Data controller
The controller responsible for processing personal data on this website is:
Richard Jason Warburton, Schwachhauser Heerstraße 101, 28211 Bremen, Germany
Email: richard@richard-warburton.com
Telephone: +49 176 81425746
General information on data processing
Personal data is processed when you visit this website or contact me. Personal data is any information relating to an identified or identifiable natural person, such as a name, email address, telephone number, IP address or the content of communications.
I process personal data only insofar as this is necessary to provide and secure this website, handle enquiries, take steps before entering into a contract or perform a contract, meet legal obligations, or protect legitimate interests.
Processing is based in particular on Article 6(1)(b), (c) and (f) GDPR. Where consent is obtained in an individual case, Article 6(1)(a) GDPR provides the legal basis.
Website provision and server log files
When you access this website, the hosting provider processes technically necessary data to deliver and operate the website securely. This may include:
IP address
Date and time of access
Pages and files accessed
Volume of data transferred
Referrer URL
Browser type and version
Operating system
Device used
Technical connection data
This data is processed to provide the website technically, ensure stability and security, and identify and analyse technical errors or abusive access.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is in providing my website securely, reliably and without errors.
The data is deleted or anonymised as soon as it is no longer required for these purposes, unless statutory retention obligations or security reasons require longer storage.
Hosting and technical provision by Framer
This website is built and hosted using Framer.
The provider is:
Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands
Framer processes personal data on my behalf insofar as this is necessary for hosting, delivery, security, maintenance and operation of this website.
Framer’s Data Processing Addendum under Article 28 GDPR applies to processing personal data on my behalf. It forms part of the contractual relationship with Framer.
Further information:
Framer Data Processing Addendum
The legal basis for using Framer is Article 6(1)(f) GDPR. My legitimate interest is in providing this website professionally, securely and efficiently.
Contact through the contact form
You can send me an enquiry using the form on the contact page. The data you enter is processed. This currently includes:
Name
Email address
Message content
This data is processed to handle and respond to your enquiry, communicate with you, prepare a quotation and, where applicable, take steps towards or perform a contract.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract. In other cases, processing is based on Article 6(1)(f) GDPR. My legitimate interest is in appropriately handling incoming business and general enquiries.
The contact form is provided through Framer. Framer B.V. processes the form data as a processor and forwards the enquiry to my email inbox.
Framer may process technical data to prevent spam and abusive form submissions. Depending on the protection features enabled, this may include verification tokens, risk assessments, device and browser characteristics, interaction patterns and network signals. Processing serves the security and functionality of the form. The legal basis is Article 6(1)(f) GDPR.
Form data is deleted as soon as it is no longer required to handle your enquiry, unless statutory retention obligations or legitimate reasons justify further storage.
Contact by email or telephone
If you contact me by email or telephone, I process the data you provide. This may include:
Name
Email address
Telephone number
Company or organisation
Enquiry content
Project information
Communication data and communication times
This data is processed to handle your enquiry, communicate with you, prepare quotations and, where applicable, take steps towards or perform a contract.
The legal basis is Article 6(1)(b) GDPR where processing is necessary for steps before entering into a contract or for performing a contract. In other cases, processing is based on Article 6(1)(f) GDPR. My legitimate interest is in appropriately handling business and general enquiries.
Where statutory retention obligations apply, further processing is also based on Article 6(1)(c) GDPR.
Email service through Google Gmail
Enquiries from the contact form and emails sent directly to me are received and processed in a Gmail inbox hosted by Google.
For users of Google services in the European Economic Area, the provider generally responsible is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4, Ireland
Google processes sender and recipient data, communication content, communication times and technically necessary connection data in particular.
The email service is used to handle and document incoming enquiries and for business communication. The legal basis is Article 6(1)(b) GDPR where communication concerns entering into or performing a contract. Otherwise, Article 6(1)(f) GDPR applies. My legitimate interest is in reliable and secure electronic communication.
Further information is available in Google’s privacy policy.
Framer Analytics
This website uses Framer Analytics. The service provides aggregated information about website use, particularly page views, visitor numbers, referring pages, browsers, operating systems and approximate geographical regions.
According to Framer, Framer Analytics does not use cookies or create persistent visitor identifiers.
To identify unique visitors each day, the IP address and browser or user-agent information are hashed with a secret key that changes daily. According to Framer, this key is reset and deleted daily. Visitors therefore cannot be recognised persistently across multiple days or different devices.
This data is processed for statistical evaluation, optimisation and improvement of this website. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is in analysing usage and improving my online offering.
Because the provider states that Framer Analytics uses no cookies or persistent identifiers, the current technical configuration does not require consent through a cookie banner for this service.
Further information is available in Framer’s privacy and analytics information.
Cookies, local storage and similar technologies
In its current configuration, this website does not use non-essential cookies or persistent local identifiers for advertising or tracking.
Where technically necessary cookies, local storage technologies or similar methods are used, they serve only to provide, secure or deliver explicitly requested website functionality.
Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR. My legitimate interest is in providing a secure and functional website.
Information is stored on a visitor’s device, or information already stored is accessed, without consent only where this is strictly necessary under section 25(2) TDDDG. If non-essential technologies or external services requiring consent are added in future, they will load only after the relevant consent is given.
Portfolio, references, photographs and videos
This website publishes photographic and video work, project examples, references and other work samples.
Where identifiable people are depicted, publication takes place only where a legal basis exists. This may be consent, a contractual agreement, statutory permission or a legitimate interest within permissible portfolio and self-promotion purposes.
Depending on the circumstances, Article 6(1)(a), (b) or (f) GDPR may provide the legal basis. Any additional applicable rules concerning the right to one’s own image are also taken into account.
Consent may be withdrawn at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.
External links and social media profiles
This website contains links to external websites and social media profiles, particularly Instagram.
Simply visiting my website does not transmit data to a linked provider through an ordinary external link. Only when you follow the link do you leave my website and establish a direct connection to that provider.
The relevant provider is responsible for subsequent processing on the external website. That provider’s privacy information applies.
Recipients of personal data
Personal data is disclosed to recipients only insofar as this is necessary for the processing purposes described.
Recipients or categories of recipients may include:
Framer B.V. as hosting, form and technical service provider
Google as provider of the email service used
Other technical service providers where necessary for security, maintenance or communication
Authorities or other public bodies where a legal obligation applies
Legal, tax or other professional advisers where necessary and legally permitted
Disclosure for other purposes takes place only where a legal basis exists or you have given consent.
Data processing outside the EU or EEA
Using Framer, Google or their subprocessors may involve processing personal data outside the European Union or European Economic Area.
Retention period
Personal data is stored only for as long as necessary for its respective processing purpose.
Enquiry and communication data is generally stored for the duration of handling the enquiry. Further storage may be necessary for contract performance, documentation, establishing or defending legal claims, or statutory retention obligations.
Business and tax-related records are retained in accordance with applicable statutory retention periods.
When the processing purpose no longer applies and there is no statutory or other legal basis for continued storage, the relevant data is deleted.
Your rights
Subject to the statutory conditions, you have the following rights in particular:
Right of access under Article 15 GDPR
Right to rectification under Article 16 GDPR
Right to erasure under Article 17 GDPR
Right to restriction of processing under Article 18 GDPR
Right to data portability under Article 20 GDPR
Right to object under Article 21 GDPR
Right to withdraw consent under Article 7(3) GDPR
Right to lodge a complaint with a supervisory authority under Article 77 GDPR
Withdrawal of consent applies to the future. It does not affect the lawfulness of processing carried out before withdrawal.
Right to object
Where personal data is processed on the basis of Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object to this processing at any time on grounds relating to your particular situation.
Following an objection, the relevant personal data will no longer be processed unless there are compelling legitimate grounds that override your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims.
Right to lodge a complaint with a supervisory authority
If you believe that processing your personal data breaches data protection law, you have the right to lodge a complaint with a supervisory authority.
The supervisory authority responsible for me is:
The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen
Email: office@datenschutz.bremen.de | Website: https://www.datenschutz.bremen.de/
You may also contact another competent supervisory authority under Article 77 GDPR.
Requirement to provide personal data
When you visit this website, processing certain technical data is necessary to deliver and operate the website securely.
When contacting me, you need provide only the data necessary to handle your enquiry. Without this data, it may not be possible to handle your enquiry, or it may be possible only to a limited extent.
There is no legal obligation to use the contact form. You may instead contact me by email or telephone.
Automated decision-making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.
Security
I take appropriate technical and organisational measures to protect personal data against loss, unauthorised access, alteration or disclosure.
Data is transmitted between your browser and this website using HTTPS encryption. Nevertheless, completely risk-free data transmission over the internet cannot be guaranteed.
Currency and changes to this privacy policy
This privacy policy reflects the current state of the website and the services currently used.
This privacy policy may be updated when the website, service providers or legal requirements change. The version published on this website applies.
Last updated: October 2026