Skip to main content

Privacy & Cookie Policy

NiceJourney - Canu & Arienti GbR

Schützenstraße 15, 06842 Dessau-Roßlau, Germany

hello@nicejourney.agency

‍

Last updated: September 10, 2026

Cookie Policy

1. About This Policy

This Cookie Policy explains what cookies and similar technologies (such as local storage) nicejourney.agency uses, why we use them, and how you can control your preferences. It should be read together with our Privacy Policy, which explains in full how we handle personal data.

2. What Are Cookies?

Cookies are small text files stored on your device when you visit a website. Similar technologies — such as browser local storage — serve comparable purposes (e.g. remembering a preference) without necessarily being a traditional cookie. Both are covered by the rules below.

3. Legal Basis

Storing or accessing information on your device requires your consent under § 25 TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz — Germany's implementation of the ePrivacy Directive), unless the storage is strictly necessary to provide a service you explicitly requested. Where personal data is processed as a result, the legal basis is your consent under Art. 6(1)(a) GDPR. Legitimate interest is not an available basis for non-essential cookies under German law — only consent or technical necessity apply.

4. Cookies & Technologies We Use

4.1 Strictly Necessary (no consent required)

These are essential to functions you actively request and are exempt from consent under § 25(2) TDDDG.

  • Language preference: Local storage, remembers your chosen site language (EN/IT); duration: Persistent, until cleared
  • __stripe_mid /__stripe_sid: Cookie (Stripe), fraud prevention during checkout (set only when you initiate a payment); duration: 1 year / 30 minutes

4.2 Analytics (consent required)

We use Google Analytics 4 (Google Ireland Limited / Google LLC) to understand how visitors use our site. These cookies are not loaded until you consent.

  • _ga (Google): Distinguishes unique visitors; duration: 2 years
  • _ga_<container-id> (Google): Persists session state for GA4; duration: 2 years
  • _gid (Google): Distinguishes visitors, short-term; duration: 24 hours

We do not use advertising, remarketing, or social-media pixels.

5. Data Transfers

Google Analytics may transfer data to the United States. Google is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of protection for such transfers.

6. Your Consent

On your first visit, a banner lets you accept or decline analytics cookies before they load — declining is exactly as easy as accepting, no pre-checked boxes, and scrolling or continuing to browse does not count as consent. You can withdraw or change your choice at any time via the cookie settings link in the site footer, or by clearing cookies in your browser. Consent is remembered for 12 months, after which we'll ask again.

7. Your Rights

Under GDPR you have the right to access, correct, delete, or restrict the personal data collected via these technologies, and to lodge a complaint with a supervisory authority. See our Privacy Policy for details, or contact us at hello@nicejourney.agency.

8. Changes to This Policy

We may update this policy as our tools change. The "Last updated" date above reflects the most recent revision.

Privacy Policy

1. Overview

This Privacy Policy explains what personal data we collect when you visit nicejourney.agency or engage us for Branding, Website, Content & Strategy, or Embedded Team services, why we collect it, and what rights you have.

2. Data Controller

The controller responsible for the processing described here is:

NiceJourney - Canu & Arienti GbR, represented by Tommaso Canu and Pamela Arienti Schützenstraße 15, 06842 Dessau-Roßlau, Germany hello@nicejourney.agency

3. Hosting & Server Log Files

Our website is hosted by Webflow, Inc. Each time you visit, technical information is automatically logged: IP address, date and time of access, browser type and version, operating system, and the referring page. This is processed to ensure the site is delivered securely and reliably (Art. 6(1)(f) GDPR — our legitimate interest in operating a functioning, secure website).

Video content is delivered via Bunny.net's content delivery network, which similarly logs IP addresses for the technical purpose of serving video files. This is processed under the same legitimate-interest basis.

4. Cookies & Local Storage

We use a small number of cookies and browser storage, detailed in full in our Cookie Policy. In brief: a locally stored language preference (strictly necessary), Stripe fraud-prevention cookies during checkout (strictly necessary), and Google Analytics cookies, which only load after you give consent.

5. Contact & Email Inquiries

If you contact us — via email or a contact form — we process the personal data you provide (e.g. name, email address, message content) solely to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a potential contract, or Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries) otherwise. We delete this data once the inquiry is resolved and no statutory retention obligation applies.

6. Website Analytics — Google Analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and its parent, Google LLC (USA). This helps us understand how visitors use the site so we can improve it.

  • Legal basis: Your consent (Art. 6(1)(a) GDPR and § 25 TDDDG). You can withdraw consent at any time via the cookie settings link in the footer.
  • Data processed: Pseudonymous usage data — pages visited, session duration, approximate location (derived from IP, which is anonymized), device/browser type, and referral source. Google Analytics does not collect your name or email through this integration.
  • Retention: Data is retained by Google for 14 months, after which it is automatically deleted from our analytics account.
  • International transfer: Data may be transferred to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognizes as providing an adequate level of data protection.
  • Opt-out: You can decline analytics cookies via the banner, or install Google's official opt-out browser add-on.

7. Payment Processing — Stripe (Embedded Team)

When you subscribe to Embedded Team or make a payment, your payment details are processed by Stripe [Stripe Payments Europe, Limited], not by us directly — we never see or store full card details.

  • Data processed: Name, billing address, email, and payment details (handled entirely within Stripe's systems).
  • Legal basis: Art. 6(1)(b) GDPR — necessary to perform the subscription contract you entered into.
  • International transfer: Stripe is certified under the EU-U.S. Data Privacy Framework and additionally relies on Standard Contractual Clauses for transfers to the United States.
  • Retention: Payment records are kept for 10 years under German commercial and tax retention law (§ 147 AO, § 257 HGB).

8. Client & Project Data

For Branding, Website, and Content Strategy engagements, we process the personal data of your business contacts (names, emails, project communications) necessary to deliver the agreed work, based on Art. 6(1)(b) GDPR (contract performance). This data is retained for the duration of the engagement plus applicable statutory retention periods (see Section 7), and is not used for any other purpose without your consent.

9. Recipients of Personal Data

We share personal data only with service providers who process it on our behalf under a data processing agreement, or where legally required:

  • Google Ireland Ltd / Google LLC: Website analytics, EU / USA (DPF-certified)
  • Stripe [Stripe Payments Europe, Limited]: Payment processing, EU / USA (DPF-certified + SCCs)
  • Webflow, Inc.: Website hosting, USA (DPF-certified + SCCs)
  • Bunny.net: Video content delivery, EU-based CDN

We do not sell personal data, and we do not share it for third-party advertising purposes.

10. Data Security

We use appropriate technical and organizational measures (e.g. encrypted connections via HTTPS) to protect your data against unauthorized access, loss, or misuse.

11. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15)
  • Rectification of inaccurate data (Art. 16)
  • Erasure ("right to be forgotten"), subject to statutory retention obligations (Art. 17)
  • Restriction of processing in certain circumstances (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))

To exercise any of these rights, contact us at hello@nicejourney.agency.

12. Right to Lodge a Complaint

You have the right to complain to a data protection supervisory authority. The authority responsible for us is:

Landesbeauftragte für den Datenschutz Sachsen-Anhalt Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Germany

poststelle@lfd.sachsen-anhalt.de

13. Data Protection Officer

Given the size of our team, we are not legally required to appoint a Data Protection Officer under Art. 37 GDPR / § 38 BDSG. For any data protection questions, contact us directly at hello@nicejourney.agency.

14. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects concerning you.

15. Changes to This Policy

We may update this policy as our tools or legal obligations change. The date above reflects the most recent revision.

‍