Privacy Policy

A. General Information

§ 1 Definitions
Below, we provide information about the processing of personal data when using our website.  In doing so, we would like to inform you about our processing operations and at the same time comply with our legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).
§ 2 Name and Address of the Controller
The controller responsible for processing your personal data within the meaning of Art. 4 No. 7 GDPR is:
Michelle Bohnes

Rüttenscheiderstraße 192
45131 Essen
[email protected]
www.michellebohnes.de

Further information can be found in the legal notice (Impressum).

Contact Form Data
When you contact us by email or via a contact form, the data you submit is processed  (e.g., message content, first and last name, address, company name, email address, and the time of transmission). Processing of contact form data is carried out for handling customer inquiries and communication. Legal basis: Art. 6 (1) sentence 1 (a), (b), or (f) GDPR.

§ 3 Legal Bases for Data Processing
According to Art. 6 GDPR, the processing of personal data is only lawful if at least one of the following conditions applies:
Consent, Art. 6 (1) sentence 1 (a) GDPR:
The data subject has given consent to the processing of their personal data for one or more specific purposes.
Contractual necessity, Art. 6 (1) sentence 1 (b) GDPR:
The processing is necessary for the performance of a contract to which the data subject is a party or to take steps prior to entering into a contract at the request of the data subject.
Legal obligation, Art. 6 (1) sentence 1 (c) GDPR:
The processing is necessary to comply with a legal obligation to which the controller is subject.
Vital interests, Art. 6 (1) sentence 1 (d) GDPR:

The processing is necessary to protect the vital interests of the data subject or another natural person.
Public interest, Art. 6 (1) sentence 1 (e) GDPR:
The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Legitimate interests, Art. 6 (1) sentence 1 (f) GDPR:
The processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, especially where the data subject is a child. For each processing activity carried out on this website, the applicable legal basis is specified below. Processing may be based on more than one legal basis.
§ 4 Data Deletion and Storage Duration
For all processing operations on this website, the duration of storage and the time at which data will be deleted or blocked are specified below. Unless expressly stated otherwise, your personal data will be deleted or blocked once the purpose of processing or the relevant legal basis no longer applies. Your data is generally stored only on servers located within the European Union.
§ 5 Your Rights
You may exercise your rights as a data subject regarding the processing of your personal data at any time using the contact details listed in § 2. As a data subject, you have the rights under Art. 15 (right of access),Art. 16 (right of rectification), Art. 17 (right to erasure), Art. 18 (right to restriction of processing), Art. 20 (right to data portability), Art. 21 (right to object), Art. 7 (3) (right to withdraw consent), Art. 77 (3) (right to lodge a complaint with a supervisory authority).
§ 6 Legal Obligation to Transfer Certain Data
In some cases, specific statutory or legal obligations may require me to provide lawfully processed personal data to third parties, in particular public authorities (Art. 6 (1) sentence 1 (c) GDPR).
§ 7 Changes to This Privacy Notice
In line with developments in data protection law as well as technological or organizational changes, this privacy notice is regularly reviewed to determine whether updates or additions are required and will be amended accordingly.

B. Visiting the Website

§ 8 Processed Personal Data
When you visit this website, personal data may be processed. The following categories of personal data are collected, stored, and processed:
Log Data
Each time this website is accessed, information is automatically transmitted by your device's browser to the server of the website provider (Jimdo GmbH, Stresemannstr. 375, 22761 Hamburg) and temporarily and anonymously stored in so-called server log files.
The following data are collected:
- IP address
- Date and time of access
- Page/file accessed
- Referrer URL
- Browser type and version
- Operating system used
- Device information
- Amount of data transferred
- Hostname of the accessing computer
These data are technically necessary to provide the website, ensure system security, and defend against attacks and misuse. Processing is carried out based on Art. 6 (1) (f) GDPR.
Server log files are typically stored for 7–30 days and then deleted. These data are not merged with other data sources.
Anonymous Statistics
The website uses the integrated analytics features of the website provider Jimdo (Jimdo GmbH, Stresemannstr. 375, 22761 Hamburg) to generate anonymous statistics about website visits. Processing is based on Art. 6 (1) (f) GDPR, as I have a legitimate interest in analyzing and optimizing the website. There is no merging of data with other sources.
The above-mentioned personal data are processed in accordance with the GDPR, other relevant data protection regulations, and only to the extent necessary.
Where processing is based on Art. 6 (1) (f) GDPR, the purposes mentioned also constitute my legitimate interests.
§9 Duration of Data Processing
Your data will be processed only for as long as necessary to achieve the processing purposes specified above; the legal bases provided for those purposes apply accordingly.
For information regarding the use and storage duration of cookies, please refer to the cookie settings.
§10 Transfer of Personal Data to Third Parties; Legal Basis
The following categories of recipients may gain access to your personal data:
Service providers for operating the website and processing the data stored or transmitted by the systems (e.g., data center services, payment processing, IT security).
Legal basis: Art. 6 (1) sentence 1 (b) or (f) GDPR.
Public authorities, where required to fulfill a legal obligation.
Legal basis: Art. 6 (1) sentence 1 (c) GDPR.
Professionals under confidentiality obligations used for operating the business (e.g., banks, insurers, legal advisors, auditors).
In all other cases, your personal data will only be disclosed to third parties if you have given explicit consent according to Art. 6 (1) sentence 1 (a) GDPR.
§ 11 Use of Cookies, Plugins, and Other Services on This Website
Cookies are used on this website. For more detailed information about cookies, please refer to the cookie policy in the cookie settings.
§ 12 Social Media Plugins
This website contains links to my social media profiles on Instagram.
These are purely external links. Data is only transferred to the respective providers when you click the link. When using the services, the privacy policies of the respective providers apply.