Last updated: October 2026
1. Controller
Farzad Sefidgari
Farzad Studio
Hauptstraße 8
63457 Hanau
Germany
Email: contact@farzad-studio.com
Phone: +49 176 20311546
No data protection officer has been appointed, as there is no legal obligation to do so.
2. Overview
We process personal data only to the extent necessary to operate this website, to answer your enquiries, and to prepare or perform a contract. Below we explain which data is processed, for what purpose, on which legal basis under the EU General Data Protection Regulation (GDPR), and which service providers are involved.
3. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit the website, the server processes technically necessary data, in particular your IP address, date and time of access, the page requested, the referrer URL, and browser and operating system information. This data is required to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and functional website).
4. Security and caching
To protect the website against attacks (e.g. brute-force attempts or malicious requests), we use the security plugin Wordfence, which runs on our own server and evaluates IP addresses and request data for this purpose. To speed up the website, we use server-side caching (LiteSpeed Cache); no personal profiles are created. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a secure and fast website).
5. Cookies and consent management
This website uses a consent banner (Complianz) to manage cookies that require consent. You can change or withdraw your consent at any time via the banner. Details on the individual cookies are provided in our Cookie Policy. The chat cookie fs_chat_sid is described in section 7.
6. Contact form, email and phone
If you contact us via the contact form, by email or by phone, we process the data you provide (e.g. name, email address and your message) in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). Enquiries sent via the contact form are delivered to us by email and are also stored in the database of this website. We delete them once your enquiry has been fully dealt with and no further follow-up is expected, at the latest six months after our last contact with you, unless statutory retention obligations apply.
7. Chat assistant
On this website you can ask us questions via a chat window. The answers are generated automatically by an AI assistant; you are informed of this in the chat. Your browser communicates exclusively with an interface (gateway) on our own domain farzad-studio.com; there is no direct connection between your browser and Make or OpenAI.
What is transmitted. When you send a message, our gateway forwards the content of your message, the language, the previous conversation of this session (at most the last 10 exchanges) and a pseudonymous reference derived from the session identifier – but not your IP address – to our automation service Make (Celonis s.r.o., Prague, Czech Republic), where this data is processed in order to display an answer to you. Our Make account is set up in the EU data region; where connected services (e.g. OpenAI or Telegram) are used, processing by these providers may take place in other locations in accordance with their respective terms. Processing at Make takes place with the setting “Keep data confidential”; the content of individual chat messages is therefore not stored in the execution logs of our Make account.
AI language model. The answers are generated using an AI language model provided by OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, Ireland (automated answers, no automated decision-making within the meaning of Art. 22 GDPR). A transfer to countries outside the EEA, in particular the USA, cannot be ruled out; for this, the safeguards provided in OpenAI’s Data Processing Agreement are used, in particular EU standard contractual clauses or an applicable adequacy decision. OpenAI is instructed not to store the request for later retrieval; however, OpenAI’s own retention periods (e.g. for abuse monitoring) may apply.
Internal notification (Telegram). The AI language model also classifies your enquiry internally (e.g. type of business and whether there is a specific business interest). Only if this shows, for the first time or for the first time at a higher level, a specific business interest or a request to be contacted, a short summary is sent to Farzad Studio via the messaging service Telegram; the full conversation is not transmitted. If you have voluntarily provided a phone number or email address in the chat so that we can contact you, this information is included in this internal notification. In the event of technical problems, a technical notice without the content of your messages may additionally be sent to us via Telegram.
Cookie and session. To link the messages of a conversation, our gateway sets the cookie fs_chat_sid when you send your first message. It contains only a randomly generated session identifier without any information about you, is marked HttpOnly (not readable by scripts on the page), Secure (transmitted only via HTTPS) and SameSite=Strict, and is sent only to the chat interface (path /wp-json/fs/v1/). The associated session on our server (conversation history and counters for abuse prevention) ends after 24 hours of inactivity, but no later than 48 hours after it started; the cookie has a maximum lifetime of 48 hours and can be deleted at any time in your browser settings. These periods apply only to the session data on our web server; they do not mean that the content transmitted to Make, OpenAI or via Telegram is deleted there after 48 hours – the respective providers’ own storage and deletion periods apply.
Abuse prevention. To prevent abuse, we limit the number of messages. Your IP address is not stored for the per-connection limit: our server derives a pseudonymous check value (HMAC) from it using a secret key and the current date, which is stored only as a short-lived counter (about two minutes) on our server and is not passed on to Make or OpenAI. Logging by our hosting provider as described in section 3 remains unaffected. Please do not enter health data or other sensitive information in the chat.
Legal basis. The legal basis is Art. 6(1)(b) GDPR (pre-contractual enquiry) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries quickly and in protecting our systems against abuse). We base the setting of the cookie fs_chat_sid on Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as in our assessment it is strictly necessary for the chat function you have expressly chosen to use and serves this purpose only; we therefore do not ask for consent for it. Data processing agreements apply to processing by Make and OpenAI.
8. Links to external services
This website contains links to WhatsApp, LinkedIn and Upwork. A connection to these services is only established when you click on the respective link; from then on, the privacy policy of the respective provider applies.
9. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Wiesbaden. To exercise your rights, please contact us at contact@farzad-studio.com.
10. Changes
We may update this privacy policy if our website or the services used change. The current version is always available on this page.