1. Controller

The controller responsible for data processing on this website is:

Stephanie Rae Ibanez
Hasenheide 74 10967 Berlin Germany
Email: raeibanez@gmail.com
Phone: +49 159 01636367

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2. General Information

I take the protection of your personal data seriously and process it confidentially, in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Please note that data transmitted over the internet can have security gaps. Complete protection against third-party access is not possible.

3. Hosting

This website is built and hosted on Framer, provided by Framer B.V., Amsterdam, Netherlands. The provider collects and processes personal data transmitted through this site on my behalf, including access data and metadata.

The legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in the secure and efficient provision of this website. Where consent has been requested, processing takes place on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Server Log Files

The hosting provider automatically collects and stores information in server log files that your browser transmits. This includes:

• Browser type and version

• Operating system

• Referrer URL

• Hostname of the accessing device

• Time of the server request

• IP address

This data is not merged with other data sources. It is processed on the basis of Art. 6 (1) (f) GDPR, my legitimate interest in the technically error-free presentation and optimisation of this website. Log data is deleted after a short retention period defined by the hosting provider.

5. Contact by Email

If you contact me by email, the details you provide, including your email address, your name and the content of your message, are stored for the purpose of handling your enquiry and any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR, my legitimate interest in responding to enquiries addressed to me.

Email correspondence is handled via Google Workspace / Gmail, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to servers in the United States on the basis of the EU-US Data Privacy Framework and, where applicable, Standard Contractual Clauses pursuant to Art. 46 GDPR.

Your data remains with me until you request deletion, withdraw your consent, or the purpose for storing it no longer applies. Statutory retention periods, in particular under tax and commercial law, remain unaffected.

6. Contact Form

If you use the contact form on this site, the details you enter are stored in order to process your enquiry and in case of follow-up questions. This data is not passed on without your consent.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR.

7. Web Fonts

Google Fonts

This website uses Google Fonts, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page is loaded, your browser may establish a connection to Google servers in order to load the fonts. In doing so, your IP address is transmitted to Google. Google does not use cookies for this purpose and the data is not merged with a Google account.

Adobe Fonts

This website uses Adobe Fonts, provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When a page is loaded, your browser establishes a connection to Adobe servers in order to load the fonts. In doing so, your IP address is transmitted. Adobe states that it does not set cookies for the purpose of font delivery.

For both services, the legal basis is Art. 6 (1) (f) GDPR, my legitimate interest in a consistent and technically reliable presentation of this website. Where consent has been requested, the legal basis is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Data may be transferred to servers in the United States. Both providers participate in the EU-US Data Privacy Framework and, where applicable, rely on Standard Contractual Clauses pursuant to Art. 46 GDPR.

Further information: Google: https://policies.google.com/privacy Adobe: https://www.adobe.com/privacy/policy.html

8. Media Files

Images and videos on this website are hosted directly by this site and its hosting provider. No content is embedded from YouTube, Vimeo or comparable third-party platforms, and no data is transmitted to such providers when you view this site.

9. Cookies and Analytics

This website does not use analytics or tracking services and does not set cookies for marketing or analysis purposes. Any cookies used are strictly necessary for the technical operation of the site, on the basis of § 25 (2) TDDDG.

10. SSL / TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the lock symbol. When encryption is active, data you transmit to me cannot be read by third parties.

11. Your Rights

Under the GDPR you have the following rights:

• Access (Art. 15 GDPR): to obtain confirmation of whether your data is being processed and to receive a copy

• Rectification (Art. 16 GDPR): to have inaccurate data corrected

• Erasure (Art. 17 GDPR): to have your data deleted, subject to statutory retention obligations

• Restriction of processing (Art. 18 GDPR)

• Data portability (Art. 20 GDPR): to receive your data in a structured, commonly used, machine-readable format

• Objection (Art. 21 GDPR): to object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation

• Withdrawal of consent (Art. 7 (3) GDPR): to withdraw consent at any time, with effect for the future

To exercise any of these rights, contact me at raeibanez@gmail.com.

12. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The competent authority for me is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin Germany https://www.datenschutz-berlin.de

13. No Obligation to Provide Data, No Automated Decision-Making

You are not obliged to provide personal data in order to view this website. Providing data is only necessary if you choose to contact me. No automated decision-making, including profiling, takes place on this website.

14. Changes to This Policy

I may update this privacy policy to reflect changes to this website or to legal requirements. The current version always applies.

Last updated: 28 August 2026