Privacy policy
Controller
Natalia Kloe · Staltacher Str. 25 · 81377 Munich · info@nataliachloe.de
1. Hosting
This site is hosted by Vercel Inc. (USA). Technically necessary data is processed on access (IP address, time, page, browser). Legal basis: Art. 6(1)(f) GDPR (secure, trouble-free operation). A data processing agreement under Art. 28 GDPR is in place; transfer to the USA is based on EU standard contractual clauses under Art. 46 GDPR.
2. Booking and contact form
Data entered in the form (name, email, company, phone, preferred date, location, budget range, message) is collected and processed solely to handle your request. It is never passed to third parties for other purposes and never used for advertising. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures), or Art. 6(1)(f) for purely informational enquiries. We delete your data immediately on request – an informal message to info@nataliachloe.de is enough – and at the latest when contact ends, unless statutory retention periods apply. Requests are stored with Upstash, Inc.; the database is located in Frankfurt am Main, Germany, so no transfer to a third country takes place. A contract under Art. 28 GDPR is in place.
3. Email delivery
We use Resend as a processor to deliver form notifications. A contract under Art. 28 GDPR is in place.
4. Instagram
Videos on this site are linked, not embedded. No data is sent to Instagram when this page loads. Meta's privacy terms apply only once you click a link.
5. Cookies and analytics
This site sets no analytics or marketing cookies and uses no tracking services. Fonts are served locally; there is no connection to Google Fonts. A single technically necessary cookie is set in the internal admin area only, to keep the session signed in.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may also lodge a complaint with a supervisory authority (Art. 77 GDPR) – the competent authority is the Bavarian DPA (BayLDA).
[TODO] Before launch: sign data processing agreements with Vercel, Upstash and Resend, and have the text reviewed by a lawyer. This version is a draft, not legal advice.
The German version is legally binding.