Privacy Policy

Status: 14 February 2026

1. Data Controller

The data controller responsible for data processing on this website is:

Nicolas Loewer

Weserstr. 92, 12059 Berlin, Germany

Email: Nicolasloewer@outlook.de

Phone: +49 1522 5351258

2. General Information

I take the protection of your personal data very seriously.

Personal data is any data by which you can be personally identified.

3. Hosting & Server Log Files

This website is hosted by Hostinger (WordPress + Elementor). When visiting the website, the hosting provider processes technically necessary data on my behalf (so-called server log files), such as IP address, date/time, accessed pages, browser/operating system, and referrer URL.

Purpose: Website provision, security, and error analysis

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

Storage period: Log files are generally stored for a limited time and then deleted or anonymized.

4. Contact (Email / Contact Form)

If you contact me by email or via a contact form, I process your data to handle your inquiry and any follow-up questions.

Legal basis:

  • Art. 6(1)(b) GDPR (pre-contractual measures / contract), or
  • Art. 6(1)(f) GDPR (legitimate interest in communication)

Storage period: Until the inquiry has been fully processed, subject to statutory retention obligations.

5. Appointment Booking via Calendly

I use Tidycal for appointment scheduling. Your data (e.g. name, email address, preferred date, optional notes) is transmitted to and processed by Calendly.

Purpose: Appointment scheduling and contract initiation/fulfillment

Legal basis: Art. 6(1)(b) GDPR

Note: Calendly may process data in third countries (e.g. the USA). In such cases, data transfers are based on appropriate safeguards (e.g. Standard Contractual Clauses and/or an adequacy decision, where applicable).

6. Payment Processing (Stripe, PayPal)

Payments are processed via Stripe and PayPal. Payment-related data is transmitted to the respective payment service provider.

Purpose: Payment processing / contract fulfillment

Legal basis: Art. 6(1)(b) GDPR

Please also review the privacy policies of the respective providers.

7. Video Conferencing (Zoom)

For online sessions, I use Zoom. Depending on usage, data such as name, email address, meeting metadata, and potentially audio/video data may be processed.

Purpose: Delivery of booked services

Legal basis: Art. 6(1)(b) GDPR

Note: Zoom may process data in third countries; the provider’s applicable safeguards and mechanisms apply.

8. Communication via Telegram (Optional)

If you contact me via Telegram, your data is processed within Telegram’s infrastructure. Telegram is an external service; please use it only if you agree to this form of communication.

Legal basis:

  • Art. 6(1)(a) GDPR (consent through voluntary contact via Telegram), or
  • Art. 6(1)(b) GDPR (if related to contract performance)

Tip: For particularly sensitive topics, I recommend using email or a contact form.

9. Embedded Content and Tools

a) YouTube Videos

This website may embed YouTube videos. When playing a video, YouTube may process data about you (e.g. IP address, device information, cookies).

YouTube videos and Google Maps are only loaded after you consent to the category “External Media” (opt-in).

Legal basis: Art. 6(1)(a) GDPR (consent)

b) Google Maps

This website may use Google Maps. When loading the map, data may be transmitted to Google.

Legal basis: Art. 6(1)(a) GDPR (consent)

10. Web Analytics

a) Google Analytics

I use Google Analytics to measure reach and analyze website usage. Cookies and online identifiers may be used. Consent is generally required for tracking and analytics.

Google Analytics is only activated if you consent to the category “Statistics” (opt-in via cookie banner).
Legal basis: Art. 6(1)(a) GDPR (consent)
Google may process data in third countries; appropriate safeguards apply.

b) Independent Analytics (WordPress)

I may additionally use Independent Analytics (a local WordPress analytics plugin). Depending on configuration, this may operate without cookies or with anonymized data.

Legal basis: Depending on setup, Art. 6(1)(a) GDPR (consent) or Art. 6(1)(f) GDPR (legitimate interest)

I configure analytics tools to process as little personal data as possible.

11. Cookies & Consent Management (Planned: Cookiebot)

I use or plan to use a consent management tool (e.g. Cookiebot) to obtain and document consent for non-essential services (e.g. analytics, maps, YouTube).

Legal basis: Art. 6(1)(c) GDPR (legal obligation), in conjunction with consent requirements for cookies and tracking.

12. Recipients / Data Processors

I use service providers (hosting, booking, payment, video conferencing, and potentially analytics). These providers process data either on my behalf or as independent controllers. Where required, I conclude data processing agreements in accordance with Art. 28 GDPR.

13. Storage Duration

Personal data is processed and stored only for as long as necessary for the respective purposes or as required by statutory retention obligations.

14. Your Rights

You have the right at any time to:

  • access (Art. 15 GDPR)
  • rectification (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent (Art. 7(3) GDPR)

15. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Berlin is:

Berlin Commissioner for Data Protection and Freedom of Information

Friedrichstr. 219, 10969 Berlin
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de