Privacy Policy

1. Access Data and Hosting

Hosting

You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically saves what is known as a server log file, which includes the name of the requested file, your IP address, the date and time of access, the volume of data transferred, and the requesting provider (access data). This information is collected solely to ensure the smooth operation of the website and to improve our services. This serves to protect our legitimate interests in the correct presentation of our services in accordance with Article 6 (1) sentence 1 lit. f GDPR.
All access data is processed only as long as necessary for the purposes described above.

The hosting and presentation of this website are partly carried out by our service providers as part of processing on our behalf. Unless otherwise stated in this privacy policy, all access data as well as all data collected via forms on this website are processed on their servers. For questions about our service providers and the legal basis of our cooperation with them, please refer to the contact details provided in this privacy policy.

Our service providers are located and/or use servers in the following countries, for which the European Commission has determined an adequate level of data protection: Israel, the United Kingdom, and the United States.
The adequacy decision for the United States applies insofar as the respective service provider is certified. Certification has been obtained.

Some of our service providers are located and/or use servers in other countries (e.g. Brazil, Mexico, India, Ukraine). For these countries, no adequacy decision exists. Our cooperation with these providers is based on the European Union’s Standard Contractual Clauses.

2. Data Processing for Contact and Customer Communication

Contact

When you contact us (e.g. via contact form, live chat, or email), we collect personal data as necessary to process your request in accordance with Article 6 (1) sentence 1 lit. b GDPR. Mandatory fields are marked as such, since we need this information to handle your inquiry. The data collected is apparent from the respective input forms.

After your inquiry has been fully processed, your data will be deleted unless you have expressly consented to further use of your data in accordance with Article 6 (1) sentence 1 lit. a GDPR, or unless we are legally permitted to retain it for other purposes, as explained in this privacy policy.
After completion of your inquiry, your data will be restricted from further processing and deleted after the applicable tax and commercial retention periods, unless you have given consent for longer use or a legal justification applies.

3. Cookies and Other Technologies

3.1 General Information

We use technologies (including cookies) to make your visit to our website pleasant and to enable certain functions. Cookies are small text files that are automatically stored on your device. Some cookies are deleted after you close your browser (session cookies), while others remain stored and allow us to recognize your browser upon your next visit (persistent cookies).

Protection of Privacy on Devices

When using our online services, we employ strictly necessary technologies to provide the service explicitly requested by you. Storing or accessing information on your device that is essential for the website’s function does not require your consent.

For all other (non-essential) technologies, storing or accessing information requires your consent. If you do not give consent, parts of the website may not function properly. You may withdraw any consent at any time by adjusting your browser or device settings.

Subsequent Data Processing through Cookies and Other Technologies

We use necessary technologies to enable essential features of our website (e.g. saving user preferences). These technologies collect and process IP address, time of visit, device and browser information, and usage data. This serves our legitimate interest in an optimized presentation of our services in accordance with Article 6 (1) sentence 1 lit. f GDPR.

We also use technologies to comply with legal obligations (e.g. documentation of consent) and for web analytics and online marketing. Details on each technology, its legal basis, and consent management are provided below and on our Usercentrics Consent Management Platform, accessible via the fingerprint icon at the bottom of the page.

You can find cookie-setting information for your browser here:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of technologies in accordance with Article 6 (1) sentence 1 lit. a GDPR, you may withdraw that consent at any time by contacting us or using the fingerprint icon on the website.

3.2 Use of Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Platform (“Usercentrics”) to inform you about cookies and technologies used on our website and to collect, manage, and document any legally required consents. This is necessary to comply with our legal obligation under Article 7 (1) GDPR to prove consent.
Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany, processes data on our behalf. When you visit our site, Usercentrics’ web server stores a server log file containing your anonymized IP address, the date and time of your visit, device and browser information, and details of your consent behavior. Data is deleted after three years unless you consent to further processing.

Our service providers may use servers in the United States. The adequacy decision for the United States applies if the provider is certified. Certification has been obtained.

4. Use of Cookies and Other Technologies for Web Analytics and Advertising

We use third-party cookies and technologies for web analytics and advertising as described below. Unless otherwise noted, this is based on your consent under Article 6 (1) sentence 1 lit. a GDPR. You can withdraw your consent at any time with future effect.

Use of Google Services

We use technologies from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Data collected through Google technologies is usually transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Unless otherwise stated, processing is based on a joint controller agreement under Article 26 GDPR. For further details, please refer to Google’s privacy notices.
Our service providers may use servers outside the EU/EEA. Where no adequacy decision exists, we rely on the EU Standard Contractual Clauses.

Use of Wix Statistics for Web Analytics

For website analytics, we use technologies from Wix Ltd., 40 Nemal St., Tel Aviv 6350671, Israel (“Wix”). Data (IP address, time of visit, device and browser information, location data, and usage information) is automatically collected and stored to create pseudonymous usage profiles. Cookies may be used. These profiles are not combined with personal data without explicit consent. Wix acts as a processor on our behalf.

Our service providers are located and/or use servers in Israel, the United Kingdom, and the United States (adequacy decisions in place). They may also use servers in Brazil, Mexico, India, and Ukraine; for these, our cooperation is based on EU Standard Contractual Clauses.

5. Social Media

Our Online Presence on LinkedIn

If you have consented under Article 6 (1) sentence 1 lit. a GDPR, data will be automatically collected and stored by the respective social media platform for market research and advertising purposes when visiting our LinkedIn page. Pseudonymous user profiles may be created and used for interest-based advertising within and outside the platform.

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is responsible for LinkedIn within the EU. Data may be transferred to LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, CA 94085, USA. Transfers to the US are based on the adequacy decision, provided certification exists.

6. Contact and Your Rights

6.1 Your Rights

As a data subject, you have the following rights:

Right of access (Art. 15 GDPR): to obtain information about your personal data processed by us;
Right to rectification (Art. 16 GDPR): to have inaccurate or incomplete data corrected;
Right to erasure (Art. 17 GDPR): to request deletion of your personal data, unless processing is required to exercise freedom of expression, fulfill legal obligations, serve public interest, or assert legal claims;
Right to restriction of processing (Art. 18 GDPR): under certain conditions;
Right to data portability (Art. 20 GDPR): to receive your personal data in a structured, commonly used, and machine-readable format, or to request transfer to another controller;
Right to lodge a complaint (Art. 77 GDPR): with a supervisory authority, typically at your habitual residence, workplace, or our company headquarters.

Right to Object

If we process your personal data based on legitimate interests as described above, you have the right to object at any time on grounds relating to your particular situation.
If processing is for direct marketing purposes, you may object at any time without providing reasons. After an objection, we will stop processing your data for such purposes.

6.2 Contact

For any questions regarding the collection, processing, or use of your personal data, or to exercise your rights of access, rectification, restriction, or deletion, or to withdraw consent or object to specific data uses, please contact us directly via the details provided in our Legal Notice (Impressum):

Josefine Botha
Scheffelstraße 41
Berlin, Germany
📧 josefine.botha@gmail.com