Last updated: October 2026
This Privacy Policy explains how we handle personal data when you visit this website. It applies to visitors of this website.
1. Controller
Victoria Polynets, sole proprietor, trading as ViP Digital
Wuhlestraße 7a, 12683 Berlin, Germany
Email: hello@vip-digital.com
2. Overview and legal bases
We process personal data only as far as needed to run this website, to answer your enquiries and to arrange calls. Depending on the situation, the legal bases are Art. 6(1)(b) GDPR (steps prior to a contract and contract performance), Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website and in answering enquiries) and, where we ask for it, Art. 6(1)(a) GDPR (consent).
3. Hosting and server log files
This website runs on a virtual server (VPS) that we rent from netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. We operate the web server ourselves; netcup provides the server infrastructure. When you open the site, the web server automatically records technical data in log files: your IP address, date and time of the request, the page requested, the referring page, the browser and operating system, and the status of the request. We need this data to deliver the site, keep it secure and find errors. The legal basis is Art. 6(1)(f) GDPR. Log files are kept only for a short period and then deleted automatically.
We have concluded a data processing agreement (Art. 28 GDPR) with netcup.
4. Cookies and third-party content
We do not use analytics, advertising or tracking tools. This website does not set cookies or use similar technologies such as local storage, so nothing is stored on or read from your device (§ 25 TDDDG) and no cookie banner is required. Visitors are not asked to log in. The fonts used on this site are stored on our own server, so your browser does not connect to Google or any other font service. We do not embed maps, videos or social media content.
5. Contact form
If you use the contact form on our Impressum page, we process the name, email address and message you enter. The message is sent to us by email. It is not stored in the website’s database. We use it only to answer your enquiry (Art. 6(1)(b) or (f) GDPR) and delete it once the matter is dealt with, unless a statutory retention duty applies. Providing your name, email address and message is voluntary, but all three fields are required to send the form: without them we cannot receive or answer your enquiry. You are not obliged by law or contract to use the form; you can also write to us by email.
To protect the form against spam, a short technical check runs when you send a message. It uses a hidden field and a time stamp, and it keeps a shortened, hashed value derived from your connection for about one minute, which is then discarded automatically.
6. Contact by email
If you write to us by email, we process your email address, the content of your message and any details you give us, to answer you (Art. 6(1)(b) or (f) GDPR). Our email is provided by Heinlein Hosting GmbH (mailbox.org), Schwedter Straße 8/9B, 10119 Berlin, Germany. The data is processed in Germany. We have concluded a data processing agreement (Art. 28 GDPR) with the provider.
7. Booking a call (Calendly)
You can book a call with us through a scheduling page run by Calendly LLC, USA. This website only contains a link. No data is sent to Calendly until you click it. On the booking page, Calendly processes the details you enter (such as your name, email address, the time you select and any notes) and technical data such as your IP address, so that the appointment can be arranged. Calendly acts on our behalf under a data processing agreement (Art. 28 GDPR) and is certified under the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(b) GDPR. Calendly’s own privacy policy applies to its page: https://calendly.com/privacy.
We delete booking data about six months after the call, unless a contract is concluded or a statutory retention duty applies.
8. Recipients of data
Your data is passed on only to service providers who process it for us: our hosting provider (netcup), our email provider and, if you book a call, Calendly. We do not sell personal data.
9. Transfers outside the EU/EEA
Calendly is based in the USA and may process data there. Where this happens, the transfer relies on the provider’s certification under the EU-U.S. Data Privacy Framework or, as a fallback, on the EU Standard Contractual Clauses.
10. Storage duration
We keep personal data only as long as it is needed for the purpose it was collected for, or as long as a statutory retention duty requires. After that it is deleted.
11. Your rights
You have the following rights:
- access to the data we hold about you (Art. 15 GDPR);
- correction of inaccurate data (Art. 16 GDPR);
- erasure (Art. 17 GDPR);
- restriction of processing (Art. 18 GDPR);
- data portability (Art. 20 GDPR);
- objection to processing based on Art. 6(1)(f) GDPR at any time, on grounds relating to your particular situation (Art. 21 GDPR);
- withdrawal of a consent you have given at any time, with effect for the future (Art. 7(3) GDPR).
To use these rights, write to the email address in section 1.
12. Right to complain
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the data protection authority of the German federal state from which our business is actually managed.
13. Security
This website uses SSL/TLS encryption. You can recognise it by “https://” and the lock symbol in your browser’s address bar. Data you send us through the site is transmitted encrypted.
14. No automated decision-making
We do not use automated decision-making or profiling that produces legal effects concerning you.
15. Changes to this policy
We may update this Privacy Policy when the website or the law changes. The current version is always the one published here.