Data Controller
Responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR):
Jessica Meier
Theaterwall 10
26122 Oldenburg
info (at) jessicameier.com
+49 (0) 441 57020900
Jessica Meier
Theaterwall 10
26122 Oldenburg
info (at) jessicameier.com
+49 (0) 441 57020900
General Information on Data Processing
I process personal data of users only to the extent necessary to provide a functional website and my content and services. Processing is carried out regularly only with the consent of the users, unless there is a legal basis permitting such processing.
Hosting with Hetzner
My website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Hetzner automatically stores so-called server log files: IP address, browser type, date and time of access, referrer URL, and the requested file.
This data cannot be directly attributed to specific individuals and is used solely to ensure trouble-free operation, system security, and error analysis.
Legal basis: Art. 6 (1) lit. f GDPR
Retention period: up to 14 days
Hetzner automatically stores so-called server log files: IP address, browser type, date and time of access, referrer URL, and the requested file.
This data cannot be directly attributed to specific individuals and is used solely to ensure trouble-free operation, system security, and error analysis.
Legal basis: Art. 6 (1) lit. f GDPR
Retention period: up to 14 days
Cookies
This website uses only technically necessary cookies. These are so-called “session cookies,” required for the operation of the site (e.g., to ensure navigation or to store language settings). These cookies do not contain personal data and are automatically deleted once the session ends.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in providing a secure and functional website).
In addition, a privacy-friendly analytics service is used: Pirsch.io (Emvi Software GmbH, Germany). Pirsch operates entirely without cookies and anonymizes all collected data. Information recorded includes, for example: pages visited, timestamps, country of origin (based on the IP address, without storing it), device type, operating system, and browser. Personal identification is not possible. The data is used exclusively for statistical purposes, to better understand how the website is used and to improve the offering.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a privacy-compliant analysis and optimization of the online offering).
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in providing a secure and functional website).
In addition, a privacy-friendly analytics service is used: Pirsch.io (Emvi Software GmbH, Germany). Pirsch operates entirely without cookies and anonymizes all collected data. Information recorded includes, for example: pages visited, timestamps, country of origin (based on the IP address, without storing it), device type, operating system, and browser. Personal identification is not possible. The data is used exclusively for statistical purposes, to better understand how the website is used and to improve the offering.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in a privacy-compliant analysis and optimization of the online offering).
Contact Form & Email Contact
When using the contact form or sending a direct email inquiry, the information provided (name, email address, message) is stored solely for the purpose of processing the inquiry.
No data will be passed on to third parties without consent.
Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual communication)
No data will be passed on to third parties without consent.
Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual communication)
Analytics Tools
I reserve the right to use web analytics services (e.g., Google Analytics or alternative GDPR-compliant providers).
• When using Google Analytics: Data (including a truncated IP address) may be transferred to the USA. Such transfers are based on the EU’s Standard Contractual Clauses.
• Users can refuse the storage of cookies or prevent data collection via an opt-out option.
Legal basis: Art. 6 (1) lit. a GDPR (consent)
• When using Google Analytics: Data (including a truncated IP address) may be transferred to the USA. Such transfers are based on the EU’s Standard Contractual Clauses.
• Users can refuse the storage of cookies or prevent data collection via an opt-out option.
Legal basis: Art. 6 (1) lit. a GDPR (consent)
Integration of External Services
To present my content in an appealing way, I use external services that may collect data (e.g., IP address, browser data).
• Instagram (Meta Platforms Ireland Ltd.) – integration of images/feeds.
• YouTube/Vimeo – for videos (Google Ireland Ltd. / Vimeo Inc.).
• Google Maps – for displaying maps and locations (Google Ireland Ltd.).
• LinkedIn – possibly for social plugins and tracking (LinkedIn Ireland Unlimited Company).
These integrations are implemented in a privacy-friendly manner (e.g., two-click solution), so that data is only transmitted once users actively give their consent.
Legal basis: Art. 6 (1) lit. a GDPR (consent)
• Instagram (Meta Platforms Ireland Ltd.) – integration of images/feeds.
• YouTube/Vimeo – for videos (Google Ireland Ltd. / Vimeo Inc.).
• Google Maps – for displaying maps and locations (Google Ireland Ltd.).
• LinkedIn – possibly for social plugins and tracking (LinkedIn Ireland Unlimited Company).
These integrations are implemented in a privacy-friendly manner (e.g., two-click solution), so that data is only transmitted once users actively give their consent.
Legal basis: Art. 6 (1) lit. a GDPR (consent)
Online Shop (future)
As part of a planned online shop, I will process customer data (name, address, payment details) for order fulfillment.
The data will be used solely to perform the contract and, where necessary, shared with payment service providers (e.g., PayPal, Stripe) or shipping companies.
Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract)
The data will be used solely to perform the contract and, where necessary, shared with payment service providers (e.g., PayPal, Stripe) or shipping companies.
Legal basis: Art. 6 (1) lit. b GDPR (performance of a contract)
Data Subject Rights
You have the right to:
• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”, Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (e.g., the State Commissioner for Data Protection of Lower Saxony)
• Access to stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (“right to be forgotten”, Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (e.g., the State Commissioner for Data Protection of Lower Saxony)
Security
I implement technical and organizational security measures to protect data against manipulation, loss, or unauthorized access.
Updates
This Privacy Policy is updated regularly whenever new tools or services are integrated.
Last updated: September 2025
Last updated: September 2025