Data protection | Online-Portfolio

1) Introduction and Contact Information of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data is any information that can be used to personally identify you.

1.2 The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is:

Carina Neumann-Mahlkau, Freelance Editor,
Heiglhofstraße 79, c/o Sylvia Fleischmann,
81377 Munich, Germany,
Tel.: +49 177 2565045,
Email: text.carinaneumann@gmail.com.

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only (i.e., without registering or otherwise transmitting information), we collect only the data your browser sends to our server (so-called “server log files”). When you access our website, the following data is collected, which is technically necessary to display the website:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (possibly in anonymized form)

Processing is carried out according to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the “https://” and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services
We use the hosting services of:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.
All data collected on our website is processed on the provider's servers.
A data processing agreement has been concluded to ensure protection of our website visitors’ data and to prevent unauthorized disclosure.
The provider participates in the EU-U.S. Data Privacy Framework, ensuring compliance with EU data protection standards based on an adequacy decision by the European Commission.

3.2 Wix
We use the hosting services of:
Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel
Data is also transmitted to: Wix Inc., 500 Terry A. Francois Blvd, San Francisco, CA 94158, USA
All data is processed on the provider's servers.
A data processing agreement ensures the protection of our visitors’ data and prevents unauthorized disclosure.
An adequate level of data protection is ensured by an adequacy decision of the European Commission.
For U.S. data transfers, Wix also participates in the EU-U.S. Data Privacy Framework.

3.3 Google Cloud CDN
We use a content delivery network from:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
This service allows faster delivery of large media files via regionally distributed servers.
Processing is based on our legitimate interest in improving the stability and functionality of the website (Art. 6(1)(f) GDPR).
Data may also be transferred to: Google LLC, USA.
A data processing agreement exists, and the provider is certified under the EU-U.S. Data Privacy Framework.

4) Cookies

To make our website attractive and enable specific features, we use cookies—small text files stored on your device. Some are deleted after the session (“session cookies”), others remain and store settings (“persistent cookies”). Duration can be checked in your browser’s cookie settings.

If cookies process personal data, the legal basis is:

Art. 6(1)(b) GDPR for contract execution
Art. 6(1)(a) GDPR for consent
Art. 6(1)(f) GDPR for our legitimate interest in optimal functionality and user experience

You can set your browser to inform you about cookie usage and decide individually or exclude acceptance in general.

Please note: disabling cookies may limit website functionality.

5) Contacting Us

If you contact us (e.g., via contact form or email), personal data is collected. The specific data collected can be found in the respective form.

These data are used solely to respond to your inquiry and for associated administrative tasks.

Legal basis:

Art. 6(1)(f) GDPR for our legitimate interest in responding
Art. 6(1)(b) GDPR if the inquiry is related to a contract

Your data will be deleted once your request is resolved, unless retention obligations prevent this.

6) Tools and Other Services

Cookie Consent Tool

This website uses a Cookie Consent Tool to obtain valid consent for the use of cookies and cookie-based technologies. When visiting the site, users are presented with an interface to provide consent by ticking boxes. Only after consent is given will those cookies be activated.

Technically necessary cookies are used to store preferences. Personal data is not typically processed.
If personal data (e.g., IP address) is processed, this is based on:

Art. 6(1)(f) GDPR for lawful, user-specific consent management
Art. 6(1)(c) GDPR as a legal obligation

Where applicable, a data processing agreement is in place to prevent unauthorized disclosure.

More information is available in the consent tool interface.

7) Data Subject Rights

7.1 Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to withdraw consent (Art. 7(3) GDPR)
Right to lodge a complaint (Art. 77 GDPR)

7.2 RIGHT TO OBJECT

IF WE PROCESS YOUR DATA BASED ON OUR LEGITIMATE INTERESTS, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA.
EXCEPTIONS APPLY IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS USED FOR DIRECT MARKETING, YOU MAY OBJECT AT ANY TIME.
ONCE YOU DO, WE WILL STOP USING YOUR DATA FOR MARKETING PURPOSES.

8) Duration of Personal Data Storage

The retention period is based on:

The legal basis
The purpose of processing
Applicable legal retention periods (e.g., commercial or tax laws)

For data based on consent (Art. 6(1)(a) GDPR), storage continues until withdrawal.

For contract-related data (Art. 6(1)(b) GDPR), data is retained as long as needed for fulfillment or pre-contractual measures.

For data processed under legitimate interest (Art. 6(1)(f) GDPR), data is kept until objection unless we demonstrate overriding legitimate grounds.

For direct marketing purposes, data is stored until objection per Art. 21(2) GDPR.

Unless otherwise stated, data is deleted when it’s no longer needed for the stated purpose.

Copyright Notice:
This privacy policy was created by the specialized lawyers of the IT-Recht Kanzlei and is protected by copyright
(https://www.it-recht-kanzlei.de)