Privacy Policy
Last updated: November 2026
This privacy policy explains which personal data is processed when you visit this website, for what purpose, on what legal basis, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Controller
Vered Manasse
Winsstraße 60
10405 Berlin, Germany
E-mail: ve***@***********ei.com
A data protection officer is not required to be appointed.
2. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Whenever you call up a page, the server automatically records technical data in log files: IP address, date and time of the request, the page requested, the referring page, browser type and version, and operating system. This data is needed to deliver the website, to keep it stable and secure, and to detect and defend against attacks. It is not merged with other data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functional website). The log files are deleted by the host after a short period, unless they are needed as evidence of an attack. We have concluded a data processing agreement with the host (Art. 28 GDPR).
The website uses SSL/TLS encryption (recognisable by “https://” in the address bar), so data you send to us cannot be read by third parties.
3. Contact form and e-mail
If you contact us via the contact form or by e-mail, we process your name, e-mail address and message in order to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a session, workshop or other service, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Messages from the contact form are delivered to us by e-mail via the mail server of our host (Hostinger). A copy of each sent message is kept in the website’s mail log for 14 days for troubleshooting and then deleted automatically. We keep your enquiry for as long as needed to deal with it; statutory retention periods remain unaffected.
To protect the contact form against spam we use CleanTalk (see section 5).
4. Blog comments
Commenting on the blog is closed. Comments that were left in the past are still shown with the name the author entered. The e-mail address and IP address stored with them are not published. Legal basis: Art. 6(1)(f) GDPR. If you left a comment and want it removed, an e-mail to us is sufficient.
Gravatar: To display profile pictures next to these comments, a hashed (encrypted) value of the commenter’s e-mail address is used to load the profile image from the Gravatar service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. When you view a post with comments, your IP address is transmitted to Gravatar. Legal basis: Art. 6(1)(f) GDPR (uniform presentation of comments). Further information: automattic.com/privacy.
5. Security and spam protection (Wordfence, CleanTalk)
Wordfence: To protect the website against attacks we use the security plugin Wordfence by Defiant, Inc., Seattle, USA. Wordfence checks requests to the website (including the IP address) with a firewall, limits excessive requests and logs login attempts. This data is processed on our server; to identify malicious IP addresses, information about attacks may be compared with the Wordfence threat database. Legal basis: Art. 6(1)(f) GDPR (security of the website).
CleanTalk: To filter spam in the contact form we use the anti-spam service CleanTalk (CleanTalk Inc., USA). When you submit a form, the content you entered, your e-mail address and your IP address are sent to CleanTalk and checked against its spam database. To tell humans from bots, CleanTalk stores small technical entries (e.g. “ct_…”, “apbct_…”) in cookies and the local storage of your browser. Legal basis: Art. 6(1)(f) GDPR (protection against spam) and § 25(2) no. 2 TDDDG.
6. Fonts (hosted locally)
The font used on this website (PT Sans) and the theme’s icon font are stored on our own server and loaded from there. No connection to Google or other external font servers is established.
7. Image optimisation (QUIC.cloud)
To make images load faster we have them compressed by the service QUIC.cloud of LiteSpeed Technologies Inc., USA. Only the image files of this website are transmitted for this purpose, no data about visitors. Legal basis: Art. 6(1)(f) GDPR (fast loading website).
8. Links to social networks
The website contains a plain link to our profile on LinkedIn (LinkedIn Ireland Unlimited Company, Dublin, Ireland). No data is sent to LinkedIn when you visit our pages; only when you click the link are you taken to LinkedIn, whose own privacy policy then applies.
9. Cookies and similar technologies
This website only stores technically necessary entries for spam protection (CleanTalk, see section 5). We do not use analytics or advertising cookies. You can delete cookies and website data at any time in your browser settings.
10. Transfers to third countries
Some of the providers named above are based in the USA or may process data there (Automattic/Gravatar, Defiant/Wordfence, CleanTalk, LiteSpeed/QUIC.cloud). For transfers to the USA, the European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795). Where a provider is certified under this framework, the transfer is based on Art. 45 GDPR; otherwise it is based on the EU standard contractual clauses (Art. 46(2)(c) GDPR).
11. Storage period
We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods. After that, the data is deleted.
12. Your rights
You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise your rights, an e-mail to ve***@***********ei.com is sufficient.
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint: You have the right to complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.
13. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
14. Changes to this privacy policy
We update this privacy policy when the website or the legal requirements change. The current version is always available on this page.