When you switch between the light and dark appearance, your choice is saved in your browser’s local storage (entry “vona-theme”) so that it is kept for your next visit. This entry contains no personal data, is not transmitted to us and serves solely the display you have chosen (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.

You have the following rights with regard to your personal data: access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR).

Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte).

To exercise your rights, a message to hello@vonalab.com is sufficient.

October 2026. We update this privacy policy whenever the website or the legal situation changes.