Privacy policy

Controller

The controller for data processing on this website is Charlotte Una Petzold, Schweizer Str. 30, 60594 Frankfurt am Main, emailhello@charlotteuna.art.

Hosting

This website consists of static files and is hosted on Cloudflare Pages (Cloudflare, Inc.). When a page is requested, Cloudflare processes technically necessary connection data such as IP address, time of the request, requested file, amount of data transferred and browser identification in order to deliver the page and keep the service secure. The legal basis is Art. 6 (1) (f) GDPR.

TODO: conclude a data processing agreement with Cloudflare and add details on the retention period of the server logs and on transfers to third countries.

No cookies, no tracking

This website sets no cookies and uses no analytics, advertising or tracking services. No usage profiles are created. Social networks are not embedded: the reference to Instagram is a plain link, and a connection is only made once you click it.

Fonts and external content

The Archivo typeface used here is served from this server. No Google Fonts and no other external resources are loaded, so opening the page does not create a connection to third parties.

Contact by email and contact form

If you write to us, we process your details solely in order to answer your enquiry and for any follow-up questions, on the legal basis of Art. 6 (1) (b) and (f) GDPR.

The contact form collects your name, email address, an optional subject and your message. Only name, email address and message are required; without them we cannot reply. No database and no user account is created: your enquiry then simply sits in the artist's mailbox as an email.

Delivery is handled by EmailJS (EmailJS.com). Your data is transmitted to EmailJS only once you click “Send enquiry”, and is delivered from there as an email. Merely opening or filling in the page creates no connection to that service. EmailJS acts as a processor, and data may be transferred to the USA. The legal basis is Art. 6 (1) (b) and (f) GDPR.

TODO: conclude a data processing agreement with EmailJS and state the basis for the transfer to the USA (adequacy decision or standard contractual clauses) here.

To keep automated submissions out, we check a field that is invisible to people and the time between opening and submitting the form. This sets no cookies and builds no profiles.

TODO: define how long enquiries are kept.

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Please use the email address above. You may also lodge a complaint with a data protection supervisory authority. TODO: name the competent supervisory authority.