1. DATA PROTECTION AT A GLANCE
General information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.
Data collection on our website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator’s contact information in the „Information on the Data Controller“ section of this Privacy Policy.
How do we collect your data?
Your data is collected, in part, when you provide it to us. This may include, for example, data that you enter into a contact or booking form.
Other data is collected by our IT systems automatically or with your consent when you visit the website. This consists primarily of technical data, such as your web browser, operating system, or the time you accessed the page.
What do we use your data for?
Some of the data is collected to ensure the website functions properly. Other data is used to process your inquiries, to fulfill reservations and contracts, or—provided you have given your consent—to analyze your user behavior.
What rights do you have with regard to your data?
Subject to the statutory requirements, you have the right at any time to receive, free of charge, information about the personal data we have stored about you, as well as, where applicable, the right to have this data corrected or deleted. You also have the right to restrict processing, the right to data portability, and, under certain conditions, the right to object.
You may revoke your consent at any time, effective for the future.
In addition, you have the right to file a complaint with a competent data protection supervisory authority.
Analysis tools and tools from third-party providers
If you have given your consent, your usage behavior when visiting this website may be analyzed for statistical purposes. To this end, we use Google Analytics 4 in particular.
Consent for services requiring consent is managed through Borlabs Cookie. For more details, please see the following sections of this Privacy Policy.
2. GENERAL NOTES AND MANDATORY INFORMATION
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data are processed. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data is processed, how we use it, and the legal basis for doing so.
Please note that data transmission over the Internet—for example, when communicating via email—may be vulnerable to security breaches. It is not possible to completely protect data from access by third parties.
Note on the responsible body
The controller responsible for data processing on this website is:
Iva Samina c/o STUDIO 10
Marienburger Street 10
10405 Berlin
Phone: +49 (0)176 6333 3090
E-mail: hello@ivasamina.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names or email addresses.
Revocation of your consent to data processing
Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time, effective for the future. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.
If consent was granted through our consent management system, you can change your selection at any time using the settings provided there.
Right to Object
To the extent that your personal data is processed on the basis of Article 6(1)(e) or (f) of the GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation.
If personal data is processed for the purpose of direct marketing, you have the right at any time to object to the processing for the purpose of such marketing.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential information—such as inquiries or booking data—that you send to us as the website operator, this site uses SSL or TLS encryption.
You can tell that a connection is encrypted when the browser's address bar changes from „http://“ to „https://“ and when you see the lock icon in your browser's address bar.
If SSL or TLS encryption is enabled, data that you send to us cannot be easily intercepted by third parties.
Right of Access, Rectification, Erasure, and Restriction of Processing
Under applicable law, you have the right at any time to receive, free of charge, information about the personal data stored about you, its origin and recipients, and the purpose of the data processing.
Provided that the legal requirements are met, you also have the right to have your data corrected or deleted, as well as to restrict its processing.
Right to Data Portability
Subject to the statutory requirements, you have the right to have data that we process automatically—based on your consent or in fulfillment of a contract—provided to you or a third party in a commonly used, machine-readable format.
Right to File a Complaint with a Regulatory Authority
In accordance with Article 77 of the GDPR, data subjects have the right to lodge a complaint with a data protection supervisory authority.
For companies headquartered in Berlin, the following regulatory authority has jurisdiction in particular:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
Phone: +49 30 13889-0
Email: mailbox@datenschutz-berlin.de
For more information, please visit the website of the Berlin Commissioner for Data Protection and Freedom of Information.
Objection to advertising e-mails
We hereby object to the use of contact information published in accordance with legal disclosure requirements for the purpose of sending unsolicited advertising and informational materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited transmission of advertising information, such as through spam emails.
3. DATA COLLECTION ON OUR WEBSITE
Cookies and Similar Technologies
Our website uses cookies and similar technologies. Cookies are small data packets that are stored on your device or contain information that can be retrieved during a subsequent visit.
Some cookies and similar technologies are technically necessary to provide the website and certain features you request. Other technologies are used, for example, to analyze website usage for statistical purposes.
To the extent that the storage of information on your device or access to information already stored on your device is absolutely necessary for the provision of a digital service you have expressly requested, this is done in accordance with § 25(2) of the TDDDG.
To the extent that consent is required, the storage of or access to data is based on your consent in accordance with § 25(1) of the TDDDG. Any associated processing of personal data is based on Article 6(1)(a) of the GDPR.
You can change or withdraw your consent at any time, effective for the future, through the settings in our consent management system.
Borlabs Cookie
This website uses Borlabs Cookie to manage your consent to the use of cookies and similar technologies.
Borlabs Cookie sets a technically necessary cookie that stores the consent decision you made when visiting our website. This allows your selection to be taken into account when you visit the site in the future.
This cookie is used to store your consent decision and is necessary for the consent management system to function.
The storage of and access to the cookie are based on § 25(2) of the TDDDG. To the extent that personal data is processed in this context, such processing is based on Article 6(1)(c) of the GDPR to fulfill our legal record-keeping obligations, as well as Article 6(1)(f) of the GDPR based on our legitimate interest in legally compliant and user-friendly consent management.
You can change your consent settings at any time using the cookie settings provided on our website.
For more information about the provider, see the Borlabs Privacy Policy.
Server log files
The provider of this website automatically collects and stores information in so-called server log files, which your browser transmits automatically. These include, in particular:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
As a general rule, this data is not combined with data from other sources.
Data processing is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website operates without technical errors and is secure and reliable, as well as in detecting and defending against technical attacks.
Contact form
If you submit inquiries to us using a contact form provided on this website, we will process the information you enter in the form—including the contact information you provide—to handle your inquiry and for any follow-up questions.
If your inquiry relates to the initiation or performance of a contract, the processing is based on Article 6(1)(b) of the GDPR.
For other inquiries, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the proper handling of communications directed to us.
To the extent that we obtain your consent for any further processing, such processing is based on Article 6(1)(a) of the GDPR.
The data submitted via the contact form will remain with us until you request that we delete it, the purpose for which it was stored no longer applies, or you revoke your consent, provided that no statutory retention periods or other legal grounds prevent its deletion.
Booking, Customer, and Contract Data
If you book a paid service through our website, we will process the personal data you provide during the booking and order process. This may include, in particular, your name, address, email address, phone number, details of the service you booked, and the information required for payment processing.
This data is processed for the purpose of taking steps prior to entering into a contract and for the performance of the contract concluded with you, pursuant to Article 6(1)(b) of the GDPR.
We use the WordPress plugin Fluent Forms on our website to collect and process booking data. The data entered via the form is processed on our WordPress installation as part of the form processing. To the extent necessary for processing the payment method you have selected, the required data will be transmitted to the respective payment service provider.
We store the data for as long as necessary to fulfill the contractual relationship. In addition, we store data to the extent that we are required to do so by law, particularly under commercial and tax law retention requirements.
4. ANALYSIS AND GOOGLE SERVICES
Google Tag Manager
This website uses Google Tag Manager. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Tag Manager allows us to centrally manage and control website tags. On our website, it is used primarily to integrate Google Analytics 4.
Google Tag Manager does not itself create standalone user profiles or perform independent analysis of user behavior. However, services that process data can be loaded via Google Tag Manager. The relevant sections of this Privacy Policy apply to these services.
Integration and control are handled through our consent management system, Borlabs Cookie. We use Google Consent Mode for this purpose. The consent decision you make is taken into account when controlling Google services.
For more information, see the Google Privacy Policy.
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Analytics allows us to analyze how our website is used. This may involve processing information such as page views, interactions with the website, time spent on the site, visitors’ origins, devices used, browsers, and operating systems, as well as approximate location.
To this end, Google Analytics uses technologies that may enable the recognition of a user or their device.
We use Google Analytics via Google Tag Manager. Consent management is handled by the Borlabs cookie in conjunction with Google Consent Mode.
The processing of information for analytical purposes, as well as the storage of information on your device or access to such information, is carried out—to the extent that consent is required—on the basis of your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG.
You can change or withdraw your consent at any time, effective for the future, through our cookie settings.
For more information about data collection and data protection in Google Analytics, please visit Privacy Policy for Google Analytics.
Google Signals
The Google Signals feature is enabled within Google Analytics.
Google Signals can enable Google Analytics to link Analytics data with information from signed-in Google users, provided that the necessary requirements and consents are in place. This, in particular, enables cross-device analysis and provides additional information for analyzing user behavior.
Use is based on the selections you have made through our consent management system and the applicable Google consent settings.
Our Google Analytics property is technically linked to a Google Ads account. However, we are not currently using any Google Ads tags on this website for conversion tracking or remarketing.
Should any such Google Ads features be enabled in the future, we will update the consent management system and this privacy policy accordingly before they are implemented.
Data Transmission
When using Google Analytics, the transmission of personal data to Google LLC and other Google companies in the United States cannot be ruled out.
Google LLC is certified under the EU-U.S. Data Privacy Framework. Provided that the requirements of the framework are met, data transfers may take place on the basis of the relevant adequacy decision by the European Commission. In addition, other appropriate safeguards for international data transfers may apply.
For more information on the processing of personal data and international data transfers, please see the Google Privacy Policy.
Google Search Console
We use Google Search Console, a service provided by Google. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Search Console allows us to monitor and optimize our website's visibility and appearance in Google Search.
Among other things, Google provides us with information about which search queries cause our website to appear in Google Search, how often individual pages are displayed or clicked on, and whether there are any technical issues with indexing.
We do not embed any additional tracking code on this website for the purpose of using Google Search Console. Since we use Search Console as a management and analytics tool, we do not set any additional cookies on our website visitors’ devices.
The processing of the data provided to us by Google is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the technical monitoring and optimization of our website, as well as its visibility in search engines.
For more information on Google's processing of personal data, please see the Google Privacy Policy.
5. NEWSLETTER
Newsletter data
If you would like to subscribe to the newsletter offered on the website, we will need your email address and, if necessary, additional information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter.
We use this information to send you the newsletter you requested.
The data collected for newsletter registration is processed based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may revoke your consent at any time, effective for the future, in particular by using the unsubscribe link included in every newsletter.
The data you have provided for the purpose of subscribing to the newsletter will generally be stored until you unsubscribe from the newsletter and will then be deleted or removed from the newsletter distribution list, unless there is another legal basis for continued storage. Statutory retention periods remain unaffected.
Mailchimp
This website uses Mailchimp to send and analyze newsletters. The provider is The Rocket Science Group LLC, d/b/a Mailchimp, a company within the Intuit group, USA („Mailchimp“).
Mailchimp is a service that is specifically designed to help organize and analyze the distribution of newsletters.
When you subscribe to our newsletter, the data required for this purpose is transmitted to Mailchimp and processed there. This includes, in particular, your email address and, if applicable, any other data collected as part of the newsletter subscription process.
Mailchimp also allows us to analyze the statistics for our newsletters. For example, we can determine whether a newsletter was opened and which links within it were clicked. In addition, technical information such as the time of access, IP address, browser type, and operating system may be processed.
We use this information to analyze the success of our newsletters and improve our content.
Data processing is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw this consent at any time with future effect, in particular by unsubscribing from the newsletter.
Mailchimp is headquartered in the United States and also processes data on servers in the United States. According to Mailchimp, The Rocket Science Group LLC, doing business as Mailchimp, is covered by the EU-U.S. Data Privacy Framework as part of the Intuit group of companies.
In addition, Mailchimp’s Data Processing Addendum includes the Standard Contractual Clauses adopted by the European Commission in the event that additional appropriate safeguards are required for the transfer of European personal data.
The Data Processing Addendum is part of the agreement with Mailchimp and governs Mailchimp's processing of customers' personal data.
The data stored by Mailchimp for the purpose of sending the newsletter will generally be processed until you unsubscribe from the newsletter or until the purpose of processing no longer applies, unless there are statutory or other legal grounds justifying further storage.
For more information on the processing of personal data, please see the Legal and Privacy Information from Mailchimp.
The relevant for data processing Mailchimp Data Processing Addendum You can also view this information on the provider's website.
6. PAYMENT PROVIDERS
Payment Processing
On our website, you can book and pay for services or offers that require payment. If you select one of the available payment methods, the data required to process the payment will be transmitted to the respective payment service provider.
The data processed may include, in particular, your name, billing and payment information, transaction data, contact information, and technical data. The specific data processed depends on the selected payment method and the respective payment service provider.
The processing of the data required to execute the payment is based on Article 6(1)(b) of the GDPR for the purpose of performing the contract concluded with you or taking steps prior to entering into a contract.
PayPal
On our website, we offer the option to pay via PayPal. The payment service provider for customers in the European Economic Area is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg („PayPal“).
If you select PayPal as your payment method and initiate the payment process, the data required to process the payment will be transmitted to PayPal. This may include, in particular, your name, contact information, payment and transaction details, as well as other information necessary to complete and secure the payment.
PayPal also processes personal data as part of the payment processing for its own purposes, such as fraud prevention, risk assessment, compliance with legal obligations, and the provision of its payment services. We do not have complete control over the nature and scope of this independent data processing by PayPal.
The transmission of the data required to process the PayPal payment you have selected is based on Article 6(1)(b) of the GDPR.
To the extent that PayPal obtains separate consent from you for certain processing activities, such processing is governed by the terms and legal bases specified by PayPal.
For more information about the nature, scope, and purposes of data processing by PayPal, as well as your rights, please see the PayPal Privacy Policy.
German 
English