Legal Notice

Information pursuant to Section 5 of the German Digital Services Act (DDG)

Mona Brandt
Kolonnenstr. 8
10827 Berlin
Germany

Contact
Email:

Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Mona Brandt
Kolonnenstr. 8
10827 Berlin
Germany

Email:

2. General Information

This privacy policy explains what personal data is processed when you visit this website or contact me through the website.

Personal data is any information relating to an identified or identifiable natural person, such as a name, email address or IP address.

I process personal data only where necessary to provide and secure this website, respond to enquiries, or fulfil legal or contractual obligations.

3. Hosting and Server Log Files

This website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany

When you access this website, the hosting provider processes technical information required to deliver and secure the website. This may include, in particular:

  • IP address of the requesting device
  • date and time of access
  • requested page or file
  • browser type and version
  • operating system
  • referrer URL, where transmitted
  • HTTP status code and amount of data transferred

STRATO processes IP addresses for the purpose of detecting and preventing attacks and states that these are retained for a maximum of seven days for this purpose.

The processing is based on Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and technically reliable operation of this website.

STRATO acts as a processor on my behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. Contact

If you contact me by email or through the contact form on this website, I process the information you provide in order to respond to your enquiry.

Depending on the information you submit, this may include:

  • your name
  • your email address
  • the content of your message
  • any other information you voluntarily provide

The contact form is provided using the WordPress plugin Contact Form 7. No separate analytics or marketing service is connected to the contact form.

The legal basis for processing is Art. 6(1)(f) GDPR where the purpose is to respond to a general enquiry. If your enquiry relates to entering into or performing a contract, the legal basis is Art. 6(1)(b) GDPR.

The data will be deleted when it is no longer required for the purpose for which it was collected, unless statutory retention obligations or other legitimate grounds require longer storage.

Please do not submit sensitive personal information through the contact form unless it is necessary for your enquiry.

5. Website Security – Wordfence

This website uses Wordfence, a security plugin for WordPress, to protect the website against unauthorised access, malware, attacks and other security threats.

For this purpose, Wordfence may process technical data, including IP addresses and information relating to access attempts and requests made to the website. This processing is necessary to identify potentially malicious activity and protect the website and its infrastructure.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the security and integrity of the website and the prevention and detection of attacks and misuse.

Wordfence is provided by Defiant, Inc., United States. Where data is transferred to or processed by Wordfence outside the European Economic Area, appropriate safeguards for international data transfers are used where required.

6. WordPress and Avada

This website is built using WordPress and the Avada website builder.

These systems are used to provide the website and its functionality. No analytics or advertising tracking is implemented through WordPress or Avada on this website.

Fonts used on this website are hosted locally on the website server. When visiting the website, no connection to Google Fonts or Font Awesome servers is therefore required to display these fonts.

7. Cookies and Tracking

This website does not currently use analytics, advertising or marketing tracking tools.

Based on the current website configuration, no cookies requiring consent are set for ordinary visitors. Therefore, no consent banner is currently displayed.

If the technical configuration of the website changes in the future, this privacy policy will be updated accordingly and consent will be obtained where legally required.

8. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect information transmitted between your browser and the website.

You can recognise an encrypted connection by the “https://” address in your browser and, depending on your browser, a lock or similar security symbol.

9. Legal Bases for Processing

Where personal data is processed on this website, processing is based on one or more of the following provisions of the GDPR:

  • Art. 6(1)(a) GDPR – consent
  • Art. 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract
  • Art. 6(1)(c) GDPR – compliance with a legal obligation
  • Art. 6(1)(f) GDPR – legitimate interests

Where processing is based on legitimate interests, these interests are described in the relevant section of this privacy policy.

10. Your Rights

Under the GDPR, you have rights regarding your personal data. Subject to the applicable legal requirements, these include the right to:

  • obtain information about personal data processed about you (Art. 15 GDPR)
  • request correction of inaccurate data (Art. 16 GDPR)
  • request deletion of your data (Art. 17 GDPR)
  • request restriction of processing (Art. 18 GDPR)
  • receive certain data in a portable format (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent at any time where processing is based on consent (Art. 7(3) GDPR)

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority pursuant to Art. 77 GDPR.

11. Objection to Processing Based on Legitimate Interests

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation in accordance with Art. 21 GDPR.

If you object, the relevant personal data will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

12. Data Retention

Personal data is retained only for as long as necessary for the respective processing purpose.

Data may be retained for a longer period where this is required by statutory retention obligations, necessary for the establishment, exercise or defence of legal claims, or otherwise permitted under applicable law.

Once the relevant purpose or legal basis no longer applies and no statutory retention obligation exists, the data will be deleted.

13. Changes to this Privacy Policy

This privacy policy may be updated if the website, the services used on it or applicable legal requirements change.

Last updated: October 2026