Privacy Policy
1. Privacy at a Glance
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the full privacy policy below.
Data Collection on This Website
Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. You can find their contact details in the "Controller" section of this privacy policy.
How do we collect your data? Some data is collected when you provide it to us — for example, data you enter into a contact form. Other data is collected automatically when you visit the website, such as technical information (browser type, operating system, time of visit). This data is collected automatically as soon as you enter the website.
What do we use your data for? Some data is collected to ensure the website functions correctly. Other data may be used to analyse visitor behaviour.
What rights do you have regarding your data? You have the right at any time to request information about the origin, recipients and purpose of your stored personal data, free of charge. You also have the right to request the correction or deletion of this data. You may withdraw any consent to data processing at any time. Under certain circumstances, you also have the right to request that processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority. Please contact us at any time if you have questions about data protection.
2. Hosting
We host this website with the following provider:
Cloud86
The provider is Cloud86 B.V., Lavendelheide 21-108, 9202 PD Drachten, Netherlands.
When you visit this website, Cloud86 automatically collects and stores information in server log files, which your browser transmits to us. This includes browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address. This data is not merged with other data sources.
This data is collected on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and optimisation of our website — for which server log files must be recorded.
Cloud86 operates exclusively within European data centres, meaning no transfer of personal data outside the European Economic Area takes place.
Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with Cloud86 in accordance with Art. 28 GDPR, ensuring that personal data of our website visitors is processed only on our instructions and in full compliance with the GDPR.
For further information, see Cloud86's privacy policy at: https://www.cloud86.io/privacy-policy
3. General Information and Mandatory Disclosures
Data Protection
The operators of this website take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with applicable data protection law.
Controller
The controller responsible for data processing on this website is:
Sarah Both Comburgstraße 30 71640 Ludwigsburg Germany
Phone: 017682100236 Email: me@sarahboth.de
Retention Period
Unless a specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or withdraw consent, your data will be deleted unless we have other legally permissible reasons for retaining it.
Legal Basis for Processing
Where you have given consent, we process your data on the basis of Art. 6(1)(a) GDPR. Where processing is necessary for the performance of a contract, the basis is Art. 6(1)(b) GDPR. For legal obligations, Art. 6(1)(c) GDPR applies. Processing may also be based on our legitimate interests under Art. 6(1)(f) GDPR.
Data Transfer to Third Countries
Some tools we use may transfer data to countries outside the EU/EEA where data protection standards may differ from those in the European Union. Where this occurs, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.
Right to Object to Direct Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes. We will cease processing your data for this purpose upon receipt of your objection.
SSL/TLS Encryption
This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the padlock icon.
Your Rights
You have the right to: free information about your stored personal data, its origin, recipients and purpose; correction or deletion of your data; withdrawal of consent at any time; restriction of processing under certain circumstances; data portability; and the right to lodge a complaint with a supervisory authority.
To exercise these rights, please contact us at me@sarahboth.de.
4. Data Collection on This Website
Cookies
This website uses cookies — small data packets stored on your device. Session cookies are deleted when you close your browser. Persistent cookies remain until you delete them or they expire automatically.
Technically necessary cookies are stored on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically sound and optimised operation of our website. Where consent has been requested, processing is based on Art. 6(1)(a) GDPR; this consent can be withdrawn at any time.
You can configure your browser to inform you about cookies, allow them only in individual cases, or disable them entirely. Disabling cookies may affect the functionality of this website.
Contact Form
If you send us enquiries via the contact form, your details — including the contact information you provide — will be stored for the purpose of processing your request and in case of follow-up questions. We do not share this data without your consent.
Processing is based on Art. 6(1)(b) GDPR where your request relates to a contract, or Art. 6(1)(f) GDPR based on our legitimate interest in effectively handling enquiries. Data entered in the contact form is retained until you request deletion, withdraw consent, or the purpose for storage no longer applies.
5. Plugins and Tools
Vimeo (Do-Not-Track)
This website embeds videos from Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.
When you visit a page containing a Vimeo video, a connection to Vimeo's servers is established and Vimeo receives your IP address. We have configured Vimeo so that it will not track your activity or set cookies.
Usage is based on our legitimate interest in presenting our content attractively (Art. 6(1)(f) GDPR). Where consent has been requested, processing is based solely on Art. 6(1)(a) GDPR; this consent can be withdrawn at any time.
Data transfer to the USA is based on EU Standard Contractual Clauses. For details, see Vimeo's privacy policy: https://vimeo.com/privacy
6. EU Dispute Resolution
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr/
We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.
Last updated: March 2026