PRIVACY POLICY
This Privacy Policy explains the nature, scope, and purpose of the processing of personal data (hereinafter "data") within this website and applies in accordance with the General Data Protection Regulation GDPR) and the German Federal Data Protection Act (BDSG). Personal data refers to any information relating to an identified or identifiable natural person. The operator of this website treats the protection of your personal data with the utmost seriousness and processes all personal data strictly in accordance with applicable statutory data protection regulations. The controller responsible for data processing on this website is:
Chi-Young Bang
Josef-Poxleitner-Allee 31
82216 Gernlinden
Germany
Email: cb@chiyoungbangstudio.com
1. DATA COLLECTION WHEN VISITING THIS WEBSITE
When you access this website, your browser automatically transmits certain information to the website's server. This information is temporarily stored in so-called server log files and may include:
- IP address of the requesting device
- Date and time of access
- Name and URL of the accessed file
- Referrer URL (website from which access is made)
- Browser type and version
- Operating system of the accessing device
This data is processed solely for the purposes of ensuring a smooth connection, enabling comfortable use of the website, evaluating system security and stability, and for internal administrative purposes. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest lies in the purposes described above. Log files are automatically deleted after a period of no longer than seven (7) days, unless their continued retention is required for evidence purposes in connection with a specific incident.
2. CONTACT VIA EMAIL
If you contact the operator via email, the personal data transmitted will be stored for the purpose of processing your inquiry and handling any follow-up communication. Where the inquiry relates to a contractual or pre-contractual matter, the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR. In all other cases, processing is based on Art. 6 para. 1 sentence 1 lit. f GDPR, on the basis of the legitimate interest in responding to communications directed at the operator. Data transmitted via email will not be shared with third parties without your consent.
3. COOKIES
This website may use cookies - small text files that are automatically stored on your device by your browser when you visit the website. Cookies do not cause harm to your device and do not contain viruses, trojans, or other malicious software. The information stored in cookies is associated with the specific device used; this does not mean that the operator thereby obtains knowledge of your identity.This website uses exclusively technically necessary cookies that are required for the proper functioning and provision of the website (so-called session cookies). These are automatically deleted when you close your browser or leave the website. No tracking cookies, profiling cookies, or advertising cookies are set by the operator of this website. Please note that Squarespace, as the hosting provider, may set its own technically necessary cookies. For further information, please refer to Squarespace's cookie policy at: https://www.squarespace.com/privacy
The legal basis for data processing through technically necessary cookies is Art. 6 para. 1 sentence 1 lit. f GDPR. The legitimate interest lies in ensuring the technical functionality of the website. If you wish to restrict or disable cookies, you may do so at any time via your browser settings. Please note that doing so may affect the functionality of certain parts of this website.
4. HOSTING AND INFRASTRUCTURE
This website is hosted by: Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA.
When you visit this website, personal data may be processed on Squarespace's servers. This may include IP addresses, metadata, communication data, and website access data. The processing of personal data by Squarespace takes place on the basis of a Data Processing Agreement (Art. 28 GDPR) and standard contractual clauses approved by the European Commission (Art. 46 para. 2 lit. c GDPR), ensuring an adequate level of data protection for transfers to the United States.For further information on how Squarespace processes personal data, please refer to the Squarespace Privacy Policy: https://www.squarespace.com/privacy
5. EXTERNAL RESOURCES AND THIRD-PARTY SERVICES
This website may load resources from third-party servers (such as web fonts, scripts, or stylesheets). When such resources are loaded, your browser automatically transmits your IP address and technical browser data to the respective third-party provider. This may involve data transfers to countries outside the European Economic Area (EEA), including the United States. Where applicable, such third-party integrations are implemented in a manner that minimizes data transfers (e.g., through local hosting of font files). If third-party resources are loaded externally, the respective providers process your data under their own responsibility and in accordance with their own privacy policies. The legal basis for the processing of data in connection with externally loaded resources is Art. 6 para. 1 sentence 1 lit. f GDPR, based on the legitimate interest in providing a technically functional and visually consistent website.
6. SOCIAL MEDIA LINKS
This website may contain links to third-party social media platforms (e.g., Instagram, LinkedIn). These are implemented as simple hyperlinks and do not involve any plugins or social media buttons that transmit data automatically upon page load. Data is only transmitted to the respective platform when you actively click on such a link and are redirected to the platform.Please note that the operators of these platforms process personal data under their own responsibility. For further information, please refer to the respective privacy policies of the individual platforms.
7. ARTIFICIAL INTELLIGENCE (AI) CONTENT
Certain visual content presented on this website is generated using artificial intelligence technologies as part of conceptual and artistic work within the field of creative direction and visual development. These visuals are used exclusively for conceptual and artistic purposes. No personal data of website visitors is collected, processed, or transmitted in connection with artificial intelligence systems on this website.
8. DATA RETENTION
Personal data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable statutory retention obligations.
- Email inquiries: stored for the duration necessary to process the request and any related follow-up communication, and thereafter deleted unless statutory retention obligations require longer retention.
- Server log files: automatically deleted after no longer than seven (7) days, unless retention is required for security or evidentiary purposes in connection with a specific incident.
- Cookies: session cookies are deleted automatically upon closing the browser or leaving the website. Once the purpose of storage ceases to apply or statutory retention periods expire, personal data will be deleted or restricted in accordance with Art. 17 and Art. 18 GDPR.
9. RIGHTS OF DATA SUBJECTS
Under applicable data protection law, you have the following rights with respect to your personal data processed by this website:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent at any time (Art. 7 para. 3 GDPR), without affecting the lawfulness of processing based on consent before its withdrawal
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) – in Germany, the competent authority is the data protection supervisory authority of the federal state in which you reside
RIGHT TO OBJECT (Art. 21 GDPR):
Where personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. In such cases, the data will no longer be processed unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing serves to establish, exercise, or defend legal claims. To exercise any of the above rights, please contact: cb@chiyoungbangstudio.com
10. DATA SECURITY
This website uses SSL/TLS (Secure Socket Layer / Transport Layer Security) encryption to protect data transmitted between your browser and the website's server. You can identify an encrypted connection by the "https://" prefix in your browser's address bar and the padlock icon. In addition, appropriate technical and organizational measures are in place to protect personal data against accidental or intentional manipulation, loss, destruction, or unauthorized access. These measures are regularly reviewed and updated in line with technological developments.
11. CHANGES TO THIS PRIVACY POLICY
The operator reserves the right to modify this Privacy Policy in order to ensure ongoing compliance with applicable legal requirements or to reflect changes to the services offered. The updated Privacy Policy will apply from the date of its publication on this website. We therefore recommend reviewing this page periodically.
Last updated: April 2026