Privacy Policy
Information on the processing of personal data under Article 13 GDPR
Scope
This privacy notice applies to the roomseventeen website and explains the limited personal data processed when you visit the site or contact the practice.
Controller
Ariane Mostert, roomseventeen
Liebigstraße 21a
60323 Frankfurt am Main
Germany
Email: ariane@roomseventeen.de
Data processed
| Data Type | How it is received | Purpose |
|---|---|---|
| Technical connection data | Generated when the site is requested | Vercel hosting, delivery, security logging and maintaining the website |
| Email correspondence | Provided when you email roomseventeen | Responding to enquiries and discussing potential or active projects |
| Contact-form entries | Name, email address, inquiry type and message submitted through the form | BotID verification, delivering the inquiry and replying to it |
Purposes and legal bases
- Technical data may be processed where necessary to provide and secure the website on the basis of legitimate interests under Article 6(1)(f) GDPR.
- Enquiry data may be processed to take steps at your request before entering into a contract under Article 6(1)(b) GDPR, or to respond to general correspondence on the basis of legitimate interests under Article 6(1)(f) GDPR.
- With consent, Vercel Web Analytics and Vercel Speed Insights may measure production-site usage and performance.
Contact inquiries
The form collects your name, email address, inquiry type and message. Vercel BotID checks the submission for automated abuse. For inquiries that pass validation and abuse checks, the visitor's email address is set as Reply-To so roomseventeen can respond.
Contact inquiries are sent through Resend to roomseventeen. The website does not keep a separate inquiry database. Non-client inquiries should be deleted 12 months after the last communication; records connected to active work or legal obligations may be retained longer.
Hosting, measurement and external content
Vercel hosts and delivers the website. Requests may generate technical connection and security logs, including information such as an IP address, browser or device details, requested resource, timestamp and diagnostic information, for operation and protection of the site.
After consent on the production site, Vercel Web Analytics and Vercel Speed Insights collect privacy-filtered usage and performance measurements. They remain disabled when consent is declined or withdrawn, and local and preview deployments do not collect this Vercel telemetry.
Some pages load the Unicorn Studio visual runtime from the jsDelivr content-delivery network. That external request may disclose technical connection data such as your IP address, browser information, requested resource and time of access.
Retention
Vercel hosting and security logs are retained according to the applicable service settings. Non-client inquiries should be deleted 12 months after the last communication; records connected to active work or legal obligations may be retained longer.
Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, data portability, or object to processing. You may exercise these rights by emailing ariane@roomseventeen.de.
You may also lodge a complaint with a data protection supervisory authority. The competent authority in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information.
Updates
This notice reflects the repository configuration as of 15 July 2026 and will be updated when the site's data processing changes.