Privacy Policy

1. Controller

A Color Bright GmbH
Kottbusser Damm 79, 10967 Berlin, Germany
Email: info@acolorbright.com · Phone: +49 30 5770 4945 0
Commercial register: Amtsgericht Charlottenburg, HRB 150475 B

2. Data we process

When you visit this website, we process:

  • IP address (anonymized), browser and device information, and visit timestamps, for privacy-friendly traffic analysis;
  • technical error data (browser, device, error context), for identifying and fixing website issues.

3. Legal basis

We process this data on the basis of our legitimate interest in operating, securing, analyzing and improving our website (Art. 6(1)(f) GDPR).

4. Service providers (processors) and recipients

We engage the following providers, each under a data processing agreement pursuant to Art. 28 GDPR:

a) Sanity (Sanity AS, Lille Grensen 5, 0159 Oslo, Norway) – content management and delivery. Content is stored on Google Cloud infrastructure within the EU (Belgium). Legal basis: Art. 6(1)(f) GDPR.

b) Vercel (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) – website hosting and content delivery. Legal basis: Art. 6(1)(f) GDPR.

c) Fathom Analytics (Conva Ventures Inc., Canada) – privacy-friendly, cookieless website analytics. EU visitor data is processed exclusively on EU servers (Frankfurt, Germany) via Fathom's EU Isolation. Legal basis: Art. 6(1)(f) GDPR.

d) Sentry (Functional Software, Inc., USA) – error monitoring, to detect and resolve technical errors. Legal basis: Art. 6(1)(f) GDPR.

e) Rumicat (Nternet Company B.V., Keizersgracht 241, 1016 EA Amsterdam, The Netherlands) – newsletter delivery. See section 9 for details.

5. Transfers to third countries

  • Fathom: EU visitor data remains within the EU (Frankfurt); no third-country transfer of EU visitor data.
  • Sanity: primary storage is within the EU (Belgium). Where a sub-processor outside the EEA is involved, transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).
  • Vercel and Sentry (USA): both are certified under the EU-U.S. Data Privacy Framework, providing an adequate level of protection (Art. 45 GDPR); EU Standard Contractual Clauses additionally apply as a safeguard.

6. Retention

We retain this data only as long as necessary for the stated purposes:

  • analytics data is stored in aggregated, non-identifying form only;
  • error logs are deleted after 90 days.

Newsletter data is retained as described in section 9.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, objection, and data portability. To exercise these rights, contact info@acolorbright.com.

You also have the right to lodge a complaint with a supervisory authority; the authority competent for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, BlnBDI).

8. Cookies

This website does not use cookies.

9. Newsletter

If you subscribe to our newsletter, we process the email address you provide in order to send you the newsletter.

  • Data we process: your email address, plus the date, time and IP address of your subscription and confirmation (to document your consent).
  • Double opt-in: After you enter your email address, we send you a confirmation email. Your subscription only becomes active once you click the confirmation link. This lets us verify that the address belongs to you.
  • Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future, without giving reasons and free of charge — either via the unsubscribe link in every newsletter or by emailing info@acolorbright.com. Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.
  • Service provider (processor): We use Rumicat, operated by Nternet Company B.V., Keizersgracht 241, 1016 EA Amsterdam, The Netherlands, to send our newsletter, under a data processing agreement pursuant to Art. 28 GDPR. To deliver the newsletter, Rumicat engages the following sub-processors: Supabase (database) and Resend (email delivery); the service is hosted on Vercel. Data is processed within the EU/EEA; where a sub-processor is located outside the EEA, transfers are safeguarded by the EU Standard Contractual Clauses (Art. 46 GDPR).
  • Retention: We store your data for as long as you are subscribed. After you unsubscribe, we retain the record of your consent for as long as necessary to defend against potential legal claims, and then delete it.

Last updated: 18 June 2026