1. Data Protection at a Glance: General Information

The following information provides a straightforward overview of what happens to personal data when visiting this website. Personal data comprises any data with which an individual can be personally identified. Detailed information on the subject of data protection can be found in the full Privacy Policy displayed below this text.

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The corresponding contact details can be found in the section "Information Regarding the Data Controller" within this Privacy Policy.

How is data collected?
On one hand, data is collected when it is manually provided to this website. This may include, for example, information entered into a contact form.

Other data is collected automatically or upon visitor consent by the integrated IT systems during the website visit. This primarily consists of technical information (e.g., internet browser, operating system, or the time of the page access). The collection of this technical data occurs automatically as soon as this website is entered.

What is the data used for?
A portion of the data is collected to guarantee the error-free provision and functionality of this website. Other data may be utilized to analyze user behavior.

What rights exist regarding personal data?
Visitors have the right to receive information about the origin, recipient, and purpose of stored personal data at any time and free of charge. Furthermore, a right to request the correction or erasure of this data exists. If consent to data processing has been granted, this consent can be revoked at any time with future effect. Under certain circumstances, visitors also have the right to demand the restriction of the processing of personal data. In addition, a right to lodge a complaint with the competent supervisory authority is available.

For inquiries regarding these rights or any other questions on the topic of data privacy, the Data Controller can be contacted at any time.

Analysis Tools and Third-Party Tools
When visiting this website, surfing behavior may be statistically evaluated. This is primarily carried out via specialized analysis programs. Detailed information regarding these analysis programs can be found in the following Privacy Policy.

2. Hosting

Squarespace
This website is hosted by Squarespace (Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland; hereinafter referred to as "Squarespace"). Squarespace collects personal data when this website is visited. This data includes:

• Information about the browser, network, and device

• Web pages visited prior to accessing this website

• Web pages accessed within this website

• The visitor's IP address

Squarespace requires this data to operate this website, as well as to protect and improve its platform and services. Squarespace analyzes this data in a depersonalized form.

When this website is visited, data is processed on the servers of Squarespace. During this process, personal data may also be transmitted to the parent company of Squarespace: Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Furthermore, Squarespace stores cookies that are strictly necessary for the proper display of the page and to guarantee security (necessary cookies).

If corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transmission to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: squarespace.com.

The company possesses a certification under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA designed to guarantee compliance with European data protection standards for data processing in the USA. Every company certified under the DPF commits to adhering to these data protection standards. Further information can be obtained from the provider via the following link: dataprivacyframework.gov

This website uses cookies and similar technologies, which are small files or short pieces of text downloaded to a device when a visitor accesses a website or app. Information regarding the cookies placed on the device can be viewed under "About the cookies used by Squarespace".

These functional and required cookies are always utilized, as they enable Squarespace—the hosting platform—to securely provide this website.

Analytics and performance cookies are only deployed on this website if the cookie banner is explicitly confirmed. This website utilizes analytics and performance cookies to gain insights into website traffic, website activity, and other metrics.

External Hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the hosting provider(s). This may primarily include IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access logs, and other data generated via a website.

External hosting is carried out for the purpose of contract fulfillment toward potential and existing clients (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of the online services by a professional provider (Art. 6 (1) (f) GDPR). If corresponding consent has been requested, processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

3. General Information and Mandatory Data Protection Disclosures

The operator of these pages takes the protection of personal data very seriously. Personal data is treated confidentially and in accordance with statutory data protection regulations as well as this Privacy Policy.

When this website is utilized, various personal data is collected. Personal data is data with which an individual can be personally identified. This Privacy Policy explains which data is collected and what it is used for. It also outlines how and for what purpose this occurs.

Please note that data transmission over the internet (e.g., when communicating via email) may be subject to security vulnerabilities. Complete protection of data against third-party access is not mathematically or technically possible.

Storage Duration
Unless a more specific storage period is specified within this Privacy Policy, personal data remains stored until the purpose for the data processing no longer applies. If a legitimate request for erasure is asserted or consent to data processing is revoked, the data will be deleted unless other legally permissible reasons for storing the personal data exist (e.g., retention periods under tax or commercial law); in the latter case, deletion takes place once these reasons cease to apply.

General Information on the Legal Basis for Data Processing on This Website
If consent to data processing has been granted, personal data is processed on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR if special categories of data are processed. In the event of explicit consent to the transfer of personal data to third countries, processing is also based on Art. 49 (1) (a) GDPR. If consent to the storage of cookies or to the access of information in the end device has been granted (e.g., via device fingerprinting), processing is additionally based on § 25 (1) TDDDG. Consent can be revoked at any time.

If data processing is necessary for the performance of a contract or for the implementation of pre-contractual measures, processing is based on Art. 6 (1) (b) GDPR. Furthermore, if processing is required to fulfill a legal obligation, it is carried out based on Art. 6 (1) (c) GDPR. Data processing may also be conducted based on legitimate interests pursuant to Art. 6 (1) (f) GDPR. The specific legal bases applicable in each individual case are provided in the respective sections of this Privacy Policy.

4. External Social Media Integration (Instagram Link)

An external hyperlink to the official Instagram profile (operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) is integrated into this website.

To ensure maximum privacy protection, this connection is implemented strictly as a static text or graphic hyperlink. No automated data transfer to Instagram or Meta occurs upon merely browsing this website. A connection to the servers of Instagram is established exclusively if the link is actively clicked and a redirection to the external social media platform takes place. Once redirected, all subsequent data processing activities are governed solely by Instagram’s independent data privacy policy.

5. Information Regarding the Data Controller

Data Controller:
Aylin Dilara Vogelsang

Address:
Ugglevägen 4
18761 Täby
Sweden

Contact:
info@aylinvogelsang.photo