Rechtliches

Privacy Policy

Last updated: 11 September 2026. This Privacy Policy applies to the website studio-schott.com and to applications, integrations and tools operated by Studio-Schott under the domain studio-schott.com ("Apps"), including our internal reporting and campaign-management tooling, which connects to the Google Ads API through Google Sign-In / OAuth. The Terms of Service for the website and the Apps are published at https://studio-schott.com/terms. The German Datenschutzerklärung at https://studio-schott.com/datenschutz remains the authoritative notice for visitors of the website; in case of conflict regarding website processing, the German version prevails.

1. Who we are

Studio-Schott Kirchenanger 6 88175 Scheidegg Germany prettyhomes@studio-schott.com +49 8381 9123606

Studio-Schott is the data controller responsible for the processing described in this policy. Studio-Schott is an interior-design and architecture studio; our Apps are internal business tools used to run the studio's own advertising, in particular to read performance data, build reports and prepare campaign changes for Google Ads accounts that Studio-Schott owns or that a client has explicitly authorised us to manage. They are not offered to the general public.

2. Data we process

Website visitors

When you visit studio-schott.com, our hosting provider (Vercel Inc.) processes technical data such as your IP address, browser type, requested pages and timestamps in server logs to deliver the site securely. The contact form is sent through Web3Forms and contains the details you enter (name, e-mail address, chosen service, message). Fonts are loaded from Adobe Fonts. Cookies for statistics and advertising (Google Analytics, Google Ads) are set only after you accept them in the consent banner. Details, legal bases and retention periods are described in the Datenschutzerklärung.

Google user data accessed by our Apps

Where an App requests access to your Google Account through OAuth, the Google consent screen lists the exact scopes requested before you approve them. Our Apps request the Google Ads scope (https://www.googleapis.com/auth/adwords) and basic profile information (name, e-mail address, profile picture) for sign-in. Through the Google Ads API we access the data of the Google Ads accounts you connect: account and campaign structure, keywords, ads and assets, budgets and bids, conversion and performance metrics, and billing figures shown in reporting. We do not request access to Gmail, Drive, Calendar, Photos or contacts. We only request the scopes an App needs for the function you use, and we access an account only after its owner has granted permission.

3. How we use Google user data

We use Google user data exclusively to provide and improve the user-facing features of the App for which you granted access, for example to display advertising performance, to build the reports you requested, to prepare or apply the campaign changes you authorised, and to authenticate you. We do not use Google user data for any other purpose.

In particular, we do not:

  • sell, rent or trade Google user data;
  • use Google user data for serving advertisements, including retargeting, personalised or interest-based advertising;
  • use Google user data to determine creditworthiness or for lending purposes;
  • transfer Google user data to third parties except as necessary to provide or improve the App's user-facing features, to comply with applicable law, or as part of a merger or acquisition with prior notice to users;
  • allow humans to read Google user data unless you have given explicit permission for a specific item, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements (https://developers.google.com/terms/api-services-user-data-policy). Our use of the Google Ads API is additionally subject to the Google Ads API Terms and Conditions (https://developers.google.com/google-ads/api/terms).

4. Storage, security and retention

Access tokens issued by Google are stored encrypted and are used only to perform the requests you initiate. We store Google user data only as long as necessary for the function you use. Cached data is deleted when you disconnect the App, when the purpose ends, or at the latest 90 days after your last use, unless statutory retention obligations require otherwise. We apply technical and organisational measures appropriate to the risk, including encrypted transport (TLS), access restriction to authorised persons and secure hosting within the European Union or with providers bound by EU standard contractual clauses.

5. Sharing and processors

We share data only with service providers that process it on our behalf and under our instructions (data processors), currently: Vercel Inc. (hosting and delivery of the website and Apps), Web3Forms (contact form delivery), Adobe Inc. (web fonts) and Google Ireland Limited (the Google Ads API and the accounts you connect and, after consent, Google Analytics and Google Ads). Where providers are located outside the European Union, transfers are based on EU standard contractual clauses or an adequacy decision.

6. Legal bases

Under the EU General Data Protection Regulation (GDPR) we process data on the following bases: your consent (Art. 6(1)(a) GDPR) for connecting Google services and for statistics and advertising cookies; the performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR) for enquiries and project work; and our legitimate interest (Art. 6(1)(f) GDPR) in the secure and reliable operation of the website and Apps. You may withdraw consent at any time with effect for the future.

7. Your rights and how to revoke access

You have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability and to lodge a complaint with a supervisory authority (for Studio-Schott: Bayerisches Landesamt für Datenschutzaufsicht, Ansbach, Germany).

You can revoke an App's access to your Google Account at any time in your Google Account under Security → Third-party apps & services (https://myaccount.google.com/permissions), or by removing our access in the Google Ads account itself. After revocation we no longer receive data from Google; you can additionally request the deletion of any cached data by e-mail to the address above, and we will delete it without undue delay.

8. Children

Our website and Apps are directed at adults and businesses. We do not knowingly collect personal data from children under 16.

9. Changes to this policy

We may update this Privacy Policy to reflect changes in our Apps or legal requirements. The current version is always available at https://studio-schott.com/privacy; the date of the last update is shown at the top. Material changes affecting Google user data will be communicated before they take effect.

10. Contact

Questions about privacy or this policy: prettyhomes@studio-schott.com or by post to the address in section 1.