Disclaimer: The original version of this legal document is in German and legally binding under German law. This English version is a non-binding translation provided for convenience.

Rechtsverbindliche Originalversion "Datenschutzerklärung" (Deutsch)

Privacy Policy

1 Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following informs you about the handling of your personal data when you use our website. Personal data is any information by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is Dr. Christa Gescher, c/o IP‑Management #4973, Ludwig‑Erhard‑Str. 18, 20459 Hamburg, Germany, Tel.: +49 151 12743214, E‑Mail: E-Mail: connect[at]bleen42[dot]com (please replace [at] with @ and [dot] with .) The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2 Data Collection When You Visit Our Website

2.1 When you use our website solely for informational purposes—i.e., if you do not register or otherwise provide us with information—we collect only those data that your browser transmits to our server (so‑called “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

• The website you visited

• Date and time of access

• Amount of data sent in bytes

• Referrer URL from which you accessed the site

• Browser used

• Operating system used

• IP address used (if necessary, in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. We do not pass on or otherwise use these data, although we reserve the right to review the server log files retrospectively if we become aware of specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL/TLS encryption. You can recognize a secure connection by the sequence “https://” and the padlock symbol in your browser’s address bar.

3 Hosting & Content Delivery Network (CDN)

3.1 Amazon Web Services (AWS)

We host our website and deliver its content using the services of:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

All data collected on our website are processed on the provider’s servers. We have concluded a Data Processing Agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

3.2 AWS CloudFront

We use a Content Delivery Network provided by:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

This service allows us to deliver large media files—such as graphics, page content, or scripts—more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR.

We have concluded a Data Processing Agreement with the provider, which ensures the protection of our visitors’ data and prohibits unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework.

4 Cookies

To make visits to our website attractive and to enable the use of certain functions, we use cookies. These are small text files stored on your device. Some cookies are automatically deleted when you close your browser (“session cookies”); others remain on your device for a longer period and allow us to save your site settings (“persistent cookies”). You can find the storage duration in your browser’s cookie settings.

If any cookies we use also process personal data, this processing is carried out pursuant to Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(a) GDPR with your consent, or Art. 6(1)(f) GDPR to protect our legitimate interests in optimal website functionality and a user‑friendly visit.

You can configure your browser to inform you about the setting of cookies and to decide on acceptance on a case‑by‑case basis or to exclude cookies entirely. Please note that disabling cookies may restrict the functionality of our website.

5 Contacting Us

When you contact us (e.g., via contact form or email), personal data are processed solely to handle and answer your inquiry and only to the extent necessary.

The legal basis for processing is our legitimate interest in answering your inquiry pursuant to Art. 6(1)(f) GDPR. If your inquiry aims at entering into a contract, an additional legal basis is Art. 6(1)(b) GDPR. We delete your data once the matter is conclusively resolved, provided no statutory retention obligations exist.

6 Data Processing for Order Fulfilment

Where necessary for the execution of the contract for delivery and payment purposes, the personal data we collect will be passed on, pursuant to Art. 6(1)(b) GDPR, to the transport company commissioned with delivery and to the financial institution commissioned with payment processing.

If, under a corresponding contract, we owe you updates for goods with digital elements or for digital products, we will process the contact data you provided when placing your order in order to personally inform you, in accordance with our statutory information obligations under Art. 6(1)(c) GDPR. Your contact data will be used strictly for the purpose of notifying you about updates owed by us and will be processed by us only to the extent necessary for the respective notification.

To process your order, we also work together with the following service provider(s), who assist us wholly or partly in performing concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7 Use of Customer Data for Direct Advertising

7.1 Subscription to Our E‑Mail Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Only your email address is mandatory for newsletter delivery; additional data are voluntary and used for personal addressing. We use a double opt‑in procedure to ensure that you receive the newsletter only after confirming via a verification link sent to the provided address.

By activating the link, you give your consent for data processing under Art. 6(1)(a) GDPR. We log your IP address and the date/time of registration to trace any misuse. The data collected are used strictly for the newsletter’s intended purpose.

You may unsubscribe at any time via the link in the newsletter or by notifying the controller. After unsubscribing, your email address will be promptly removed from our newsletter list, unless you have consented to further use or we reserve a lawful right to retain it, about which we will inform you in this policy.

7.2 systeme.io

We send our newsletter via ITACWT Ltd., 3 Cruise Park Rise, Tyrrelstown, Dublin D15 XR58, Ireland.

Based on our legitimate interest in effective newsletter marketing, we share your data with this provider under Art. 6(1)(f) GDPR, so that it can send the newsletter on our behalf.

Unless you have expressly consented under Art. 6(1)(a) GDPR, the provider also conducts statistical analyses of newsletter campaigns (e.g., open and click rates) via web beacons or tracking pixels. Device information (time of access, IP address, browser type, operating system) may be collected but is not merged with other data.

You may withdraw your consent to tracking at any time with future effect.

We have concluded a Data Processing Agreement with the provider to protect our visitors’ data and prohibit unauthorized third‑party disclosure.

8 Data Processing for Order Fulfillment

To the extent necessary for contract execution for delivery and payment purposes, personal data are shared under Art. 6(1)(b) GDPR with the shipping company and financial institution commissioned.

If, under a contract, we owe you updates for goods with digital elements or digital products, we process your contact data to inform you under our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your data are used strictly for these update notifications and only to the extent required.

9 Site Features

Google reCAPTCHA

We use the CAPTCHA service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin D04 E5W5, Ireland.

Data may also be transmitted to Google LLC in the USA. The appearance of the CAPTCHA window is styled using Google Fonts loaded from the Internet. No additional processing beyond the CAPTCHA functionality occurs.

The service checks whether input is made by a human or by abusive automated processing and blocks spam, DDoS attacks, and similar automated threats. To do so, the provider collects the IP address of your device, browser and operating system identifiers, date and duration of the visit, and may set cookies.

If these processes use cookies, they are only set with your explicit consent under Art. 6(1)(a) GDPR, which you may revoke at any time using our cookie‑consent tool.

If cookies are not used, processing is based on our legitimate interest under Art. 6(1)(f) GDPR. We have concluded a Data Processing Agreement with the provider, and it has joined the EU–US Data Privacy Framework to ensure compliance with European standards. Further information on Google’s data protection can be found at: https://business.safety.google/intl/de/privacy/

10 Tools and Miscellaneous

10.1 Lexware Office

For accounting, we use the cloud‑based software of Haufe‑Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany.

The provider processes incoming and outgoing invoices and, if applicable, our bank transactions, to automatically match transactions and assist in the bookkeeping process.

Any personal data processed in doing so are handled under our legitimate interest in efficient organization and documentation of our business operations pursuant to Art. 6(1)(f) GDPR.

10.2 Cookie‑Consent Tool

We use a cookie‑consent tool to obtain valid user consents for cookies and cookie‑based applications. When you visit our site, an interface lets you grant or refuse consent by checking boxes. Only cookies and services for which you have given consent will be loaded.

The tool sets strictly necessary cookies to store your preferences but does not generally process personal data. If, in individual cases, personal data (e.g., IP address) are processed to store, assign, or log your cookie settings, this is done under our legitimate interest in legally compliant, user‑friendly consent management pursuant to Art. 6(1)(f) GDPR and, where required, under Art. 6(1)(c) GDPR to fulfill our legal obligations. We have concluded a Data Processing Agreement with the tool’s provider, which prohibits unauthorized third‑party disclosure. Further information about the tool’s operator and settings options is available in the interface on our website.

11 Rights of the Data Subject

11.1 Under applicable data protection law, you have the following rights against the controller regarding the processing of your personal data (the respective legal basis is indicated):

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to notification (Art. 19 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to withdraw consent (Art. 7(3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

11.2 Right to Object

If we process your personal data based on a balance of interests under Art. 6(1)(f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to that processing with effect for the future. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or processing is necessary for the establishment, exercise, or defense of legal claims.

If your data are processed for direct advertising, you have the right to object at any time to processing of personal data concerning you for such advertising purposes. If you object, we will cease processing for direct advertising.

12 Data Retention Period

The duration of data storage depends on the respective legal basis, the processing purpose, and, where applicable, statutory retention periods (e.g., under commercial or tax law).

Data processed on the basis of consent (Art. 6(1)(a) GDPR) are stored until you withdraw your consent.

Data processed for contract performance (Art. 6(1)(b) GDPR) are erased once the statutory retention periods expire, provided they are no longer required for contract performance and no legitimate interest on our part remains.

Data processed on the basis of our legitimate interests (Art. 6(1)(f) GDPR) are stored until you exercise your right to object (Art. 21(1) GDPR), unless we can demonstrate overriding legitimate grounds or processing is for legal claims.

Data processed for direct advertising on the basis of legitimate interests (Art. 6(1)(f) GDPR) are stored until you object under Art. 21(2) GDPR.

Unless otherwise stated, all other personal data are deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Copyright Notice: This privacy policy was drafted by the specialist lawyers of IT‑Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de).

Last updated: August 14, 2025, 02:24:19 o'clock.