top of page

Privacy Policy

Data protection is of high importance to me as a self-employed artist. The processing of personal data (e.g., name, address, email address, or telephone number) is always carried out in compliance with the legal provisions of the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to me.
 

I would like to point out that despite the highest security precautions on my part, security gaps may exist during internet-based data transmission. Complete protection cannot be guaranteed even by me.


1. Name and Contact Details of the Controller
The Controller, as defined by the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union, and other provisions related to data protection, is:


Jenny Lachenmaier
Conrad-Rechrich-Straße 23
64850 Radheim
E-Mail: info@jenny-design.com
 
2. Collection of General Data and Hosting

Hosting Service Provider
My website is hosted by an external hosting provider (e.g., Wix or another provider). The hosting services I use are for the provision of infrastructure, storage capacity, technical security, and maintenance of the online platform. I use these services to safeguard my legitimate interests in the secure and efficient provision of my online offering, pursuant to Art. 6 Para. 1 lit. f GDPR.

Server Log Files

The hosting provider automatically stores information in so-called Server Log Files, which your browser automatically transmits to me. These include:

  • Browser type and browser version

  • Operating system used

  • Referrer URL (the previously visited page)

  • Date and time of the server request

  • IP address

  • Amount of data transferred
     

This data is not used to draw conclusions about your person. I need this information to correctly deliver the content of my website, ensure the functionality of my IT systems, and provide the necessary information to law enforcement authorities in the event of a cyberattack. This data is stored separately from all other personal data you provide.
 

The data will be deleted at the latest seven days after the end of your visit to the site.


3. Cookies und Einwilligung

My website uses cookies. Cookies are text files that are stored and saved on a computer system via an internet browser. They serve to make my offer more user-friendly, effective, and secure.

Important note on consent:
 

The use of cookies that are not strictly necessary for the execution of the electronic communication process (e.g., marketing and tracking cookies like Google Analytics) requires consent.
 

I am legally obligated to inform you about the scope and purpose before setting such cookies and to obtain your active, voluntary consent (through a so-called Cookie Banner/CMP).
 

You can prevent the setting of cookies at any time by means of an appropriate setting in your browser. However, this may impair the functionality of my website.


4. Data Collection for Contact, Registration, and Newsletter

Contact Form and Email
If you contact me via email or a contact form, the personal data you transmit (e.g., name, email address) will be automatically stored. This data, transmitted on a voluntary basis, is stored exclusively for the purpose of processing the request or making contact. This data is not passed on to third parties.

Legal Basis: The processing takes place for the execution of pre-contractual measures or the fulfillment of a contract (Art. 6 Para. 1 lit. b GDPR) or based on my legitimate interest in answering your inquiries (Art. 6 Para. 1 lit. f GDPR).

Newsletter
I offer you the opportunity to subscribe to my newsletter. The data transmitted in this process will be used exclusively for this purpose. For an effective registration, I use the so-called "Double Opt-in" procedure. This ensures that the registration was actually initiated by you.

Legal Basis: The processing is based on your consent (Art. 6 Para. 1 lit. a GDPR).

Revocation: You can revoke your consent to the storage and use for newsletter dispatch at any time (unsubscribe link in the newsletter or direct message to me).

5. Web Analysis and Tracking (Google Analytics 4)
 
I use Google Analytics 4 (GA4), a web analysis service provided by Google Ireland Limited (Ireland), to analyze the use of my website and regularly improve it. The statistics allow me to make my offer more user-friendly.

Categories of data processed: Information about your use of the website, such as IP address, device information, browser data, and interactions, are recorded. GA4 uses cookieless tracking methods but typically sets cookies for full functionality, which may only be set after your active consent via the cookie banner.

Legal Basis: Use is exclusively based on your explicit consent (Art. 6 Para. 1 lit. a GDPR). You can withdraw this consent at any time.

Note on US Data Transfer: Data processing is generally carried out by Google in the USA. The European Commission has not issued an adequacy decision for the USA. The transfer is based on the Standard Contractual Clauses (SCCs) of the European Commission as appropriate safeguards in accordance with Art. 46 GDPR.

6. Social Media, Community Platforms, and US Data Transfer

I maintain online presences on various social and community media (e.g., Facebook, Instagram, X (Twitter), Twitch, YouTube, Patreon, and Ko-Fi). Insofar as you have given your consent (Art. 6 Para. 1 lit. a GDPR), your data is automatically collected and used for market research and advertising purposes when visiting these presences.

Data processing is generally carried out by the providers (e.g., Meta, X Corp., Google) in the USA. The European Commission has not issued an adequacy decision for the USA.
 

My cooperations are therefore based on the Standard Contractual Clauses (SCCs) of the European Commission as appropriate safeguards in accordance with Art. 46 GDPR.

  • Facebook / Instagram (Meta Platforms Ireland Ltd., Ireland): When using the Fan Pages, data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR.

  • X (formerly Twitter) (X Corp., USA): Usage data is generally transferred to X Corp. in the USA and stored there.

  • Twitch (Twitch Interactive, Inc., USA): Usage data is generally transferred to Twitch Interactive, Inc. in the USA and stored there.

  • YouTube (Google Ireland Ltd., Ireland): Usage data is generally transferred to Google LLC in the USA and stored there.

  • Patreon (Patreon, Inc., USA): Used for managing memberships and providing exclusive content. Data is generally transferred to Patreon, Inc. in the USA and stored there.

  • Ko-Fi (Ko-Fi Labs Ltd., United Kingdom/USA): Used to facilitate donations, tips, and support for my creative work. Data is generally transferred to Ko-Fi Labs Ltd. and stored there.


For detailed information on the processing and use of your data, please refer to the respective privacy policies of the providers.


7. Disclosure of Data to Third Parties
 

I only disclose your personal data to third parties if:

  • You have given your express consent to do so (Art. 6 Para. 1 lit. a GDPR).

  • The disclosure is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data (Art. 6 Para. 1 lit. f GDPR).

  • There is a legal obligation for disclosure (Art. 6 Para. 1 lit. c GDPR).

  • The disclosure is legally permissible and necessary for the processing of contractual relationships with you (Art. 6 Para. 1 lit. b GDPR).

​

8. Rights of the Data Subjects

​

As a data subject, you have the following rights:

  • Right of Access (Art. 15 GDPR): You can request information about your personal data processed by me.

  • Right to Rectification (Art. 16 GDPR): You can request the immediate correction of inaccurate or completion of your stored personal data.

  • Right to Erasure (Art. 17 GDPR): You can request the deletion (right to be forgotten) of your stored personal data, provided that the processing is not necessary for the exercise of legal claims or the fulfillment of a legal obligation.

  • Right to Restriction of Processing (Art. 18 GDPR).

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your provided data in a structured, commonly used, and machine-readable format or to request transmission to another controller.

  • Right to Withdraw Consent (Art. 7 Para. 3 GDPR): You can withdraw your consent once given at any time.

  • Right to Object (Art. 21 GDPR): You can object to the processing of your personal data if the processing is based on legitimate interests.

  • Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. In general, you can contact the supervisory authority of your usual place of residence.

​

9. Duration of Storage


I process and store personal data only for the period necessary to achieve the purpose of storage or as required by the legislator in laws or regulations (e.g., tax retention obligations). After this period, the personal data is routinely blocked or deleted.

10. Data Security

I use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest encryption level supported by your browser. I also employ suitable technical and organizational security measures to protect your data against manipulation, misuse, loss, or unauthorized access by third parties.

11. Currency and Amendments to this Privacy Policy

I may revise this Privacy Policy from time to time at my sole discretion. The version published on the website is always the current one. In the event of significant changes, I will publish a notice on my website.

Date of this Policy: December 2025 © JennyLiz / Jenny Lachenmaier – All rights reserved.

bottom of page