Privacy Policy
1. General Information
This privacy policy applies both to our website and to our social media presence, in particular our publicly accessible Instagram account. The following notes provide a simple overview of what happens to your personal data when you visit these pages. Personal data is any data with which you can be personally identified. Detailed information can be found in the sections below.
2. Responsible Party (Controller)
Jennifer Mosch
Berliner Ring 95
64625 Bensheim
Germany
Phone: +49 171 1216637
Email: info.escapethecomfortzone@gmail.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
3. Data Collection and Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host. This may primarily involve IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data. Hosting is carried out for the purpose of fulfilling the contract towards our customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision (Art. 6 (1) (f) GDPR). Where consent has been requested, processing is carried out on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Host: This website is hosted by Netlify. The provider is Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA (“Netlify”). When you visit our website, Netlify collects various server log files, including your IP address. The use of Netlify is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in the most reliable and secure presentation of our website. Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found in Netlify’s privacy policy: https://www.netlify.com/privacy/.
4. Your Rights and Legal Bases
In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority. You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format (right to data portability). You have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of data processing. There is also a right to correction or deletion of this data.
You have the right to request the restriction of the processing of your personal data – for example if:
- you dispute the accuracy of the data
- the processing is unlawful
- the data is no longer needed, but you need it to assert legal claims
- you have objected under Art. 21 (1) GDPR and a balancing of interests is pending
If you have restricted the processing of your data, this data – apart from storage – may only be processed with your consent or to assert, exercise or defend legal claims.
5. Right to Object
IF DATA PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT, ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE PROCESSED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING.
IF YOUR DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME.
6. Communication Channels and Contact
If you contact us by email, telephone or fax, your request including all personal data will be stored and processed. Processing is based on Art. 6 (1) (b), (f) or (a) GDPR.
WhatsApp (WhatsApp Ireland Limited): metadata such as IP address, device information and telephone number are processed. Legal basis: Art. 6 (1) (b) or (a) GDPR.
Instagram communication (Meta Platforms Ireland Limited): takes place via comments or direct messages. Legal basis: Art. 6 (1) (a) or (b) GDPR.
7. Tools and External Services
- Google Forms (Google Ireland): application and contact forms. Art. 6 (1) (a) GDPR
8. Handling of Applicant Data
The data you submit is used exclusively to process your application. The legal basis is Art. 6 (1) (b) GDPR. After completion of the application process, the data is deleted, provided there are no statutory retention obligations.
9. Objection to Advertising Emails
The use of contact data published within the framework of the imprint obligation to send unsolicited advertising and information material is hereby objected to. The operators reserve the right to take legal action in the event of unsolicited advertising (e.g. spam emails).
10. Source
Parts of this policy are based on templates from https://www.e-recht24.de