Privacy Policy
As of: 7 August 2026
1. Controller
The party responsible for data processing on this website is:
Jasmin Arntzen Am Aichberg 3 86573 Obergriesbach, Germany Email: ita-its-art@outlook.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
2. Privacy at a Glance
Personal data is any data that can be used to identify you personally. When you visit this website, various personal data are collected — partly through your own input (e.g. in a contact form), partly automatically by the IT systems used (mainly technical data such as browser, operating system, or the time of the page visit).
Processing that is not technically necessary (e.g. statistics/reach measurement, advertising, and affiliate tracking) only takes place with your
consent via the cookie/consent banner. You can withdraw this consent at any time with effect for the future.
3. Hosting
This website is hosted by Wix. The provider is Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel ("Wix").
When you visit this website, Wix collects various log files including your IP address. For details, please see Wix's privacy policy: https://de.wix.com/about/privacy
Processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in presenting our website as reliably and securely as possible. Where consent has been requested, processing takes place solely on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on your device. Consent can be withdrawn at any time.
A data processing agreement (DPA) under Art. 28 GDPR is in place with Wix. Israel benefits from an adequacy decision of the EU Commission (Art. 45 GDPR).
4. General Information and Mandatory Disclosures
Storage Period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for erasure or withdraw your consent, your data will be deleted, unless statutory retention obligations (e.g. under commercial or tax law) prevent this.
Legal Bases
We process your data on the basis of your consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), or to safeguard our legitimate interests (Art. 6(1)(f) GDPR). For the storage of, or access to, information on your device, Section 25 TDDDG additionally applies.
Transfer to Third Countries
We use services whose providers process data (also) in the USA (incl. Google/YouTube, Meta, Pinterest, LinkedIn, Discord, Houzz). Other providers process data in further third countries, some without an adequacy decision (e.g. TikTok, and RedNote in China/Singapore); for these we rely on Standard Contractual Clauses, and an equivalent level of data protection cannot be fully guaranteed there. Individual providers process data in countries covered by an EU Commission adequacy decision (e.g. LINE in Japan and KakaoTalk in the Republic of Korea). These transfers take place only with your consent and on the basis of the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR), where the respective provider is certified, and additionally on the basis of the EU Commission's Standard Contractual Clauses (Art. 46 GDPR). With data transfers to the USA, it cannot be ruled out that US authorities may access data for monitoring and control purposes.
Withdrawal of Your Consent
Many data processing operations are only possible with your express consent. You can withdraw consent already given at any time. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)
Where data are processed on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to such processing. Where your data are processed for direct marketing purposes, you have the right to object at any time to processing for that purpose.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority includes the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
Further Data Subject Rights
Within the scope of the applicable statutory provisions, you have the right to:
-
Access to your stored data (Art. 15 GDPR)
-
Rectification of inaccurate data (Art. 16 GDPR)
-
Erasure (Art. 17 GDPR)
-
Restriction of processing (Art. 18 GDPR)
-
Data portability (Art. 20 GDPR)
For this, please contact the address stated in the Legal Notice (Impressum) or under Section 1 at any time.
SSL/TLS Encryption
For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in the address bar and the lock icon in your browser.
5. Cookies and Consent
This website uses cookies and comparable technologies. Cookies are small text files stored on your device.
Technically necessary cookies required for the operation of the site are set on the basis of Section 25(2) TDDDG or Art. 6(1)(f) GDPR. All other cookies and technologies (e.g. statistics, embedded content) are only set with your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Via the consent banner, you can give, refuse, or at any time withdraw and adjust your consent through the privacy settings. Non-essential services are only loaded after active consent.
6. Contact
Contact Form / Enquiry by Email
If you contact us via the contact form or by email, the details you provide, including the contact data you supply, will be stored for the purpose of processing your enquiry and for follow-up questions. We do not pass on these data without your consent.
Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling the enquiries (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR).
Your data will remain with us until you request their deletion, withdraw your consent, or the purpose ceases to apply. Mandatory statutory provisions — in particular retention periods — remain unaffected.
7. Newsletter
If you wish to receive the newsletter offered on the website, we require your email address as well as information allowing us to verify that you are the owner of the email address provided and consent to receiving the newsletter.
The newsletter is sent via the email marketing tool integrated into Wix. The provider is Wix.com Ltd. (see Section 3). For registration we use the double opt-in procedure: after signing up, you receive an email in which you confirm your registration. This ensures that only the owner of the email address can subscribe to the newsletter.
Processing takes place solely on the basis of your consent (Art. 6(1)(a) GDPR). You can unsubscribe from the newsletter at any time, e.g. via the "unsubscribe" link in every newsletter email. The lawfulness of processing already carried out remains unaffected by the withdrawal. After unsubscribing, your email address will be deleted from the distribution list, unless a statutory retention obligation applies.
8. Web Analytics: Google Analytics
This website uses — only with your consent — functions of the web analytics service Google Analytics (GA4). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Analytics enables us to analyse the behaviour of website visitors. In doing so, interactions, device and browser information, and a (usually shortened) IP address, among other things, are processed. This information may be transferred to Google servers, including in the USA.
Use takes place solely on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time via the privacy/cookie settings. The transfer of data to the USA is based on the EU-US Data Privacy Framework and additionally on Standard Contractual Clauses.
By default, data collected at user level are automatically deleted after 14 months (configurable in GA4). Further information: https://policies.google.com/privacy
9. Social Media
We maintain a presence on social networks. On our website, only linked profile icons are included — no content from the networks is embedded directly. A connection to the respective network is only established when you click on an icon and access its page. From that point onwards, data processing is carried out by the respective provider in accordance with its privacy terms; we have no influence over this.
Meta (Facebook & Instagram) The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Privacy policy: https://www.facebook.com/privacy/policy · https://privacycenter.instagram.com/policy
Pinterest The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. Privacy policy: https://policy.pinterest.com/de/privacy-policy
LinkedIn The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (parent company: LinkedIn Corporation, USA). Privacy policy: https://www.linkedin.com/legal/privacy-policy
WhatsApp The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta group). Where a WhatsApp contact link ("click-to-chat") is included on our website, a connection is only established when you click on it. Privacy policy: https://www.whatsapp.com/legal/privacy-policy
RedNote (Xiaohongshu) For international users, the provider is Rednote Technology Pte. Ltd., Singapore (parent company: Xingyin Information Technology (Shanghai) Co., Ltd., Shanghai, China). Data may be processed in Singapore and/or China. Neither Singapore nor China is covered by an EU adequacy decision; any transfer is based on the EU Commission's Standard Contractual Clauses (Art. 46 GDPR) where available. Please note that an equivalent level of data protection to the GDPR cannot be fully guaranteed for these countries. Privacy terms: available at https://www.rednote.com and within the app.
KakaoTalk The provider is Kakao Corp., 242 Cheomdan-ro, Jeju-si, Jeju-do, Republic of Korea. The Republic of Korea is covered by an EU adequacy decision (Art. 45 GDPR), so an adequate level of data protection is recognised for transfers to South Korea. Privacy policy: https://www.kakao.com/policy/privacy
Insofar as a visit to our profiles or embedded content involves processing by the providers, this may include a transfer to third countries. For providers based in, or processing data in, the USA (Meta — including Facebook, Instagram, Threads, and WhatsApp —, Pinterest, LinkedIn, YouTube/Google, Discord, Houzz), this is based on the EU-US Data Privacy Framework and additionally on Standard Contractual Clauses. TikTok and RedNote also process data in further third countries without an adequacy decision (RedNote in China/Singapore); the basis for this is Standard Contractual Clauses, and an equivalent level of data protection cannot be fully guaranteed there. For LINE (Japan) and KakaoTalk (Republic of Korea), the respective EU adequacy decisions apply.
Joint Controllership for Insights (Art. 26 GDPR)
We operate a Facebook presence and an Instagram business account. For the statistics ("Insights") generated by Meta in this context, we are jointly responsible together with Meta (Art. 26 GDPR). Meta makes the essential content of this arrangement available at https://www.facebook.com/legal/terms/page_controller_addendum. The Insights involve the processing of aggregated statistics on interaction with our content; processing is based on our legitimate interest in analysing and improving our profiles (Art. 6(1)(f) GDPR). Responsibility under data protection law for any further processing by Meta lies with Meta; the competent supervisory authority is the Irish Data Protection Commission (DPC). You can exercise data subject rights both towards us and towards Meta; requests regarding Insights data are primarily handled by Meta.
10. Google Ads and Conversion Tracking
Once activated, this website uses Google Ads with conversion tracking and, where applicable, remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
After a click on a Google ad, Google Ads sets a cookie to measure the success of advertising campaigns (conversion tracking) and, where applicable, to show you interest-based advertising (remarketing). Use takes place solely with your consent on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time via the privacy/cookie settings. A transfer of data to the USA is based on the EU-US Data Privacy Framework and additionally on Standard Contractual Clauses. Further information: https://policies.google.com/privacy
11. Affiliate Links (Advertising Links) in the Blog
Our blog contains affiliate or advertising links to the offers of partners (e.g. GetYourGuide, Trip.com, as well as other partner programmes and platforms such as Pinterest). If you make a booking or purchase via such a link, we may receive a commission. So that the referral can be attributed to the correct provider, the partner usually sets a cookie upon click or uses a comparable technology (e.g. a partner/click ID). This attribution is usually stored only on the partner's target page; from that point onwards, the respective partner is responsible for the processing.
Insofar as information is stored on, or read from, your device already on our site for the purpose of attribution, this only takes place with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Our legitimate interest in the settlement of commissions is based on Art. 6(1)(f) GDPR. We label advertising and affiliate links as advertising.