Privacy Policy
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the controller's contact details in the "Controller" section of this privacy policy.
2. Controller
The controller responsible for data processing on this website within the meaning of the GDPR is:
Schatz&Schatz GbR
Fine Kroke & Alexandra Entenmann
c/o Jannik Wagner
Scharnhorststr. 6
50733 Köln
Germany
Email: schatzschatzgbr@gmail.com
3. Hosting and Server Log Files
Hosting with Netlify
This website is hosted by Netlify. The provider is Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, California 94104, USA (hereinafter "Netlify").
When you access this website, Netlify automatically collects and stores information in so-called server log files, which your browser automatically transmits. These include:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address
This data is not merged with other data sources.
The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for this purpose server log files must be recorded.
Netlify is based in the USA. Data transfer to the USA is based on the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR. For details, please refer to Netlify's privacy policy (see link). Netlify Privacy Policy
Log files are stored for approximately 30 days and then deleted.
4. Contact Form
When you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6(1)(a) GDPR (consent). You may withdraw this consent at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.
The data you enter in the contact form will remain with us until you ask us to delete it, withdraw your consent to storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.
5. Newsletter
On our website you can subscribe to our newsletter. We collect your email address for this purpose. Registration is handled via a form on the website (Netlify Forms).
Processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can unsubscribe at any time via the unsubscribe link in any newsletter or by contacting us. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
Your email address is stored for as long as you are subscribed to the newsletter. After unsubscribing, your address will be removed from the mailing list.
Zapier
We use Zapier to automatically forward sign-up data from Netlify Forms to MailerLite. The provider is Zapier, Inc., 548 Market Street, San Francisco, California 94104, USA. Data transfer to the USA is based on the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR. Zapier Privacy Policy
MailerLite
We use MailerLite for sending the newsletter. The provider is UAB "MailerLite", J. Basanavičiaus g. 15, LT-03108 Vilnius, Lithuania. MailerLite is an EU-based company subject to the GDPR. MailerLite Privacy Policy
6. Your Rights as a Data Subject
You have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR): You may request information about your personal data stored by us.
- Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate or the completion of incomplete data.
- Right to erasure (Art. 17 GDPR): You may, under certain conditions, request the deletion of your personal data.
- Right to restriction of processing (Art. 18 GDPR): You may, under certain conditions, request that processing of your data be restricted.
- Right to data portability (Art. 20 GDPR): You may request that we transmit your data to you or to another controller in a structured, commonly used and machine-readable format.
- Right to object (Art. 21 GDPR): You may object to the processing of your data where it is based on Art. 6(1)(f) GDPR (legitimate interests).
- Right to withdraw consent (Art. 7(3) GDPR): You may withdraw a given consent at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal remains unaffected.
You also have the right to lodge a complaint with the competent data protection supervisory authority:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
www.ldi.nrw.de
7. External Media (YouTube and Vimeo)
Our website embeds videos from the platforms YouTube and Vimeo. The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”), and Vimeo, Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA (“Vimeo”).
We use a so-called two-click solution: when a page loads, only a locally stored preview image is shown — no data is transmitted to YouTube or Vimeo. Only when you actively start a video via the play button is the respective provider’s player loaded. At that point, data (including your IP address and device/browser information) is transmitted to the provider, which may set cookies or use similar technologies. YouTube videos are embedded in privacy-enhanced mode (youtube-nocookie.com); for Vimeo we enable the “Do Not Track” setting.
Videos are embedded on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), which you give by clicking the play button. You may revoke your consent at any time with effect for the future (see below). The lawfulness of processing carried out before the revocation remains unaffected.
Your decision is stored exclusively locally in your browser (localStorage, not a cookie) so that videos load directly on future visits. This information remains in your browser and is not transmitted to us or to third parties.
During playback, personal data may be transferred to the USA. According to the providers, such transfers are based on the EU-US Data Privacy Framework and/or EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR. For more information, see the providers’ privacy policies:
Google/YouTube privacy policy
Vimeo privacy policy
Revoking your consent
Here you can revoke your stored consent to loading external videos. Videos will then only load again once you click a video’s play button anew.
8. Analytics
This website does not use any analytics tools or tracking cookies.
9. Contact
If you have any questions about data protection, please contact us:
schatzschatzgbr@gmail.com