← Modelwright

Privacy policy

Diese Seite ist die englische Übersetzung unserer Datenschutzerklärung. Maßgeblich ist die deutsche Fassung.

As of 27 October 2026 — This privacy policy was prepared with care but does not replace a review by a lawyer. This is a translation for convenience; in case of any discrepancy, the German version prevails.

1. Controller

Pale Blue Dot GmbH, Alte Kasseler Str. 52, 35039 Marburg, Germany
represented by the managing director Yasaman Serajian
Phone: +49 177 5380559 · E-mail: [email protected]

2. Overview

Without your consent, this website sets no cookies, loads no analytics or tracking tools and embeds no third-party content. Fonts and the 3D library (three.js) are loaded from our own web space; merely visiting the site creates no connections to Google, Microsoft or any other provider.

Only if you choose “Accept all” in the consent panel do we load Google Analytics 4 and Microsoft Clarity to understand how our pages and 3D demos are used. If you choose “Only necessary”, none of these tools is loaded and the website works fully. You can withdraw your consent at any time via “Cookie settings” in the footer.

3. Hosting and server log files

The website runs on our own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (data centre in the EU). When you visit, the server processes technically necessary data (IP address, date and time, requested page, browser and device information) in order to deliver the website and protect it against misuse. These server log files are deleted automatically after 14 days.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).

4. Contact form, e-mail and phone

Contact form. When you submit the form, we transmit your details (name, company, e-mail, optionally phone, website, industry, desired solution, message and the example you came from) in encrypted form to our server. There the enquiry is stored briefly and forwarded as an e-mail to our mailbox [email protected]; the temporary copy on the server is deleted after 30 days at the latest. Our mailbox is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) as part of Google Workspace. To deliver this e-mail to our mailbox we use Mailgun (Mailgun Technologies, Inc., San Antonio, Texas, USA; processing in its EU data centre). Mailgun processes the enquiry only for delivery; click and open tracking are switched off. Any transfers to the USA rely on the EU-US Data Privacy Framework or standard contractual clauses.

To protect against automated spam, your browser solves a small computational task when you submit the form; no third-party services are involved and no cookies are set. For this purpose, your IP address is held only briefly in working memory (as a hash) to limit excessive requests, and is not stored.

If you contact us by e-mail or phone, we process your details (e.g. name, company, contact details, content of the enquiry) to answer your enquiry and prepare an offer. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in handling business enquiries). We delete the data once the enquiry has been fully dealt with, unless statutory retention obligations (e.g. under commercial and tax law) require otherwise.

5. Consent, cookies and local storage

On your first visit, a panel asks whether you agree to the use of Google Analytics and Microsoft Clarity. We store your decision (“Only necessary” or “Accept all”) in your browser’s local storage (localStorage) under the name mw_consent, together with the time of the choice; after 12 months we ask again. This entry contains no identifier that identifies you personally, is not transmitted to us and is strictly necessary to respect your choice (Section 25(2) no. 2 TDDDG, Art. 6(1)(c) and (f) GDPR).

Only with your explicit consent are the following cookies also set:

For Clarity, Microsoft also lists cookies on Microsoft domains (e.g. MUID, CLID, ANONCHK, MR, SM), some of which Microsoft also uses for advertising. We do not give Clarity consent for advertising purposes (ad_Storage stays “denied”); in our tests, only the four cookies listed above were set.

For visits by our own team, a browser can be marked as internal with the link suffix ?intern=1 (entry mw_intern in local storage). These visits are labelled as internal traffic in Google Analytics and filtered out of the reports; Microsoft Clarity is not loaded for them. For other visitors this entry plays no role.

Withdrawal: The “Cookie settings” link in the footer reopens the panel at any time. If you choose “Only necessary” there, Google Analytics and Microsoft Clarity stop sending data; the cookies _ga, _ga_PWRJ4970YZ, _clck and _clsk are deleted and Clarity is instructed to remove its cookies. From the next page view on, neither tool is loaded. We cannot technically delete cookies on Google or Microsoft domains. The withdrawal applies to the future; the lawfulness of the processing carried out until then is not affected. You can also delete or block cookies and local storage in your browser at any time.

6. Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It shows us how visitors use our website, for example which pages are viewed, through which channels visitors reach us, which 3D demos are opened and used, and whether an enquiry was successfully sent through the contact form. These analyses help us improve the website and our offer.

Google Analytics is loaded only after your explicit consent. Without consent, no Google script is loaded, no cookie is set and no connection to Google is made. We also use Google’s Consent Mode: all consent signals are set to “denied” by default; after your consent, only analytics storage (analytics_storage) is allowed. Advertising signals (ad_storage, ad_user_data, ad_personalization) stay denied. Because the Google script is not loaded at all before your consent, no cookieless measurement pings are sent to Google beforehand either.

After your consent, cookies are set (_ga, _ga_PWRJ4970YZ) and usage data such as pages viewed, time spent, scroll depth, clicks on demos and enquiry links, device, browser, approximate region and the source of the visit are transmitted to Google. We do not transmit names, e-mail addresses or message texts from the contact form to Google. According to Google, Google Analytics 4 does not log or store IP addresses of users in the EU: the data is received through servers in the EU, where the IP address is used only to derive the approximate location (city, region, country) and is then discarded immediately. Google signals and the use of the data for personalised advertising are disabled. We have set the retention period for event-level and user-level data to 14 months; for user-level data the period restarts with every new visit. After that, this data is deleted. Aggregated reports without reference to individual users (e.g. page views per month) may be kept longer. Google processes the data as our processor on the basis of Google’s data processing terms (Art. 28 GDPR).

The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, via “Cookie settings” in the footer.

More information: policies.google.com/privacy, support.google.com/analytics/answer/6004245 (privacy in Google Analytics) and support.google.com/analytics/answer/12017362 (EU data collection).

7. Microsoft Clarity

This website uses Microsoft Clarity, an analytics service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Clarity records how visitors operate the page, for example mouse movements, clicks, scrolling and touch gestures, and turns this into session replays and heatmaps. This shows us where our pages or 3D demos are hard to understand or where something does not work.

Clarity is loaded only after your explicit consent; Clarity is then told through its consent interface (Consent API v2) that only analytics storage is allowed, not advertising storage. We use the strictest masking level (“Strict”): the content of the page and all entries in form fields are made unrecognisable in your browser; according to Microsoft, masked content is not transmitted to Clarity.

After your consent, cookies are set (_clck, _clsk) and usage and device data (e.g. screen size, browser, approximate region, pages viewed and the interactions described above) are transmitted to Microsoft. According to Microsoft, session recordings are kept for 30 days from the time of recording; recordings marked as favourites and a random sample of recordings are kept for up to 9 months. Heatmaps are available for up to 9 months. Clarity stores the data in the Microsoft Azure cloud platform.

The legal basis is your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR, which you can withdraw at any time via “Cookie settings” in the footer.

More information: privacy.microsoft.com/en-gb/privacystatement, learn.microsoft.com/en-us/clarity (cookies) and the Clarity FAQ (retention, data transfers).

8. Data transfers to the USA

If you consent to Google Analytics and Microsoft Clarity, your personal data (in particular device and usage data, cookie identifiers and, during transmission, your IP address) may also be transferred to and processed on servers of Google LLC or Microsoft Corporation in the USA.

Both companies are certified under the EU-U.S. Data Privacy Framework; for transfers to certified US companies there is an adequacy decision of the European Commission of 10 July 2023 (Art. 45 GDPR). In addition, both providers rely on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR): Google in its data processing terms, Microsoft in the contract between Microsoft Ireland Operations Limited and Microsoft Corporation.

We nevertheless point out that US authorities may in some circumstances access data stored on US servers. If you want to avoid this, choose “Only necessary” in the panel; the website is then fully available to you.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal message to the contact details above is sufficient. You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR), on this website via “Cookie settings” in the footer.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

10. No obligation to provide data, no automated decisions

You are not obliged to provide us with data; without it, however, we cannot answer your enquiry. No automated decision-making, including profiling, takes place.

As of: 27 October 2026 · Translation of the German version of the same date; the German version prevails.

Impressum (legal notice) · Datenschutzerklärung (German) · Cookie settings