Privacy policy.
1. Overview & Data Controller
We take the protection of your personal data seriously and process it in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
The data controller responsible for processing on this website is:
Tania Capel, Duisburgerstrasse 22, 40477 Germany
Email: tania.j.capel@gmail.com
This policy explains what personal data we collect when you visit or use this website, why we collect it, and what rights you have regarding your data.
2. What Data We Collect
We collect the following categories of personal data:
Data you provide directly
Name and email address (e.g. when signing up for our newsletter or purchasing a product)
Billing information necessary to process a purchase (handled by our payment processor — see Section 4)
Any information you send us via the Contact form or email
Data collected automatically
IP address, browser type, device information
Pages visited, time spent on site, referring URL (via analytics tools — see Section 4)
Cookie data (see Section 4)
We do not knowingly collect data from children under 16 without parental consent.
3. Why We Process Your Data & Legal Basis
Purpose
Legal Basis (GDPR)
Fulfilling a purchase (processing payment, delivering digital product)
Art. 6(1)(b) — contract performance
Sending newsletter / marketing emails
Art. 6(1)(a) — your consent
Responding to contact inquiries
Art. 6(1)(b) or (f) — contract or legitimate interest
Website analytics
Art. 6(1)(a) — consent (via cookie banner)
Complying with tax/accounting obligations
Art. 6(1)(c) — legal obligation
You may withdraw consent at any time (e.g. by unsubscribing from the newsletter or adjusting cookie settings) without affecting the lawfulness of processing carried out before withdrawal.
4. Cookies, Tracking & Third-Party Services
We use cookies and similar technologies to operate the site, remember your preferences, and (with your consent) analyze traffic. Non-essential cookies are only set after you consent via our cookie banner, in line with the German TTDSG (Telecommunications-Telemedia Data Protection Act).
We may share data with the following categories of third-party processors, each bound by a Data Processing Agreement (DPA):
Hosting provider: [name, e.g. hosted in the EU/EEA]
Payment processor: [name, e.g. Stripe, PayPal]
Email/newsletter provider: [name, e.g. Mailchimp, ConvertKit]
Analytics tool: [name, e.g. Google Analytics, Plausible]
If any of these providers process data outside the EU/EEA (e.g. in the US), we rely on Standard Contractual Clauses (SCCs) or another valid transfer mechanism to ensure adequate protection.
5. Your Rights Under the GDPR
You have the right to:
Access the personal data we hold about you (Art. 15)
Rectify inaccurate or incomplete data (Art. 16)
Erase your data ("right to be forgotten"), where applicable (Art. 17)
Restrict processing under certain conditions (Art. 18)
Data portability — receive your data in a structured, machine-readable format (Art. 20)
Object to processing, including for direct marketing (Art. 21)
Withdraw consent at any time, without affecting prior processing
Lodge a complaint with a supervisory authority — in Germany, this is typically the data protection authority of the state (Bundesland) where the controller is based
To exercise any of these rights, contact us at [contact email].
6. Data Retention, Security & Contact
We retain personal data only as long as necessary for the purposes described above, or as required by law (e.g. German tax law requires certain invoice records to be kept for 10 years). Data no longer needed is deleted or anonymized.
We use appropriate technical and organizational measures (e.g. encryption, access controls) to protect your data against unauthorized access, loss, or misuse.
Contact us: [Business name] [Contact email] [Postal address]
Changes to this policy: We may update this privacy policy from time to time. The current version is always available on this page, with the "last updated" date shown at the top.upassen