Privacy

1. Overview

This website sets no cookies, embeds no advertising networks and performs no analytics. There is no connection to Google Fonts, no embedded video and no social media plugin. Personal data arises in two places only: in the server's access logs and, if you use it, in the newsletter form.

2. Controller

Kerstin Schoch
Essenweinstr. 46a
76131 Karlsruhe, Germany
Email: hello@kerstinschoch.com

3. Hosting

This website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Strato processes the data arising from your visit on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.

Server log files

When you visit the site, your browser automatically transmits data that is recorded: the page requested, date and time, volume of data transferred, browser type and version, operating system, referring page and IP address. This data serves solely to operate the site securely and without disruption. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in technically faultless operation). It is not combined with any other data source.

4. Newsletter subscription

If you subscribe to the newsletter, the details you provide — name and email address — are sent by email to the controller and stored there. The processing serves solely to send the newsletter.

The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give explicitly in the form. You may withdraw that consent at any time and without formality, for instance with a short email to hello@kerstinschoch.com. Withdrawal does not affect the lawfulness of processing carried out beforehand. Your data will be deleted after withdrawal.

Processing takes place entirely on the server named above. No external newsletter provider is involved and no data is transferred to third countries. To guard against automated submissions the number of submissions per IP address is limited; only a non-reversible hash of the IP address is stored for at most one hour.

5. Contact by email

If you write to me, your details are stored in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6 (1) (b) GDPR for enquiries about a work and Art. 6 (1) (f) GDPR for all other matters. The data is deleted once the matter is concluded and no statutory retention periods apply.

6. Typefaces

The typeface used, “Hanken Grotesk”, is served from this server. There is no connection to Google Fonts or any other third-party server, and no IP address is transmitted to third parties in the process.

7. Encryption

For security reasons this website uses TLS encryption, recognisable by the “https://” in the address bar. Content you transmit cannot be read by third parties.

8. External links

This website links to an Instagram profile. The link is an ordinary hyperlink, not an embedded plugin — no data is transmitted to Instagram until you click it. From that point onwards the privacy policy of Meta Platforms Ireland Ltd. applies.

9. Your rights

You have the following rights at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent given (Art. 7 (3) GDPR)

Please write to hello@kerstinschoch.com. You also have the right to lodge a complaint with a supervisory authority; the competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.