Privacy Policy

Last updated: January 2026

Controller

The controller responsible for data processing on this website is:

Nina Weymann
Ritterstraße 8
33602 Bielefeld
Germany

General information

I take the protection of your personal data seriously. Personal data is processed on this website only to the extent necessary to provide a functional website, respond to inquiries, and comply with legal obligations.

Legal bases (GDPR):

  • Art. 6(1)(b) GDPR – performance of a contract / pre-contractual steps (e.g., inquiries about services)
  • Art. 6(1)(f) GDPR – legitimate interests (secure and stable operation of the website)
  • Art. 6(1)(c) GDPR – compliance with legal obligations (where applicable)

Hosting

This website is hosted by:

STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin, Germany

STRATO processes data on my behalf to deliver the website and ensure security and stability.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).
Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

Server log files

When you visit this website, the hosting provider may collect and store information in so-called server log files, including:

  • IP address (possibly shortened/hashed depending on server configuration)
  • date and time of the request
  • requested page/file
  • amount of data transferred
  • referrer URL
  • browser type/version
  • operating system
  • hostname of the accessing device

This data is processed to ensure the secure operation of the website, troubleshoot issues, and prevent abuse. It is not used to personally identify visitors, and it is not combined with other data sources.

Legal basis: Art. 6(1)(f) GDPR.

WordPress cookies (necessary/functional)

WordPress may set technically necessary cookies to ensure basic site functionality and security (e.g., to remember cookie preferences or to support WordPress core functions).

If the website offers features such as logins (admin area), commenting, or form spam protection, additional functional cookies may be used to enable those features.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing a technically functional and secure website).
You can delete cookies in your browser settings at any time.

Contact form / contacting me

If you contact me via the contact form, I process the data you provide (e.g., name, email address, message and any additional information you include) to handle your request and communicate with you.

Depending on the form setup, your message may be delivered by email and/or stored in the WordPress database (e.g., by the contact form plugin).

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual communication / contract-related inquiries), or
  • Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries)

Retention: I keep inquiry data only as long as necessary to process your request and for follow-up, unless legal retention obligations require longer storage.

No analytics / no tracking

This website does not use web analytics tools (e.g., Google Analytics) and does not use tracking for marketing purposes.

Recipients of personal data

I do not sell or rent personal data. Data may be shared only when necessary, for example:

  • with service providers who support operation of the website (e.g., hosting), acting as processors under Art. 28 GDPR
  • where required by law or to enforce legal claims

International data transfers

I do not intentionally transfer personal data to countries outside the EU/EEA.
(Internet-related transfers initiated by your own connection/provider are outside my control.)

Link to Shop

This website includes a link to my shop hosted on Big Cartel (https://ninaweymann.bigcartel.com/…). If you click the link, you will be redirected to Big Cartel’s website, where Big Cartel processes personal data (e.g., your IP address, device information, and any purchase-related data you submit) under its own responsibility as an independent controller. I have no influence over Big Cartel’s data processing; please review Big Cartel’s privacy policy and terms on their site for details. The link is provided on the basis of my legitimate interest in offering you a convenient way to view and purchase my work (Art. 6(1)(f) GDPR).

Your rights under the GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing based on legitimate interests (Art. 21 GDPR)

If processing is based on your consent, you may withdraw your consent at any time with future effect (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Security

I apply appropriate technical and organizational measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

Updates to this Privacy Policy

I may update this Privacy Policy to reflect changes to the website or legal requirements. The current version is always available on this website.