Data protection information
Data controller
The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is Fraeya Whiffin
Your rights as a data subject
In accordance with the EU General Data Protection Regulation (GDPR), you can exercise the following rights at any time using the contact details provided
information about your data stored by me and its processing (Art. 15 GDPR),
correction of incorrect personal data (Art. 16 GDPR),
erasure of your data stored by me (Art. 17 GDPR),
restriction of data processing if I am not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
objection to the processing of your data by me (Art. 21 GDPR) and
data portability if you have consented to data processing or have concluded a contract with me (Art. 20 GDPR).
If you have given me your consent, you can withdraw it at any time with effect for the future.
You can lodge a complaint with a supervisory authority at any time, e.g. the competent supervisory authority in the federal state of your place of residence or the authority responsible for me as the controller.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Processing activities
Collection of general information when you visit our website
Nature and purpose of processing
When you access my website, i.e. if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and similar.
They are processed for the following purposes in particular: for the technically error-free display and optimisation of the website
I do not use your data to draw conclusions about your person. However, I reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
Legal basis and legitimate interest
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of my legitimate interest in improving the stability and functionality of my website as well as ensuring system security and detecting misuse.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of my website.
Storage duration
Data is stored in server log files in a form that makes it possible to identify the data subjects for a maximum of 2 years, unless a security-relevant event occurs (e.g. a DDoS attack).
In the event of such an incident, server log files are stored until the security-relevant incident has been rectified and fully clarified.
Transfer to third countries
The data collected may be transferred to the following third countries: United States
The following data protection guarantees are in place: Adequacy decision of the EU Commission
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of my website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Making contact
Type and purpose of processing
There is a contact form on my website that can be used to contact me electronically. There is a booking form on the Calendly website that can also be used to contact me electronically. If a user makes use of either of these options, the data entered in the input mask will be transmitted to us and stored in Gmail.
The following data is also stored at the time the message is sent: URL from which the request was made
It is possible to contact me via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, e-mail address, IP addresses and information on the servers involved in the e-mail communication.
You can contact me via the telephone number provided. In this case, I collect log data that includes your telephone number and the duration of the call.
You can contact me via Signal or Telegram with or without sharing your phone number. I log your username and (if shared) your phone number.
You can contact me via Whatsapp. I log your phone number.
Regardless of the type of communication selected, I collect the content of your inquiry. Your data is stored for the purpose of individual communication with you.
Legal basis
The data is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR).
My legitimate interest in processing your data is to make it easy for you to contact me.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of my website.
Storage period
Data will be deleted no later than six months after the contact was made.
If there is a contractual relationship, I am subject to the statutory retention periods. These are generally 10 years for reasons of proper accounting and tax law requirements.
Transfer to third countries
The data collected may be transferred to the following third countries:
United States
The following data protection guarantees are in place:
Adequacy decision of the EU Commission
Provision prescribed or required
The provision of your personal data is voluntary. However, I can only process your request if you provide me with the required data and the reason for the request.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Cookies
A cookie is a small data record that is created when you visit a website and is temporarily stored on the website visitor's system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.
You can access detailed information about cookies and which cookies are used on this website and for what purpose at any time in the cookie settings.
Deleting cookies
You can delete individual cookies or the entire cookie inventory. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
Microsoft Edge: https://support.microsoft.com/de-de/windows/verwalten-von-cookies-in-microsoft-edge-anzeigen-zulassen-blockieren-l%C3%B6schen-und-verwenden-168dab11-0753-043d-7c16-ede5947fc64d
Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
Opera: http://www.opera.com/de/help
Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE
You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice.
Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).
Technically necessary cookies
Type and purpose of processing
I use cookies to make my website more user-friendly. Some elements of my website require that the accessing browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of my website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
I require cookies for the following applications: You can find an overview of the cookies used here.
Legal basis and legitimate interest
In this respect, data processing is carried out solely on the basis of my legitimate interest in a user-friendly design of my website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with a balancing of interests in accordance with §25 para. 2 TDDDG.
Recipients
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of my website.
Storage period
Please refer to the cookie consent tool for the respective storage period of the cookies.
Third country transfer
The data collected may be transferred to the following third countries: United States
The following data protection guarantees exist:
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of my website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Objection
Please read the information on your right to object under Art. 21 GDPR below.
Transfer to third countries
The data collected may be transferred to the following third countries: United States
The following data protection guarantees are in place:
Provision prescribed or required
The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Revocation of consent
You can revoke your consent for the future in the cookie consent tool.
Profiling
Cookies that are not technically necessary can be used to evaluate the behaviour of website visitors and analyse their interests. Squarespace creates a pseudonymous user profile for this purpose.
Information about your right to object in accordance with Art. 21 GDPR
Right to object on a case-by-case basis
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, I will no longer process your personal data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Recipients of an objection: Fraeya Whiffin
Changes to this privacy policy
I reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to my services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Questions about data protection
If you have any questions about data protection, please send me an e-mail.
Copyright information
This privacy policy was created with the help of activeMind AG - the experts for external data protection officers (version #2024-10-25).