Last update
November 10, 2025
This Privacy Policy describes how Mister Rhino (“we”, “our”, “us”) collects, uses, stores, and protects your personal data when you visit our website or subscribe to our design services. We are fully committed to transparency and to complying with the EU General Data Protection Regulation (GDPR) and Germany’s Bundesdatenschutzgesetz (BDSG).
Data Controller
Hoorakhsh Pourbahrami Freelancer operating under the brand “Mister Rhino” Address: Holländerstraße 71, 13407 Berlin, Germany Email: [email protected] Phone: +49 1556 2162 085
Data We Collect
We process personal data only to the extent necessary for managing client relationships, providing design services, operating our website, and ensuring secure communication. 2.1 Personal Identification Data Collected when contacting us, signing up, or subscribing: Name Company name Position/title (optional) Email address Phone number Billing and invoicing information Address (optional, when required for invoicing or contract documents) 2.2 Subscription & Project Data Collected when using our design subscription services: Project briefs and creative requirements Brand assets, logos, fonts, and design files Uploaded documents or content (e.g., presentations, text for websites, SEO content) Internal business guidelines provided by the client Communication preferences and revision notes 2.3 Communication Data Emails exchanged Ticket/request messages Chat logs (if a chat interface is provided) Booking or scheduling information 2.4 Website & Technical Data Collected automatically during website usage: IP address (anonymized where possible) Browser type, device, operating system Referrer URL Pages accessed, duration of visit Cookies (see Cookie Policy) 2.5 Payment Data Payment processing may involve third-party payment providers (e.g., Stripe, PayPal). We do not store full credit card details on our systems.
How We Use Your Data
We process personal data for the following purposes: • To provide full-time and part-time design subscription services • To manage contracts and billing • To communicate with subscribed clients • To handle design requests, revisions, and deliverables • To store brand assets and design files securely • To improve service quality and website performance • To verify identity and prevent fraudulent activity • To maintain legal compliance (tax, invoicing, business law)
Legal Bases for Processing (GDPR)
• We process the above data based on: • Art. 6(1)(b) – Contract performance • Art. 6(1)(c) – Legal / tax obligations • Art. 6(1)(a) – Consent (e.g., marketing communication) • Art. 6(1)(f) – Legitimate interests (security, analytics, operational efficiency)
Sharing of Personal Data
We do not sell or trade personal data. We share data only with trusted service partners who support service delivery, including: Service Providers • Website hosting provider (DreamHost) • Domain & CDN security (Cloudflare) • Analytics tools (Google Analytics, Microsoft Clarity, LogRocket) • Payment processing providers (Stripe, PayPal, or local banking services — specify if needed) • Email service and monitoring (Google Workspace, Google Postmaster Tools) • Cloud storage (Google Drive, Dropbox, MEGA, or equivalent — depending on workflow) • Project management or collaboration tools (Notion, Trello, Slack, etc. — if used) All service providers operate under GDPR-compliant agreements and only process data according to documented instructions.
Cookies & Tracking
Please refer to our Cookie Policy for a detailed explanation of how cookies and tracking tools are used on our website.
Data Retention
We retain personal data only as long as necessary: • Contract and billing records: 10 years (German tax law) • Subscription-related communication: For the duration of service + 12 months • Design files and brand assets: Retained for the duration of subscription and securely deleted upon request after service termination • Email communication: 12–24 months • Analytics data: Per third-party retention guidelines
Your Rights Under GDPR
You have the right to: • Request access to your data • Request correction of inaccurate data • Request deletion of your data (where legally permissible) • Restrict processing • Object to processing • Request data portability • Withdraw consent (e.g., for marketing) at any time To exercise these rights, email us at: [email protected]
Data Security
We use appropriate technical and organizational security measures including: • SSL/TLS encryption • Firewall and DDoS protection via Cloudflare • Secure cloud storage • Access control measures • Regular security audits • Encrypted backups Despite these precautions, no transmission method is 100% secure, but we continuously update and maintain our systems to minimize risks.
Use of Third-Country Providers
Some tools (e.g., Google, Microsoft, LogRocket, Calendly if used) may process data outside the EU. Transfers occur only with GDPR-approved safeguards such as: • Standard Contractual Clauses (SCCs) • Adequate protection levels
Minors
Our services are business-oriented and not directed toward minors. If we become aware that we have collected data from a minor, we will delete it immediately.
Updates to This Privacy Policy
We may update this Privacy Policy to reflect technical changes, legal updates, or improved service processes. The updated version will be published with a new revision date.
Contact Information
For any questions, clarifications, or GDPR-related requests, contact: Hoorakhsh Pourbahrami Email: [email protected] Address: Holländerstraße 71, 13407 Berlin
