Controller as defined by data protection laws, in particular the EU General Data Protection Regulation (GDPR):

Chiara Ernsting

Your Rights as a Data Subject

You may exercise the following rights at any time by contacting our data protection officer via the provided contact details:

• Access to your data stored with us and information about its processing (Art. 15 GDPR),

• Rectification of incorrect personal data (Art. 16 GDPR),

• Erasure of your data stored with us (Art. 17 GDPR),

• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),

• Objection to the processing of your data by us (Art. 21 GDPR), and

• Data portability, provided you have consented to data processing or entered into a contract with us (Art. 20 GDPR).

If you have given us consent, you can revoke it at any time with future effect.

You may lodge a complaint at any time with a supervisory authority, e.g., the competent authority in the state of your residence or the authority responsible for us.

A list of supervisory authorities (for the non-public sector) along with their addresses is available at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.

Non-Essential Cookies

We may use cookies to better align our website offerings with visitor interests or to improve our services based on statistical analyses.

Legal Basis:

The legal basis for this processing is your consent under Art. 6 (1)(a) GDPR.

Recipients:

Recipients of the data may include technical service providers acting as processors to operate and maintain our website. Additional recipients are listed in the information provided below regarding display, tracking, remarketing, and web analytics technologies.

Third-Country Transfers:

Please refer to the listings for individual display, tracking, remarketing, and web analytics providers for details.

Provision Required or Necessary:

You can generally view our website without cookies. Most browsers are set to accept cookies by default. You can disable the use of cookies in your browser settings at any time (see Consent Withdrawal). Note that certain website features may not function if cookies are disabled.

Withdrawal of Consent:

You can withdraw your consent at any time via our cookie consent tool.

Profiling:

Information about whether we analyze website visitor behavior using pseudonymized user profiles can be found in the information provided below regarding display, tracking, remarketing, and web analytics technologies.

Provision of Paid Services

Purpose of Processing:

To provide paid services, we may request additional data, such as payment details, to fulfill your order.

Legal Basis:

The processing required to fulfill a contract is based on Art. 6 (1)(b) GDPR.

Recipients:

Recipients of the data may include processors.

Storage Period:

We retain this data in our systems until statutory retention periods expire, typically 6 or 10 years for proper accounting and tax compliance.

Provision Required or Necessary:

Providing your personal data is voluntary. However, without providing it, we cannot grant access to the services and content offered.

Comment Function

Purpose of Processing:

When users leave comments on our website, we store the comment details, the time of creation, and the username provided by the website visitor. This is to ensure security, as we may be liable for unlawful content on our website even if created by users.

Legal Basis:

Processing is based on legitimate interest (Art. 6 (1)(f) GDPR).

Recipients:

Recipients of the data may include processors.

Storage Period:

Data is deleted once it is no longer needed for its intended purpose, usually after communication with the user is completed.

You may delete your comment by contacting our data protection officer via the provided email, including the comment link and the email address used when creating it.

Provision Required or Necessary:

Providing your personal data is voluntary. However, without it, we cannot grant access to the comment feature.

Newsletter

Purpose of Processing:

To send newsletters, we collect personal data via an input form. A valid email address is required. We use a “double opt-in” process to verify ownership of the email address.

Legal Basis:

Based on your explicit consent (Art. 6 (1)(a) GDPR), we send newsletters to your provided email address. You can withdraw this consent at any time with future effect.

Recipients:

Recipients of the data may include processors.

Storage Period:

Data is processed only while consent is valid. Upon withdrawal, it is deleted.

Provision Required or Necessary:

Providing personal data is voluntary. Without consent, we cannot send newsletters.

Withdrawal of Consent:

To prevent tracking, revoke consent in our cookie consent tool.

Social Plugins

Our website uses social plugins identified by their respective logos. To prevent unintentional data transmission, plugins are only activated after a user clicks the relevant button (2-click solution).

Refer to the respective provider’s privacy policies for detailed information.

SSL Encryption

To protect your data during transmission, we use SSL encryption via HTTPS in line with the latest technology.

Information on Your Right to Object (Art. 21 GDPR)

You have the right to object, at any time, for reasons related to your specific situation, to the processing of your personal data based on Art. 6 (1)(f) GDPR.

If you object, we will cease processing unless we can demonstrate compelling legitimate grounds or the processing serves to establish, exercise, or defend legal claims.

Recipient of Objection:

Chiara Ernsting

Amendments to This Privacy Policy

We reserve the right to amend this privacy policy to reflect changes in legal requirements or our services. For your next visit, the updated privacy policy will apply.