Privacy Policy
Last updated: August 2026.
1. Controller
The controller responsible for the processing of your personal data within the meaning of the General Data Protection Regulation (GDPR) is: Pixeldarts Webdesign Agentur Berlin Oleksii Kukharenko Kollwitzstr. 76 10435 Berlin Germany Email: contact@pixeldarts.com Phone: +49 155 65806694
2. What data we collect
Through the waitlist form we collect your email address (required), optionally your WhatsApp number, the option you chose (updates only, buy via partner, Summer Subscription Standard or Premium), confirmation of your consent, and the time of sign-up. Your WhatsApp number is always optional and is only stored if you expressly agree to be contacted via WhatsApp.
3. Purpose of processing
We use your email address to add you to the waitlist and to keep you posted on the KlimaLegal launch, updates, and price alerts. The option you chose helps us send you the right offer. Because there are only 30 summer-subscription spots for 2027, we contact subscription applicants first, but via WhatsApp only if you have agreed to it.
4. Legal basis
The legal basis for processing your data for the purposes described above is your consent pursuant to Article 6(1)(a) GDPR. You give this consent when you submit the form to join the waitlist. If you provide a WhatsApp number, contact via WhatsApp is based on the separate consent you give for it. You may withdraw any consent at any time with effect for the future (see 'Your rights' below).
5. Recipients and service providers
To operate the waitlist and this website, we use the following processors, who act on our instructions under data processing agreements: - Google Ireland Ltd. (Google Workspace / Google Sheets), for storing waitlist sign-ups. - Google Ireland Ltd. (Google Analytics 4), for reach measurement, with your consent only (see section 7). - Vercel Inc., for hosting this website. Some of these services may involve a transfer of personal data to the United States. For Google, the transfer is based on the EU-US Data Privacy Framework (European Commission adequacy decision (EU) 2023/1795 of 10 July 2023) and, additionally, on the European Commission's Standard Contractual Clauses. For Vercel Inc., the Standard Contractual Clauses apply. SMS updates are sent only later, before which we will name the SMS provider here.
6. Cookies, analytics and consent
We do not set any tracking or advertising cookies without your consent. We set strictly necessary cookies only: 'zest_consent' (stores your cookie-consent choice) and 'NEXT_LOCALE' (remembers your language preference). Both are required for the site to work and do not track you. For reach measurement we use Vercel Web Analytics, which is cookieless and does not store data on your device or use cross-site identifiers; the legal basis is our legitimate interest in understanding aggregate usage (Art. 6(1)(f) GDPR). Only with your consent do the Google Analytics 4 cookies '_ga' and '_ga_0Q1VZKFP7J' get added; section 7 covers them in detail. When you first visit the site, a consent banner lets you accept or decline any non-essential cookies. No non-essential cookies are set unless and until you consent. You can change your choice at any time:
7. Google Analytics 4
With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use it to understand which content people look for and where visitors drop off. Storing the cookies on your device and accessing them happens solely with your consent under Section 25(1) TDDDG. The processing that follows is based on Article 6(1)(a) GDPR. Your choice in the banner gives both consents in one step. Without your consent Google Analytics is not loaded at all — no script is fetched from Google and no cookie is set. Two first-party cookies are set, each with a 13-month lifetime: '_ga' (distinguishes visitors) and '_ga_0Q1VZKFP7J' (stores the session state). They are read by the Google Analytics script and transmitted to Google. The data processed includes: IP address, a pseudonymous identifier (the client ID in the cookie), device and browser data, screen resolution, language setting, referrer, pages viewed, interactions, timestamps, and an approximate location derived from these (country, region, city). Google states that it does not log or store the IP addresses of users in the EU; location is derived on servers in the EU and the IP address is then discarded. It is still transmitted for technical reasons, because every server request carries the IP address. Google Analytics 4 has no separate 'IP anonymisation' setting. Google signals and personalised advertising are disabled in the tag, and we permanently send the advertising consent signals (ad_storage, ad_user_data, ad_personalization) as 'denied'. There is no link to Google Ads. Google Ireland Limited processes the data as our processor under Article 28 GDPR; Google LLC in the USA acts as a sub-processor. For the transfer to the USA, Google relies on the EU-US Data Privacy Framework (adequacy decision (EU) 2023/1795) and, additionally, on the EU Standard Contractual Clauses. A copy of the safeguards is available on request at contact@pixeldarts.com. At user and event level, Google retains the data for 14 months and deletes it thereafter. Withdrawal: you can withdraw your consent at any time with effect for the future, using the control below or the cookie icon at the bottom left. We then stop the measurement immediately and delete the analytics cookies. The lawfulness of processing carried out before the withdrawal is unaffected.
8. Retention
We keep your email address, any WhatsApp number, your chosen option and consent record only for as long as you remain on the waitlist and wish to receive our updates. If you withdraw your consent or ask to be removed, we delete your data without undue delay, at the latest within 30 days, unless we are legally required to retain certain records (e.g. to demonstrate that consent was validly obtained).
9. Your rights
Under the GDPR you have the right to: - access your personal data (Art. 15); - rectification of inaccurate data (Art. 16); - erasure (Art. 17); - restriction of processing (Art. 18); - data portability (Art. 20); - object to processing (Art. 21); and - withdraw your consent at any time with effect for the future (Art. 7(3)); withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, contact us at contact@pixeldarts.com. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information.
10. Opt-in
When you submit the form and tick the consent box, we add you to the waitlist (single opt-in) and record your consent and its timestamp. If you also provide a WhatsApp number, we only store and use it after you tick the separate WhatsApp-consent box. Before running any messaging campaign we will confirm your consent as required.