privacy Policy
1. DATA CONTROLLER
The controller responsible for the processing of personal data on this website is:
Sofie Jakob
Wielandstraße 33, 12159 Berlin
hello@sofiejae.com
Website: https://sofiejae.com/
The data controller within the meaning of the General Data Protection Regulation (GDPR) is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2. GENERAL INFORMATION ON DATA PROCESSING
The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
This Privacy Policy explains what personal data is collected when you visit this website, the purposes for which it is processed, and the rights you have in relation to your data.
Personal data means any information that can be used to identify you personally. This includes, for example, your name, email address, IP address, location data and information about your browsing behaviour.
Personal data is processed exclusively in accordance with applicable legal requirements, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
3. HOSTING AND TECHNICAL PROVISION OF THE WEBSITE
This website is operated using the website service provider Squarespace.
The provider is:
Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8
Ireland
The technical provision of this website is carried out using Squarespace's infrastructure. During visits to this website, Squarespace may process personal data.
This may include, in particular:
IP address of the device accessing the website
Date and time of access
Pages and content accessed
Information about the browser being used
Operating system and device type
Referrer URL (the previously visited website)
Amount of data transferred
Technical status and error information
This data is required to provide the website technically, ensure its security, identify errors and maintain stable operation.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing a secure and functional website.
Squarespace may also process personal data as a data processor. The relevant data protection agreements must be taken into account in accordance with Squarespace's contractual terms.
Further information:
https://www.squarespace.com/privacy/
4. COLLECTION OF ACCESS DATA AND SERVER LOG FILES
When you access this website, information is automatically collected by the technical infrastructure and stored in so-called server log files.
This information is used in particular for:
Ensuring the uninterrupted operation of the website
Detecting and preventing technical attacks
Analysing technical errors
Ensuring system security
Optimising the technical infrastructure
As a general rule, the website operator does not combine this data with other personal data or use it to specifically identify individual visitors, unless required by law or necessary in response to specific security incidents.
The processing is based on Art. 6(1)(f) GDPR.
The retention period depends on the technical and security requirements of the hosting provider.
5. COOKIES AND SIMILAR TECHNOLOGIES
This website may use cookies and similar technologies.
Cookies are small text files stored on your device. They enable a website to store certain information about your visit or your preferences.
A distinction is generally made between the following categories:
a) Strictly necessary cookies
These cookies are required to provide the basic functions of the website. They may include, for example:
Storage of cookie preferences
Technical session management
Security functions
Provision of certain website features
Processing is based on Section 25(2) TDDDG and Art. 6(1)(f) GDPR, provided that the relevant legal requirements are met.
b) Functional cookies
Functional cookies may be used to store certain settings and preferences, thereby making the use of the website more convenient.
c) Statistics and analytics cookies
If analytics tools are used, they may employ cookies or similar technologies to collect information about how the website is used.
This may include, for example, page views, time spent on the website, technical information and user interactions.
Such technologies are only used where the required consent has been obtained.
The legal basis is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
d) Marketing and tracking cookies
If marketing or tracking services are integrated into this website, they may collect information about user behaviour and, where applicable, process it across different websites.
Such processing takes place only with prior consent, insofar as this is required by law.
Cookie settings
You may withdraw your consent at any time with effect for the future or change your cookie settings, provided that the website offers a corresponding function.
You can also delete or block cookies through your browser settings. Please note that this may restrict certain functions of the website.
6. CONTACT BY EMAIL OR CONTACT FORM
If you contact us by email or via a contact form, where available, the personal data you provide will be processed.
This may include:
First and last name
Email address
Telephone number, if provided
Content of your message
Any other information you voluntarily provide
The data is processed exclusively for the purpose of handling your enquiry and communicating with you.
The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to the preparation or performance of a contract.
In all other cases, processing is based on Art. 6(1)(f) GDPR, due to our legitimate interest in properly handling incoming enquiries.
The data will be deleted as soon as it is no longer required for the purpose for which it was collected, unless statutory retention obligations apply.
7. PRESENTATION OF PHOTOGRAPHS, ARTWORK AND VISUAL CONTENT
This website is primarily intended to present photographic, artistic and visual works.
When the relevant pages are accessed, the displayed image files are loaded from the website's technical infrastructure.
In doing so, technical access data, particularly IP addresses, browser information and information about the device being used, may be processed.
The images are displayed for the purpose of presenting photographic and artistic works.
Merely viewing the website does not automatically associate the image files themselves with additional personal information about visitors.
Where photographs depict identifiable individuals, their publication is subject to the applicable copyright, personality rights and data protection laws.
8. EXTERNAL CONTENT AND THIRD-PARTY SERVICES
Where external content, services or platforms are integrated into this website, it may be necessary to transfer personal data to the respective providers.
These may include, for example:
External image and media services
Embedded videos
Social media content
External fonts
Mapping and navigation services
Analytics and statistics services
When such content is accessed, your IP address in particular may be transmitted to the relevant third-party provider.
Such services are integrated only in compliance with applicable data protection requirements. Where consent is required, the relevant content will only be loaded after consent has been obtained.
The respective privacy policies of the external providers apply to the processing of personal data by those providers.
9. WEB ANALYTICS AND STATISTICAL EVALUATION
If an analytics tool such as Google Analytics or a comparable service is used on this website, visitors' usage behaviour may be analysed statistically.
This may include, among other things:
Pages visited
Time and duration of visits
Source of the website visit
Browser and device type
Interactions with website content
Approximate geographical location
The processing is intended to improve the website and analyse how it is used.
Such analysis is carried out only where the applicable data protection requirements have been met. In particular, any required consent is obtained before the relevant processing begins.
The legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
10. SOCIAL MEDIA LINKS
Where this website contains links to external social media platforms, such as Instagram, Facebook or Pinterest, these are generally simple external links.
Merely visiting this website does not automatically result in personal data being transmitted to the respective platforms through these links.
Only when you click on such a link do you leave this website and get redirected to the platform operated by the respective provider.
From that point onwards, the privacy policy of the relevant platform operator applies.
11. TRANSFERS OF DATA TO THIRD COUNTRIES
When using Squarespace and, where applicable, integrated external services, the processing of personal data outside the European Union or the European Economic Area cannot be ruled out.
In particular, data may be transferred to providers based in the United States of America.
Such transfers take place only in compliance with the legal requirements set out in Art. 44 et seq. GDPR.
The relevant safeguards may include, in particular:
Adequacy decisions of the European Commission
EU Standard Contractual Clauses
Additional technical and organisational safeguards
Other legally recognised safeguards
Squarespace provides information about its data protection and international transfer mechanisms in its privacy documentation.
12. DATA RETENTION
Personal data is stored only for as long as necessary for the respective processing purposes or as required by statutory retention obligations.
Once the relevant purpose has ceased to apply, the data will be deleted unless statutory obligations or legitimate reasons prevent its deletion.
The specific retention period may vary depending on the type of data and the purpose for which it is processed.
13. DATA SECURITY AND SSL ENCRYPTION
This website uses SSL or TLS encryption, provided that it is technically made available and activated by the hosting platform.
You can recognise an encrypted connection by the prefix "https://" in your browser's address bar and the corresponding padlock symbol.
Encryption is used to protect the transmission of information between your browser and the web server against unauthorised access.
In addition, appropriate technical and organisational measures are implemented to protect personal data against loss, manipulation, unauthorised access and unauthorised disclosure.
14. YOUR RIGHTS AS A DATA SUBJECT
Under applicable data protection laws, you have various rights in relation to your personal data.
In particular, you have the following rights:
Right of access (Art. 15 GDPR)
You may request information about whether and which personal data concerning you is being processed.
Right to rectification (Art. 16 GDPR)
You may request the correction of inaccurate personal data or the completion of incomplete personal data.
Right to erasure (Art. 17 GDPR)
Under the conditions laid down by law, you may request the deletion of your personal data.
Right to restriction of processing (Art. 18 GDPR)
Under certain circumstances, you may request that the processing of your personal data be restricted.
Right to data portability (Art. 20 GDPR)
You have the right to receive certain personal data in a structured, commonly used and machine-readable format, or to request that it be transmitted to another data controller.
Right to object (Art. 21 GDPR)
On grounds relating to your particular situation, you may object at any time to the processing of your personal data where such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR.
Right to withdraw consent (Art. 7(3) GDPR)
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact the data controller listed above at any time.
15. RIGHT TO LODGE A COMPLAINT WITH A DATA PROTECTION SUPERVISORY AUTHORITY
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
The competent supervisory authority is generally determined by the registered office or place of residence of the data controller, or by the applicable statutory jurisdiction rules.
An overview of the German data protection supervisory authorities can be found at:
https://www.datenschutzkonferenz-online.de/
16. AUTOMATED DECISION-MAKING AND PROFILING
As a general rule, the website operator does not carry out automated decision-making, including profiling within the meaning of Art. 22 GDPR, in connection with the website described here.
If external services use corresponding functions, their respective privacy policies also apply.
17. CHANGES TO THIS PRIVACY POLICY
We reserve the right to amend this Privacy Policy where necessary due to legal, technical or organisational changes.
The current version published on this website shall apply.
Contact regarding data protection
If you have any questions about the processing of your personal data or wish to exercise your data protection rights, please contact:
Further information about data protection at Squarespace can be found at: