Privacy Policy
Responsible Party
Name: Lena Haunstetter
Address: Hoherade 7, 20257 Hamburg
Email: info@lenahaunstetter.de
Overview of Data Processing
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects concerned.
Types of data processed:
- Contact data
- Content data
- Usage data
- Meta, communication and process data
Categories of data subjects: Communication partners, users.
Purposes of processing: Contact requests and communication, direct marketing, website analysis and optimization, provision of contractual services and customer support.
Your Rights
You have the following rights regarding your personal data:
- Right to request information about stored personal data
- Right to correction or deletion of data
- Right to restrict data processing
- Right to withdraw consent for data processing
- Right to object to data processing
- Right to data portability
- Right to file a complaint with supervisory authorities
Data Collection
Contact and Communication: When you contact us (e.g., via contact form, email, telephone, or social media), we process the data necessary to answer your inquiry and any follow-up questions.
Website Usage: We collect data automatically when you visit our website, including browser information, operating system, referring URL, date and time of access, and IP address. This data is used to ensure website functionality and analyze user behavior.
Hosting and Content Delivery
Provision by Vercel
This website is hosted and delivered worldwide by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA.
When you access this website, Vercel may process technically necessary connection and log data, including:
- Your IP address and approximate location derived from it
- The requested URL, time, type, and status of the request and response
- The referring URL, if transmitted by your browser
- Information about your browser, device, and system configuration
- Security, diagnostic, and other log data
This processing supports the website's delivery, stability, and performance, as well as abuse prevention, troubleshooting, and security. Where processing is necessary for the secure operation of this public website, it is based on our legitimate interests in those purposes under Article 6(1)(f) GDPR. The precise data protection assessment depends on the Vercel services and configuration used.
Data Processing Agreement: Vercel publishes a Data Processing Addendum (DPA), which Vercel states applies to customers on its Pro and Enterprise plans. The terms applicable in each case therefore depend on the plan and contractual relationship. The current agreement is available in the Vercel DPA.
International transfers: Vercel states that it processes data in the United States and other countries. Vercel Inc. is listed as active in the official EU-U.S. Data Privacy Framework participant list. Where a transfer falls within that certification, it may be covered by the European Commission's adequacy decision. For other transfers, Vercel's published DPA, where applicable, provides for safeguards including the European Commission's Standard Contractual Clauses. The relevant data, roles, and contractual terms determine which safeguard applies. See Vercel's official Data Privacy Framework entry.
Subprocessors: Vercel may engage other service providers. Its published list is available in the Vercel Security Portal.
Retention: Retention periods depend on the enabled services, configuration, and applicable contractual terms. We retain personal data only for as long as necessary for the purposes described above or to meet legal obligations.
Further information is available in Vercel's Privacy Notice.
Third-Party Services
Video Plugins: We use YouTube and Vimeo video plugins on our website. These services may collect user data through cookies and tracking technologies when you interact with embedded videos. Please refer to the respective privacy policies of YouTube and Vimeo for detailed information about their data processing practices.
This privacy policy is compliant with the General Data Protection Regulation (GDPR) and German data protection law.