1. Responsible Party
Annika Haack
Korneliusstraße 8
52076 Aachen
Email: hallo@annikahaack.de

2. Collection and Storage of Personal Data, Type and Purpose of Their Use

a) When Visiting the Website
When you visit my website https://annikahaack.de, information is automatically sent by the browser used on your device to the server of my website and stored in log files:

• IP address
• Date and time of access
• Name and URL of the retrieved file
• Website from which access occurs
• Browser type and operating system
• Name of the access provider

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).

b) Contact Form
When using the contact form, your information is stored for the purpose of processing the inquiry and for follow-up questions.
Legal basis: Art. 6(1)(a) GDPR (consent).

3. Data Disclosure
Data is only shared with third parties if:

• You have given your consent (Art. 6(1)(a) GDPR),
• There is a legal obligation (Art. 6(1)(c) GDPR), or
• It is necessary to protect legitimate interests (Art. 6(1)(f) GDPR).

4. Cookies
This website uses cookies to ensure basic functions and to enable statistical analysis.
Storage is based on Art. 6(1)(a) GDPR (consent).
You can adjust your consent at any time in the cookie banner.

5. Google Analytics
This website uses Google Analytics, a service by Google Ireland Limited.
Google Analytics uses cookies to analyze website usage.
IP anonymization is activated.
Data processing is based on your consent (Art. 6(1)(a) GDPR).
More information: https://policies.google.com/privacy

6. Calendly
For appointment scheduling, I use Calendly, operated by Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA.
When booking an appointment, the entered data is transmitted to Calendly.
Legal basis: Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(a) GDPR (consent).
Privacy Policy: https://calendly.com/privacy

7. Embedding Instagram Content via Third-Party Plugins
This website may use plugins or services from Instagram to display content.
When loading the page, a connection is established with the provider’s servers. Personal data (e.g., IP address, browser info) may be transmitted.
The provider retrieves Instagram content from its own servers and processes technical data.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
If you do not give consent, the feed will not load.
See each provider’s privacy policy for details.

8. Rights of Data Subjects
You have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

9. Data Security
This website uses SSL encryption (https). You can recognize this by the lock symbol in your browser’s address bar.

10. Updates
Last updated: October 2025.
Future changes to this privacy policy are reserved.