Privacy Policy
1) Introduction and Contact Details of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how we handle your personal data when using our website. Personal data includes all data that can personally identify you.
1.2
The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Diana Leddin
Ittertalstraße 44, 42719 Solingen, Germany
Phone: +49 1520 3534301
Email: diana@farbenwesen-studio.com
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When you visit our website without registering or otherwise providing us with information, we only collect the data that your browser transmits to our server (“server log files”). When you access our website, we collect the following technically necessary data to display the site properly:
•The visited website
•Date and time of access
•Amount of data sent (in bytes)
•Source/referring website
•Browser used
•Operating system used
•IP address (anonymized if applicable)
Processing is carried out in accordance with Art. 6 (1) (f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. Data will not be shared or otherwise used. However, we reserve the right to review server log files if specific indications suggest unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” protocol and the lock icon in your browser address bar.
3) Contacting Us
3.1 Calendly
To offer an online appointment booking function, we use the services of:
Calendly, LLC
BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA
For scheduling appointments, we collect your name, email address, and optionally, phone number based on Art. 6 (1) (b) GDPR. Data processing is necessary for effective customer management and scheduling efficiency. This data is transmitted to the provider and stored for appointment organization.
After the appointment, or once the scheduling period has expired, your data will be deleted by the provider.
We have signed a data processing agreement with the provider to ensure compliance with GDPR and prevent unauthorized data sharing. The provider complies with the EU-US Data Privacy Framework, ensuring compliance with European data protection standards.
3.2 When you contact us (e.g., via contact form or email), we collect personal data. The required data fields depend on the form used. This data is stored and used exclusively to respond to your inquiry and for any necessary follow-up communication.
Processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in responding to inquiries. If your contact leads to a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR.
Once your request is fully processed, your data will be deleted unless legal retention obligations require otherwise.
4) Tools and Miscellaneous
Cookie Consent Tool
This website uses a cookie consent tool to obtain valid user consent for cookie-based applications.
•The tool displays an interactive interface when visiting the website, allowing users to grant consent for specific cookies and services.
•Cookies requiring consent are only loaded after approval via the interface.
•This ensures compliance with GDPR regulations.
Technically necessary cookies are used to store user preferences. Personal user data is not processed unless necessary for tracking consent logs (e.g., IP address storage). If data processing occurs, it is based on Art. 6 (1) (f) GDPR.
If legally required, we have a data processing agreement with the provider to prevent unauthorized data sharing.
More information about the operator and settings of the cookie consent tool can be found in the tool’s interface on our website.
5) User Rights
5.1 Your Rights Under GDPR
Under GDPR, you have the following rights regarding your personal data:
• Right to Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Withdraw Consent (Art. 7 (3) GDPR)
• Right to Object to Processing (Art. 21 GDPR)
5.2 Right to Object
If we process your personal data based on legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object at any time, provided there are grounds relating to your particular situation.
If you exercise your right to object, we will cease processing your data unless there are compelling legitimate grounds for processing that outweigh your interests or for legal claims.
If your data is used for direct marketing, you have the right to object at any time. If you do so, we will immediately stop processing your data for marketing purposes.
6) Data Retention Period
The retention period of personal data is based on:
•The legal basis for processing.
•The purpose of data collection.
•Any legal retention obligations (e.g., tax or commercial record-keeping requirements).
If processing is based on your consent (Art. 6 (1) (a) GDPR), your data will be stored until you withdraw consent.
If retention is required under legal obligations (Art. 6 (1) (c) GDPR), the data will be deleted once these obligations expire unless further processing is necessary.
If processing is based on legitimate interest (Art. 6 (1) (f) GDPR), data will be stored until you object, unless overriding legal reasons apply.
If not otherwise stated, personal data will be deleted when no longer required for its original purpose.