Last updated: 01.08.2026
1. Controller
The controller responsible for data processing on this website is:
XPOSE – Visual Media Design
Inhaber / Owner / Autónomo: Peter Jirmann
Adresse / Address / Dirección:
Urb. Cascadas de las Lomas
Cl. Don José de Orbaneja 34
29649 Mijas Costa, Málaga
Spain / España
Kontakt / Contact / Contacto:
Email: info@xpose.studio
Phone (Spain): +34 694 226 041
Phone (Germany): +49 172 862 0923
Steuerinformationen / Tax Information / Información fiscal:
NIF: Z2717563A
EU VAT ID (NIF-IVA): ESZ2717563A
2. General information
We process personal data in accordance with the General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and applicable Spanish data protection law.
“Personal data” means any information relating to an identified or identifiable natural person.
3. Data processed when you visit the website (server log files)
When you access this website, the hosting provider may automatically collect and store information in server log files. This may include:
- IP address (to the extent provided by your browser/host)
- date and time of access
- requested page / file
- browser type and version
- operating system
- referrer URL
Purpose: website delivery, security, troubleshooting
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
4. Contacting us (info@jirmann.net)
If you contact us by email, we process the data you provide (e.g., name, email address, message content) to respond to your inquiry.
Purpose: communication, handling requests, pre-contractual communication
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract) and/or Art. 6(1)(f) GDPR (legitimate interest)
We do not share your data with third parties unless this is necessary to handle your request or required by law.
5. Cookies
This website may use technically necessary cookies depending on the hosting / CMS setup.
Technically necessary cookies may be used to ensure basic website functions.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure, functional website)If non-essential cookies (e.g., analytics/marketing) are used, they will be enabled only with your consent where required.
Legal basis: Art. 6(1)(a) GDPR (consent)
6. Analytics / tracking
At this time, we do not intentionally use analytics or advertising tracking tools unless explicitly stated on this page.
If analytics tools are added later (e.g., Google Analytics), we will update this Privacy Policy accordingly and implement a consent mechanism where required.
7. International data transfers
If service providers process data outside the EU/EEA, transfers will only occur if appropriate safeguards pursuant to Art. 44 et seq. GDPR are in place (e.g., adequacy decision, Standard Contractual Clauses).
8. Data retention
We store personal data only as long as necessary for the respective purpose, or as required by statutory retention obligations.
9. Your rights
You have the right to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection (Art. 21 GDPR)
- withdraw consent at any time (Art. 7(3) GDPR)To exercise your rights, contact us using the details above.
10. Right to lodge a complaint (Spain)
You have the right to lodge a complaint with a supervisory authority. In Spain, the competent authority is:
Agencia Española de Protección de Datos (AEPD) – https://www.aepd.es
11. Security
We use appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The version published on this website applies.