Privacy Policy
Last updated: August 2026
We take the protection of your personal data seriously. This Privacy Policy explains how personal data is processed when you visit our website and use its features.
Personal data means any information relating to an identified or identifiable natural person.
1. Data Controller
The controller responsible for data processing on this website is:
Two Beans Productions
Ricarda und Moritz Fasol
Frundsberstrasse 22
82024 Strasslach-Dingharting
Germany
Email: contact@twobeans-productions.com
2. Hosting and Server Log Files
When you access this website, certain information is automatically transmitted by your browser to the server on which our website is hosted.
This information may include your IP address, browser type and version, operating system, referrer URL, date and time of access, and the pages or files requested.
This data is processed to ensure the reliable and secure operation of our website and to detect and prevent technical problems or misuse.
The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.
Server log files are deleted when they are no longer required for these purposes, unless longer storage is required by law or necessary for security purposes.
3. WordPress
This website is built using WordPress.
WordPress and installed plugins may use technically necessary cookies or process technical information required to provide the website and its functionality.
Where cookies or similar technologies are not technically necessary, they will only be used with your consent in accordance with applicable data protection law.
4. Contact Form
If you contact us through our contact form, we process the information you provide, such as your name, email address, message and any other information voluntarily submitted by you.
We use this information solely to process and respond to your inquiry.
Where your inquiry relates to a potential or existing contractual relationship, processing is based on Art. 6(1)(b) GDPR. For general inquiries, processing is based on Art. 6(1)(f) GDPR, our legitimate interest in responding to communications addressed to us.
Your information will be deleted once it is no longer required to process your inquiry, unless statutory retention obligations apply.
5. Cookies and Consent Management
Our website may use cookies and similar technologies.
Some cookies are technically necessary for the operation of the website. Other technologies, particularly those provided by third parties, may process personal data and require your consent.
Where consent is required, such services will only be activated after you have given your consent. The legal basis for this processing is Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future through the cookie or privacy settings provided on our website.
6. YouTube
Our website may contain videos embedded from YouTube, a service provided by Google.
When a YouTube video is loaded, information about your visit may be transmitted to Google. This may include your IP address, browser and device information and information about the page you are visiting. If you are logged into a Google or YouTube account, this information may also be associated with your account.
Where required, YouTube content will only be loaded after you have given your consent. The legal basis is Art. 6(1)(a) GDPR.
Google may process data outside the European Economic Area. Where applicable, such transfers are subject to the safeguards required under applicable data protection law.
Further information about Google’s processing of personal data can be found in Google’s Privacy Policy.
7. Instagram
Our website may contain content or links relating to Instagram, a service provided by Meta Platforms.
If Instagram content is directly embedded into our website, loading this content may result in data being transmitted to Meta. This may include your IP address, browser and device information and information about your interaction with the embedded content.
If you are logged into your Instagram account, Meta may be able to associate your visit with your account.
Where required, embedded Instagram content will only be loaded after you have given your consent. The legal basis is Art. 6(1)(a) GDPR.
Meta may process personal data outside the European Economic Area. Where applicable, appropriate safeguards for international data transfers apply.
Further information can be found in Instagram’s and Meta’s privacy information.
If our website only contains ordinary links to our Instagram profile and does not embed Instagram content, no data is transmitted to Instagram merely by displaying the link. Data may be transmitted once you follow the link and visit Instagram.
8. Google Fonts
Our website uses fonts provided by Google Fonts.
If Google Fonts are hosted locally on our server, no connection to Google is established when the fonts are displayed.
If Google Fonts are loaded directly from Google’s servers, your browser establishes a connection to Google in order to download the required font files. In doing so, information including your IP address may be transmitted to Google.
Where external loading of Google Fonts requires consent, the fonts will only be loaded after you have given your consent. The legal basis for this processing is Art. 6(1)(a) GDPR.
For privacy reasons, we recommend hosting Google Fonts locally whenever possible.
9. External Links
Our website contains links to third-party websites and services, including social media platforms.
When you follow an external link, you leave our website. The processing of personal data on the destination website is the responsibility of the respective provider and is governed by its privacy policy.
10. International Data Transfers
Some of the third-party services used on this website are provided by companies based outside the European Economic Area, particularly in the United States.
Where personal data is transferred internationally, such transfers are made in accordance with the requirements of the GDPR and, where applicable, on the basis of an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another legally permitted transfer mechanism.
11. Your Rights
Under the GDPR, you have rights regarding the processing of your personal data. Subject to the applicable legal requirements, these include:
- the right of access under Art. 15 GDPR;
- the right to rectification under Art. 16 GDPR;
- the right to erasure under Art. 17 GDPR;
- the right to restriction of processing under Art. 18 GDPR;
- the right to data portability under Art. 20 GDPR;
- the right to object under Art. 21 GDPR; and
- the right to withdraw consent at any time under Art. 7(3) GDPR.
Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
12. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by applicable law.
When personal data is no longer required and no statutory retention obligation applies, it will be deleted.
13. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, disclosure or unauthorised access.
Our website uses encrypted HTTPS connections where available.
14. Changes to this Privacy Policy
We may update this Privacy Policy when necessary, for example if we change the functionality of our website, add new services or if applicable legal requirements change.
The current version of this Privacy Policy is available on this website.