1. Controller
André Dumke, andu creatives
c/o flexdienst #21747
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany
Email: info@anducreatives.com
2. Overview
We only process personal data as far as it is needed to run this website, to give you access to the free tutorials, to send the newsletter you signed up for and to handle purchases in our shop. We use no analytics or tracking tools and no advertising cookies. All fonts are loaded from our own server, there is no connection to Google Fonts or other font services.
3. Hosting and server log files
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR. When you visit the website, the web server automatically records your IP address, the date and time of access, the page requested, the referrer URL and the browser and operating system you use. This data is technically required to deliver the website and keep it secure. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). IONOS keeps these log files for a limited period and then deletes them automatically.
4. Cookies and local storage
We only store information on your device that is needed for the features you use:
- andu_access (cookie, 12 months): your email address together with a signature, so the tutorials stay open for you on your next visit. Only set after you have confirmed your email address.
- andu_consent (local storage): your choice in the cookie banner, so we don’t ask you again on every visit.
- Login cookies (wordpress_logged_in_ and similar): only set when you log in to your customer account or when the site administrator logs in.
- Shop cookies (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_): remember your cart while you shop, for up to 2 days.
- Payment cookies (__stripe_mid, __stripe_sid): set by Stripe on product and checkout pages for fraud prevention, for up to 12 months and 30 minutes.
This storage is strictly necessary to provide the service you explicitly requested (§ 25 (2) no. 2 TDDDG). The legal basis for the processing is Art. 6 (1) (b) GDPR, for fraud prevention Art. 6 (1) (f) GDPR. You can delete this data at any time by clearing the site data in your browser.
5. Free tutorial access and newsletter
Our free tutorials are open to everyone who leaves an email address and agrees to receive our newsletter. In the newsletter we tell you about new tutorials, projects and offers from andu creatives.
Data processed
Email address, time of sign-up and confirmation, and a shortened IP address at the time of sign-up (as proof of your consent).
Double opt-in
After signing up, you will receive an email with a confirmation link. Access and newsletter only start after you have confirmed. This makes sure nobody can sign up with someone else’s address. Sign-up and confirmation are logged so we can prove your consent.
Legal basis
Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR for providing access. The proof of consent is stored on the basis of Art. 6 (1) (c) in conjunction with Art. 7 (1) GDPR.
Withdrawal and unsubscribing
You can withdraw your consent at any time with effect for the future, using the unsubscribe link in every email or by writing to info@anducreatives.com. Your email address will then be deleted or blocked from further mailings.
Storage and sending
Email addresses are stored in the database of this website on the IONOS servers named in section 3. Emails are sent through our own IONOS mailbox (info@anducreatives.com). We do not use an external newsletter service.
6. Shop and customer account
Paid tutorials and digital products are sold through our shop, which runs on WooCommerce directly on this website. To buy something you need a customer account.
Data processed
Name, email address, billing address, the products you bought, order and payment status and, for downloads, the time and IP address of each download (to prevent misuse of download links).
Purpose and legal basis
We use this data to set up your account, process your order, give you access to what you bought and send you order emails. The legal basis is Art. 6 (1) (b) GDPR (contract). Download logs are based on Art. 6 (1) (f) GDPR (legitimate interest in protecting our products).
Storage period
Your account stays until you ask us to delete it. Orders and invoices are kept for up to 10 years because of retention obligations under tax and commercial law (§ 147 AO, § 257 HGB), legal basis Art. 6 (1) (c) GDPR. After that the data is deleted.
7. Payment providers
For payment you are passed on to the provider you choose. The payment data you enter there goes directly to that provider, we never see your full card or account details. We only receive the confirmation that the payment went through. The legal basis is Art. 6 (1) (b) GDPR.
Stripe
Card payments, Apple Pay, Google Pay and other methods shown at checkout are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. To offer payment and prevent fraud, Stripe’s script is loaded on product, cart and checkout pages, and Stripe receives technical data such as your IP address and browser details. Data may be transferred to Stripe, Inc. in the USA, which is certified under the EU-US Data Privacy Framework. More information: Stripe privacy policy.
PayPal
If you pay with PayPal, payment is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The PayPal buttons are loaded from PayPal’s servers on product, cart and checkout pages, which transmits your IP address and browser details to PayPal. More information: PayPal privacy policy.
8. Embedded videos (YouTube and Vimeo)
Our tutorial videos may be embedded from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA). Videos are only loaded after you actively agree (cookie banner “External media” or clicking the video). Only then is a connection to the provider’s servers made, and your IP address and browser details are transmitted, among other things. YouTube is embedded in privacy-enhanced mode (youtube-nocookie.com), Vimeo with the “Do Not Track” setting.
Data may be transferred to the USA. The providers are certified under the EU-US Data Privacy Framework. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw it at any time in the cookie settings.
More information: Google privacy policy, Vimeo privacy policy.
9. Links to social media
Our website links to our profiles on Instagram, TikTok and YouTube. These are plain links, no data is sent to these platforms before you click one. Once you are on the platform, its own privacy policy applies.
10. Contact by email
If you write to us, we process your details to handle your request (Art. 6 (1) (b) or (f) GDPR). The data is deleted once your request has been fully dealt with, unless statutory retention obligations apply.
11. SSL/TLS encryption
For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar.
12. Your rights
You have the right at any time to:
- access your stored data (Art. 15 GDPR)
- have inaccurate data corrected (Art. 16 GDPR)
- have your data deleted (Art. 17 GDPR)
- restrict processing (Art. 18 GDPR)
- receive your data in a portable format (Art. 20 GDPR)
- object to processing based on legitimate interests (Art. 21 GDPR)
- withdraw your consent with effect for the future (Art. 7 (3) GDPR)
Just write to info@anducreatives.com.
13. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Postfach 30 40, 55020 Mainz, Germany, www.datenschutz.rlp.de.
14. Updates
Last updated: October 2026. We update this privacy policy whenever the website or the legal situation changes.