1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the full Privacy Policy below.
Data Collection on this Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the “Controller” section of this Privacy Policy.
How do we collect your data?
Some data is collected when you provide it to us — for example, data you enter into a contact form. Other data is collected automatically or with your consent when you visit the website, primarily technical data such as your browser, operating system, or the time of your visit.
This data is collected automatically as soon as you access the website.
What do we use your data for?
Some data is collected to ensure the website functions correctly. Other data may be used to analyse your browsing behaviour.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may withdraw this consent at any time. You also have the right to request the restriction of processing of your personal data under certain circumstances. You have the right to lodge a complaint with the competent supervisory authority.
For these and other questions regarding data protection, please contact us at any time.
2. Hosting
We host our website with the following provider:
Hetzner
Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
For details, please refer to Hetzner’s Privacy Policy:
https://www.hetzner.com/legal/privacy-policy
The use of Hetzner is based on Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible. Where consent has been obtained, processing is carried out solely on the basis of Art. 6(1)(a) GDPR.
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with Hetzner, ensuring that personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.
Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. Complete protection of data from access by third parties is not possible.
Controller
The controller responsible for data processing on this website is:
Cecilia Arri
Schwachhauser Heerstraße 57
28211 Bremen
Telefon: 0049(0)421-16141475
E-Mail: info@cecilia-arri.de
Verantwortliche Stelle ist die natürliche oder juristische Person, die allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung von personenbezogenen Daten (z. B. Namen, E-Mail-Adressen o. Ä.) entscheidet.
Retention Period
Unless a specific retention period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies. If you submit a legitimate request for deletion or withdraw your consent, your data will be deleted unless we have other legally permissible reasons for retaining it (e.g. tax or commercial retention obligations).
Legal Basis for Data Processing
Where you have given consent, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR for special categories of data. Where processing is necessary for the performance of a contract, we process your data on the basis of Art. 6(1)(b) GDPR. Processing may also be based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.
Data Transfer to the USA and Other Third Countries
We use tools from companies based in the USA or other countries that do not offer an equivalent level of data protection to the EU. When these tools are active, your personal data may be transferred to and processed in these countries. Please note that these countries may not guarantee a level of data protection comparable to that of the EU.
Right to Withdraw Consent
Many data processing operations are only possible with your explicit consent. You may withdraw consent already given at any time. The lawfulness of processing carried out prior to withdrawal is not affected.
Right to Object (Art. 21 GDPR)
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, INCLUDING PROFILING. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
Right to Lodge a Complaint
In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
The competent authority for Bremen is:
Die Landesbeauftragte für Datenschutz und Informationsfreiheit Bremen
Arndtstraße 1,
27570 Bremerhaven
Email: office@datenschutz.bremen.de
Website: www.datenschutz.bremen.de
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfilment of a contract, in a commonly used, machine-readable format.
Right of Access, Erasure and Rectification
You have the right to receive free information about your stored personal data, its origin, recipients, and the purpose of processing, and the right to request correction or deletion of this data at any time.
Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data in certain circumstances, including when you contest the accuracy of your data, when processing is unlawful, or when you have objected to processing.
SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the “https://” prefix in your browser’s address bar and the padlock symbol.
4. Data Collection on this Website
Cookies
This website uses cookies — small text files stored on your device. Session cookies are deleted when you close your browser; permanent cookies remain until deleted manually or automatically. You can configure your browser to inform you about cookies, restrict or block them. Please note that disabling cookies may limit the functionality of this website.
Server Log Files
The website provider automatically collects information in server log files, including browser type and version, operating system, referring URL, hostname, time of request, and IP address. This data is not merged with other data sources and is processed on the basis of Art. 6(1)(f) GDPR.
Contact Form
If you send us enquiries via the contact form, your details including the contact information you provide will be stored for the purpose of processing your request and for follow-up questions. This data will not be shared without your consent. Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Data is retained until you request deletion, withdraw consent, or the purpose for storage no longer applies.
Enquiries by Email or Phone
If you contact us by email or phone, your request including all resulting personal data will be stored and processed for the purpose of handling your enquiry. This data will not be shared without your consent. Processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
5. Appointment Booking
For booking appointments, we use a link to Calendly, a scheduling service provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When you click the booking link, you will be redirected to Calendly’s website, where data such as your name and email address will be processed by Calendly in accordance with their own Privacy Policy, available at:
www.calendly.com/privacy.
The legal basis is Art. 6(1)(b) GDPR. Please note that data may be transferred to the USA.
6. Plugins and Tools
Google Web Fonts (local hosting)
This website uses Google Web Fonts for consistent typography. Google Fonts are installed locally — no connection to Google servers is established.
Font Awesome (local hosting)
This website uses Font Awesome for consistent display of icons. Font Awesome is installed locally — no connection to Fonticons, Inc. servers is established.