Privacy

1. Controller

Elysium Brands GmbH, Salzburger Str. 4, 10825 Berlin, Germany, represented by its Managing Director Theodoros Fotiadis · studio@elysium-brands.com. We are not required to appoint a data protection officer.

2. Hosting, server logs and content delivery

This website is hosted by Wix.com Ltd., Nemal Tel Aviv St. 40, Tel Aviv, Israel, with whom we have a data processing agreement (Art. 28 GDPR). Images and films are delivered from Wix's content delivery network. When you visit, technical data such as IP address, date and time, the page requested, browser and operating system are processed to deliver the site and keep it secure (Art. 6 (1) (f) GDPR). The European Commission recognises Israel as providing an adequate level of data protection (Art. 45 GDPR). Where Wix uses service providers in the USA, transfers are based on the EU–US Data Privacy Framework or the EU Standard Contractual Clauses (Art. 45, 46 GDPR). We have no access to individual log entries and do not use them to identify visitors.

3. Encryption

This website uses TLS encryption (https). Data you send us cannot be read by third parties in transit.

4. Contact, meeting and access requests

When you send a form, we receive the details you enter (such as name, company, email and message) through Wix Forms and use them only to answer your request (Art. 6 (1) (b) GDPR for enquiries about a project, otherwise Art. 6 (1) (f) GDPR). To send a form, your browser obtains a short-lived technical session token from Wix; it is held only in the open page's memory and not stored on your device. The same applies when you email us. We delete requests once they are handled, unless statutory retention periods apply (commercial and tax law: six to ten years).

5. Receive new work privately

If you join our private list, we use your name and email address to send you new work occasionally (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time by writing to studio@elysium-brands.com; your data is then deleted.

6. Cookies and local storage

With your consent we load two measurement services. Metricool, a service of Metricool SL, Spain, counts which pages visitors reach and where they arrived from; it sets cookies on your device and processes within the EU. Google Ads conversion measurement, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, records whether a visit that came from one of our Google ads leads to a meeting request; it sets cookies, does not receive the content of your form, and may transfer data to the USA (EU–US Data Privacy Framework). We do not use it for personalised advertising. Legal basis: your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR), which you can withdraw at any time. If you choose Necessary only, nothing of the kind is loaded and nothing is set. We store only your cookie choice in your browser's local storage, so the banner does not reappear (§ 25 (2) TDDDG). You can change your choice at any time under “Cookie settings” at the bottom of every page.

7. Films from YouTube

Some films are provided by YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). They load only after you allow films, in YouTube's privacy-enhanced mode (youtube-nocookie.com). Once loaded, YouTube may set cookies and process data, including in the USA (EU–US Data Privacy Framework), under its own privacy policy. Legal basis: your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw at any time.

8. Fonts

This website uses fonts installed on your device. No fonts are loaded from third-party servers.

9. Our social media profiles

We maintain profiles on Instagram and Facebook (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland), Pinterest (Pinterest Europe Ltd., Palmerston House, Fenian Street, Dublin 2, Ireland) and YouTube (Google Ireland Limited). This website only links to them; no plugins are embedded and no data is sent to these networks while you browse here. When you visit our profiles, the respective network processes your data under its own privacy policy, including in the USA. For Facebook and Instagram page statistics, we and Meta are joint controllers (Art. 26 GDPR); Meta has assumed primary responsibility under its Page Insights Controller Addendum. We use the profiles to present our work and to communicate with you (Art. 6 (1) (f) GDPR). We plan and publish posts with Metricool (Metricool Software S.L., Valencia, Spain); it processes only the data of our own accounts and the public interactions with our posts.

10. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), and to withdraw consent at any time with effect for the future. Where we process data on the basis of legitimate interests, you may object at any time for reasons arising from your particular situation (Art. 21 GDPR). You may lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin).

11. No automated decisions

We do not use automated decision-making or profiling (Art. 22 GDPR).

12. Changes

We update this policy when the website or the law changes. The current version is always available here.

Last updated: 17 October 2026.