Privacy Policy

Information on how Significant.Works processes personal data when you visit this website or contact us.

Last updated: 17 August 2026

1. Privacy at a glance

This notice gives an overview of what happens to personal data when you visit this website. Personal data is any information that can be used to identify you directly or indirectly.

Some data is generated automatically when the website is accessed, particularly technical information such as your IP address, browser, operating system, referring page and time of access. We use this information to provide the website securely and reliably. Other data is processed when you contact us by email or phone.

The website currently has no contact form. Selected case pages contain embedded videos and the site loads fonts from Google servers; details are set out below.

2. Controller

Pilz & Reimers GbR — Significant.Works
Billhorner Röhrendamm 8
20539 Hamburg
Germany

Represented by the partners Felix Reimers and Patrick Pilz.

Phone: +49 1577 7801202
Email: work@significant.works

The controller is the person or entity that determines the purposes and means of processing personal data.

3. Hosting and server logs

This website is hosted by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA (“Webflow”). When you access the website, Webflow and its infrastructure providers may process server log data such as your IP address, date and time of access, requested page or file, referrer URL, browser type, operating system, device information, transferred data volume and HTTP status.

Processing is necessary to provide a secure, stable and efficient website and is based on our legitimate interests under Article 6(1)(f) GDPR. Where processing is necessary in connection with a contract or pre-contractual communication, Article 6(1)(b) GDPR also applies.

We have concluded the data-processing arrangements provided by Webflow. Data may be processed in the United States. Webflow states that it relies on the EU–U.S. Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses for international transfers.

Further information: Webflow Privacy Policy and Webflow Data Processing Addendum.

4. Contact by email or phone

If you contact us by email or phone, we process the information you provide, including your name, contact details, message and any project or contractual information, in order to respond to your enquiry.

Where your enquiry concerns a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in handling enquiries effectively under Article 6(1)(f) GDPR, or on your consent under Article 6(1)(a) GDPR where consent has been requested.

We retain this data until the purpose of the enquiry has been fulfilled, you request deletion, or you withdraw consent, unless statutory retention duties or other lawful grounds require longer storage.

5. Google Fonts

This website uses Google Fonts supplied through Google servers to display typefaces consistently. When a page is opened, your browser connects to Google and may transmit your IP address, browser and device information, the requested page and technical request data.

The provider for users in the European Economic Area is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; data may also be processed by Google LLC in the United States.

The use of these fonts supports a consistent and efficient presentation of the website and is based on our legitimate interest under Article 6(1)(f) GDPR. Where consent is legally required or requested, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG; consent may be withdrawn at any time.

Further information: Google Privacy Policy.

6. Embedded videos: YouTube, Vimeo and Embedly

Selected case pages embed videos hosted by YouTube and Vimeo. Webflow’s Embedly integration may be used to deliver the relevant player. Providers involved may include Google Ireland Limited and Google LLC for YouTube, Vimeo.com, Inc. for Vimeo, and the infrastructure serving content through cdn.embedly.com.

When you open a page containing an embedded player, a connection can be established with these providers. They may receive your IP address, browser and device information, the page visited, referrer information and interaction data. Cookies, local storage or similar technologies may also be used by the player. If you are signed in to the relevant provider, the visit may be linked to your account. Vimeo is currently called with a do-not-track parameter where supported, but this does not exclude all technical data processing.

We use embedded media to present our portfolio in audiovisual form. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. Where consent is legally required or requested, processing is based on Article 6(1)(a) GDPR and Section 25(1) TDDDG. Data may be transferred to the United States subject to the provider’s applicable transfer safeguards.

Further information: Google / YouTube Privacy, Vimeo Privacy and Vimeo Cookie Policy.

7. External links and social media

This website links to external websites and social platforms, including Instagram, LinkedIn, YouTube and credited artists’ profiles. These are ordinary links. Data is generally transmitted to the external provider only when you click a link. The respective provider is responsible for processing on its own website or platform.

8. SSL/TLS encryption and recipients

This website uses SSL/TLS encryption to protect data transmitted between your browser and the website. You can recognise an encrypted connection by the “https://” address and the lock symbol in your browser.

Personal data is disclosed only where this is necessary for website operation, communication, contract performance, compliance with a legal obligation or the protection of legitimate interests. Recipients may include hosting and technical service providers, communication providers, professional advisers and public authorities where legally required. Service providers acting on our behalf are bound by applicable data-protection requirements.

9. Storage period

Unless a more specific period is stated in this notice, personal data is stored only for as long as necessary for the purpose for which it was collected. Data is deleted when the purpose no longer applies, a valid deletion request is made or consent is withdrawn, unless statutory retention periods, contractual obligations or the establishment, exercise or defence of legal claims require continued storage.

10. Your rights

Subject to the conditions of the GDPR, you have the right to:

  • obtain information about and access to your personal data (Article 15 GDPR);
  • request correction of inaccurate data (Article 16 GDPR);
  • request erasure (Article 17 GDPR);
  • request restriction of processing (Article 18 GDPR);
  • receive data you provided in a portable format where applicable (Article 20 GDPR);
  • object to processing based on legitimate interests and to direct marketing (Article 21 GDPR); and
  • withdraw consent at any time with effect for the future (Article 7(3) GDPR).

You also have the right to lodge a complaint with a data-protection supervisory authority under Article 77 GDPR. The competent authority for our registered office is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), datenschutz-hamburg.de.

To exercise your rights, contact work@significant.works.

11. Updates to this notice

We may update this privacy notice when the website, the services we use or legal requirements change. The current version is always available on this page.