✦ Legal
Privacy Policy
Last updated: March 5, 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Sabrina Hoffmann
Brixener Str. 25
16341 Panketal, Germany
Email: [email protected]
Phone: 017661051852
2. Overview of Data Processing
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data are collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmission over the Internet (e.g., when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
3. Hosting
This website is hosted by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) via the Manus platform. When you visit our website, your IP address and other data transmitted by your browser (such as browser type, operating system, referrer URL, time of access) are processed by the hosting provider. This is necessary for the delivery of the website and constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
Cloudflare is certified under the EU-US Data Privacy Framework. For more information, see Cloudflare's Privacy Policy.
4. SSL/TLS Encryption
This site uses SSL/TLS encryption for security reasons and for the protection of the transmission of confidential content. You can recognize an encrypted connection by the "https://" prefix in the address line of your browser and the lock icon.
5. Server Log Files
The hosting provider automatically collects and stores information in server log files that your browser transmits to us. These are:
- Browser type and version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The basis for data processing is Art. 6(1)(f) GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.
6. Cookies
This website uses cookies sparingly. Cookies are small text files that are stored on your device by your browser. Most of the cookies we use are so-called "session cookies," which are automatically deleted after your visit. Other cookies may remain stored on your device until you delete them.
We use analytics cookies via Umami Analytics, a privacy-focused analytics tool that does not use personal data or cookies for tracking. No personally identifiable information is collected. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in analyzing website usage to improve our offering).
You can configure your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general, and to activate the automatic deletion of cookies when closing the browser.
7. Newsletter (Kit / ConvertKit)
If you would like to receive our newsletter, we require a valid email address. We use the Double Opt-In procedure: after you sign up, you will receive a confirmation email asking you to confirm your subscription. This ensures that no one can sign up with someone else's email address.
Our newsletter is sent via Kit (formerly ConvertKit), operated by Kit (formerly ConvertKit LLC), 113 Cherry St #92768, Seattle, WA 98104-2205, USA. Kit processes your email address and, if applicable, your name for the purpose of sending the newsletter.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time by unsubscribing from the newsletter. The legality of the data processing already carried out remains unaffected by the revocation. Each newsletter contains an unsubscribe link.
For more information, see Kit's Privacy Policy.
8. Contact Form & Email
If you contact us via the contact form or by email, the data you provide (name, email address, message content) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of the data entered into the contact form is based on your consent (Art. 6(1)(a) GDPR) and our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR). The data will be deleted once your inquiry has been conclusively processed, unless statutory retention obligations apply.
9. Social Media
This website contains links to our social media profiles on the following platforms:
- Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
- TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)
These are simple links — no social media plugins or tracking scripts are embedded on this website. Data is only transferred to the respective platform when you actively click on a link and visit the external site. Please refer to the respective platform's privacy policy for information on how your data is handled there.
10. Your Rights as a Data Subject
Under the GDPR, you have the following rights with respect to your personal data:
- Right of access (Art. 15 GDPR) — You have the right to request confirmation as to whether personal data concerning you is being processed and to request access to that data.
- Right to rectification (Art. 16 GDPR) — You have the right to request the correction of inaccurate personal data or the completion of incomplete data.
- Right to erasure (Art. 17 GDPR) — You have the right to request the deletion of your personal data, provided there is no legal obligation to retain it.
- Right to restriction of processing (Art. 18 GDPR) — You have the right to request the restriction of processing of your personal data under certain conditions.
- Right to data portability (Art. 20 GDPR) — You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 GDPR) — You have the right to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR.
To exercise any of these rights, please contact us at [email protected].
11. Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
The competent supervisory authority for the controller is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
12. Changes to This Privacy Policy
We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.
© 2026 Sabrina Hoffmann · The Code of You