Dreamseven · Legal
Privacy Policy
Which data we process, what we need it for, and what rights you have.
Responsible for your data
Dreamseven
Steve Menzel
At the meadow 18
32694 Dörentrup
Germany
Phone: +49 1556 9412057
Email: info@dreamseven.de
These notices describe the processing of personal data on dreamseven.de and in requests to Dreamseven. For the planned social media appearances, you will find separate notices.
Website access & hosting
Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, in Germany. When accessed, technical data is processed: IP address, date and time, requested address, status message, amount of data transferred, and details about the browser, operating system, and where applicable, the previously visited page (referrer).
This enables delivery of the website, troubleshooting, and protection against attacks. The legal basis is Article 6( 1) (f) of the GDPR; our legitimate interest lies in the secure and reliable operation. Access is provided to us and to the hosting provider as part of operations. Log data is kept only for as long as required for operating and security purposes; in the event of a specific incident, up to its resolution. Privacy information from ALL-INKL.COM.
Contact, project requests & support
If you contact us by form or email, we process your information in order to understand the matter, respond, and, where applicable, prepare an offer or further cooperation. This includes in particular your name, email address, message, and – as far as provided – company, telephone number, website, project requirements, budget, availability, and details about a support matter.
The forms are operated with Fluent Forms on our WordPress system. Your message is stored in the website database and forwarded by email to info@dreamseven.de. You receive a confirmation of receipt. In addition, the time of receipt, form page, IP address, browser, and operating system are recorded; for registered users, the user identifier is also recorded. A country identifier may be taken from the request information provided by the server. These technical details are used for allocation and abuse detection. A hidden validation field helps fend off automated spam requests.
For inquiries to initiate or carry out a contract with you, Article 6( 1) (b) of the GDPR applies. For other inquiries, in particular by company representatives, Article 6( 1) (f) of the GDPR applies: Our legitimate interest is appropriate communication and processing. The protection of forms against misuse is also based on this interest.
Required fields are marked in the respective form. Without the information needed to process the request, we cannot respond meaningfully. Additional information is voluntary. Please do not submit passwords, health data, or confidential data of third parties via the open forms. For necessary confidential documents, we agree on an appropriate delivery method.
Cookies, fonts & embedded content
The font Manrope used is loaded directly from our server. The images and background videos embedded on the performance pages are also provided locally. For this, no connection is established to Google Fonts, YouTube, or image portals when the page is accessed.
For configurators, your selection is first processed in the browser; a request is not transmitted until you deliberately submit a contact form. The AI services described on the website do not mean that your form message is automatically sent to an AI provider.
Cookie Portal: To manage your data protection selection, we load the cookie loader from cookieportal.de. In doing so, the server receives technical information including, in particular, your IP address and browser information. Your selection is stored in a cookie and in the local browser storage with an authorization identifier, time, and configuration version, and is transmitted to the portal for documentation. The current validity is 180 days; if the configuration changes, you can be asked again in advance. Local storage may remain until overwritten or deleted by your browser. You can change or revoke your selection at any time via “Cookie settings”. The necessary storage of your selection is carried out in accordance with Section 25( 2) No. 2 TDDDG; processing to fulfill and to provide evidence of our consent obligations on the basis of Article 6( 1) (c) of the GDPR.
Website statistics with Dreamseven Insights: If you consent in the cookie portal to the “Statistics” category, we count page views, confirmed form submissions, and clicks on telephone and email links. This allows us to recognize which content is used and which pages visitors contact us from. Insights stores daily counters in WordPress with the affected page, a rough origin category, a screen size class, and the type of action. For supported forms, the form ID may be added. Form contents, full referrer addresses, and IP addresses are not stored in the Insights reports. For the technical operation of the website, server logs may be created independently of this. The daily counters are deleted after 365 days. Processing is carried out on the basis of your consent under Article 6( 1) (a) of the GDPR. To the extent information is read on your end device, this is done with your consent under Section 25( 1) TDDDG. You can revoke the permission at any time in the future using the cookie symbol.
When logging in to the WordPress administration area, technically necessary cookies are used to enable login and the session. Depending on your selection, they apply to the session or the selected login duration. The legal bases are Section 25( 2) No. 2 TDDDG for the necessary access to the end device, and Article 6( 1) (f) of the GDPR for secure administration. Non-essential storage access and services for which consent is required may only be used after you have given your consent.
Links to other websites are simple references. You only access the respective provider when you follow them. Their privacy notices apply there. The placeholders for our planned social media profiles do not establish a connection to the platforms.
Data backups & recipients
To restore after a technical failure or data loss, we create backups of the website files and the database with UpdraftPlus. These may also include stored form entries and their technical accompanying data. Google Drive is connected as external storage.
For users in the European Economic Area, Google Drive is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. During storage and provision, Google LLC in the USA and additional Google infrastructure may also be involved. Our purpose is the recoverability of the website and its data; the legal basis is Article 6( 1) (f) of the GDPR with the legitimate interest in data security and business continuity.
For transfers to the certified Google LLC, Google describes the EU-U.S. Data Privacy Framework and, where necessary, standard contractual clauses. You can find the information and ways to obtain these guarantees in the Google notices on international data transfers. Additional: Google privacy policy.
Currently, daily backups and, for each, two retained backup generations for files and the database are set. This is a rolling backup inventory; no guaranteed deletion period of two days. Data may continue to be included in it until it is replaced by a backup. Only the parties involved in operations and recovery, as well as the storage providers used, have access.
How long data is stored
For requests, the retention period depends on the matter: We need the data while processing and for possible follow-up questions. In the case of an assignment, the information required for this becomes part of the contract documents. After that, statutory retention obligations and, if applicable, asserting, exercising, or defending legal claims are decisive. Data that is no longer required must be deleted.
For documents that must be retained by law, we process them on the basis of Article 6( 1) (c) of the GDPR. To the extent data remains necessary for legal claims, Article 6( 1) (f) of the GDPR applies. What is decisive is the type of document, the end of the business relationship, and ongoing proceedings. Form messages are not removed from the website database solely by sending the notification email. For backup copies, the backup cycle described above applies.
Your rights
Under the statutory conditions, you can request access to your data, rectification of incorrect information, deletion, restriction of processing, and data portability (Article 15 to 20 of the GDPR). To do so, contact us at info@dreamseven.de. For processing, appropriate proof of your identity may be required.
Objection: If processing is based on Article 6( 1) (f) of the GDPR, you can object to it for reasons arising from your particular situation (Article 21 of the GDPR). You can object at any time to processing for direct advertising.
Where processing is based on your consent, you can revoke it at any time with effect for the future. The lawfulness of processing up to the revocation remains unaffected. In processing your website request, we do not make any purely automated decision with legal or similarly significant effect within the meaning of Article 22 of the GDPR.
Complaint & updates
You can lodge a complaint with a data protection supervisory authority, in particular in your usual place of residence, your place of work, or the place where a suspected infringement took place. For our registered office, the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia is responsible: Kavalleriestraße 2–4, 40213 Düsseldorf, email: poststelle@ldi.nrw.de. Contact with LDI NRW.
These notices are updated when the website functions or the processing changes. Status: 14. October 2026.