Legal

Privacy Policy

1. Controller

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation is:

Veronika Leupold
Schalmeiweg 13
82467 Garmisch-Partenkirchen
Germany
Phone: +49 152 0265 2992
Email: veronika.leupold@flowestate.de

2. Hosting and server log files

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (hereinafter referred to as “Strato”). When you visit our website, Strato collects various log files, including your IP address. For further information, please refer to Strato’s privacy policy:

https://www.strato.de/datenschutz/

The use of Strato is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable possible presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Data Processing Agreement

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The provider of this website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address

This data is not combined with data from other sources.The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website. For this purpose, the server log files must be collected.

3. Visiting the website

Every time this website is accessed, data transmitted by your browser is automatically processed. This processing is technically necessary in order to display the page and takes place on the basis of Art. 6 (1) (f) GDPR. The legitimate interest lies in the secure and trouble-free operation of the website.

Which data this covers in detail, and how long it is stored, is set out in the section on hosting.

4. Cookies

This website does not set any cookies. Nor does it use comparable techniques such as local storage or session storage to store or read information on your device. A consent banner is therefore not required.

5. Fonts and scripts

All fonts and program libraries are delivered from our own server. When you visit this page, no connection is established to Google Fonts, to a content delivery network or to any other external service. Your IP address is therefore not transmitted to third parties.

Specifically, this concerns the Sora typeface and the GSAP animation library.

6. Analytics and audience measurement

This website does not use any analytics or tracking tools. Neither audience measurement nor profiling takes place, and no data is transmitted to advertising networks.

7. Getting in touch

This website does not contain a contact form. If you contact me by email or telephone, I process the information you provide in order to deal with your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6 (1) (f) GDPR, based on the legitimate interest in responding to enquiries.

8. Links to WhatsApp and LinkedIn

In the footer of this website you will find links to WhatsApp and LinkedIn. These are plain links, not embedded content or plugins. Simply visiting this website therefore transmits no data to the providers named.

Only when you click one of these links does your browser establish a connection to the respective provider, transmitting your IP address in the process. The respective provider is responsible for any subsequent processing:

  • WhatsApp: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland
  • LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

9. Recipients and disclosure of data

Your data is not passed on to third parties, with the exception of the hosting provider, which processes the data on our instructions as a processor within the meaning of Art. 28 GDPR. No transfer to countries outside the European Union is envisaged.

10. Your rights

You have the following rights vis-à-vis the controller regarding the personal data concerning you:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to object to processing pursuant to Art. 21 GDPR
  • Right to withdraw consent given pursuant to Art. 7 (3) GDPR, with effect for the future

An informal message to the email address given above is sufficient to exercise these rights.

11. Right to object

Where the processing of your data is based on Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to that processing. The data will then no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms.

12. Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

13. Data security

This website is delivered over an encrypted connection. You can recognise this by the https prefix in your browser's address bar and by the padlock symbol. This prevents third parties from reading the data transmitted between your browser and the server.

14. Changes to this privacy policy

This policy will be amended as soon as the legal situation or the scope of this website changes. The version available at the time applies to your next visit.