1. Controller

The controller responsible for data processing within the meaning of the General Data Protection Regulation (“GDPR”) is:

Nadia Cortellesi
Burmesterstrasse 8
80939 Munich
Germany

Email: nadia@cortellesi.co
Telephone: +49 160 96898336

2. Hosting and Website Provision

This website is hosted and provided through Squarespace.

For users and website owners located outside the United States, Squarespace services are provided by:

Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8
D08 N12C
Ireland

When you access this website, technical information necessary to provide and secure the website may be processed. This may include your IP address, browser and device information, operating system, referring website, requested pages, date and time of access and technical log information.

The processing is carried out for the purpose of securely and reliably providing this website, detecting technical problems and protecting the website against misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically functional operation of this website.

3. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Necessary cookies are used where required to securely provide the website and its functions. Where the use of such technologies is strictly necessary to provide a service expressly requested by the visitor, no consent is required under Section 25(2) TDDDG.

Non-essential cookies, including analytics or performance cookies, are only used where required after you have given your consent through the cookie settings.

The legal basis for accessing or storing information on your device in connection with non-essential cookies is your consent pursuant to Section 25(1) TDDDG. Where personal data is subsequently processed, the legal basis is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time with effect for the future through the cookie settings available on this website.

4. Squarespace Analytics

Where you consent to analytics and performance cookies, this website may use Squarespace Analytics to understand how visitors interact with the website.

Depending on your consent and configuration, data may include information about your browser, network and device, your IP address, referring websites, pages visited and interactions with the website such as clicks, internal links, scrolling and timestamps.

This information is processed to understand website traffic and improve the presentation and usability of the website.

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You may withdraw your consent at any time through the website’s cookie settings.

5. Contact by Email or Telephone

If you contact us by email or telephone, we process the information you provide, such as your name, email address, telephone number, company information, message and other information relevant to your enquiry.

Where your enquiry relates to a potential or existing project or contract, processing is based on Art. 6(1)(b) GDPR.

For other enquiries, processing may be based on Art. 6(1)(f) GDPR. Our legitimate interest is to respond to enquiries and maintain professional communication.

Your information will be retained only for as long as necessary to deal with your enquiry and any subsequent business relationship, subject to applicable statutory retention obligations.

Email service provider: Google Workspace

Where your email provider processes personal data on our behalf or receives data in the course of email transmission, the respective provider’s data protection terms and applicable safeguards apply.

6. Fonts

Squarespace may use integrated font services provided by Google Fonts and/or Adobe Fonts to display typography on this website.

When external font files are loaded, the respective provider may receive technical information including your IP address, information about your browser, network or device and information about the website or page you are viewing.

Where such external loading requires consent, the fonts will only be activated after the necessary consent has been obtained.

If fonts are hosted locally or uploaded directly to Squarespace without connecting to an external font provider, this section should be removed or adjusted accordingly.

7. External Links and Social Media

This website contains links to third-party websites, including Instagram.

These are external links. No social media content is intentionally embedded on this website solely by providing such a link.

When you follow an external link, you leave this website and the respective third-party provider may process personal data in accordance with its own privacy policy. We have no control over the data processing carried out by third-party websites.

8. Recipients and Service Providers

Personal data may be disclosed to service providers where necessary for the operation of this website, communication or the performance of contractual obligations.

These may include in particular:

Squarespace as website and hosting provider;
the provider used for email communication;
technical or professional service providers where necessary;
legal, tax or accounting advisers where required;
public authorities where disclosure is required by law.

Service providers acting as processors are used in accordance with the requirements of Art. 28 GDPR where applicable.

9. International Data Transfers

In connection with Squarespace and other service providers, personal data may be processed in countries outside the European Economic Area, including the United States.

Squarespace states that transfers to the United States may rely on the EU-U.S. Data Privacy Framework where applicable. Where an adequacy decision is not available or applicable, Squarespace uses safeguards including the European Commission’s Standard Contractual Clauses.

Where other service providers transfer personal data outside the European Economic Area, such transfers will take place only where an appropriate legal basis or safeguard under Chapter V GDPR is available.

10. Storage Period

Personal data is stored only for as long as necessary for the respective purpose for which it was collected.

Where statutory commercial, accounting or tax retention obligations apply, relevant information may be retained for the duration required by law.

Once the respective purpose and any applicable retention obligations cease to apply, the data will be deleted or anonymised unless continued storage is legally permitted.

11. Your Rights

Subject to the conditions of applicable data protection law, you have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
receive certain personal data in a portable format;
object to processing based on legitimate interests;
withdraw consent at any time with effect for the future.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

For businesses and self-employed professionals based in Bavaria, the competent supervisory authority is generally:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

12. Right to Object

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing for reasons arising from your particular situation.

We will then cease processing the relevant personal data unless compelling legitimate grounds for the processing exist which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.

13. Automated Decision-Making

We do not use automated decision-making, including profiling, that produces legal effects concerning website visitors or similarly significantly affects them.

14. Changes to this Privacy Policy

This Privacy Policy may be updated where the website, the services used or the applicable legal requirements change.

The current version is published on this website.