The following notes give a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the privacy policy below.
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the section "Controller" in this privacy policy.
Some data is collected when you provide it to us, for example data you enter in a contact form. Other data is collected automatically, or after your consent, by our IT systems when you visit the website. This is mainly technical data (e.g. web browser, operating system or time of page access). This data is collected automatically as soon as you enter this website.
We use the data to provide the website without errors, to keep it secure and to answer your enquiries. With your consent, we also use some data to analyse how visitors use our website.
You have the right to receive information about the origin, recipients and purpose of your stored personal data free of charge at any time. You also have the right to request that this data be corrected or deleted. If you have given consent to data processing, you can withdraw it at any time with effect for the future. You also have the right, under certain circumstances, to request that the processing of your personal data be restricted. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time about this or any other questions on data protection.
If you consent, your browsing behaviour on this website is statistically analysed with Google Analytics. You can refuse or withdraw this consent at any time in the cookie settings. Details can be found in section 4 below.
We host the content of our website with the following provider:
The provider is Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland (hereinafter "Infomaniak").
The personal data collected on this website is stored on Infomaniak's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data and other data generated through a website.
Infomaniak is used to fulfil contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).
Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.
Data transfer to Switzerland: Infomaniak is based in Switzerland and stores data in its own data centres in Switzerland. The European Commission has issued an adequacy decision for Switzerland (Art. 45 GDPR), which confirms that Switzerland offers an adequate level of data protection.
Data processing agreement: We have concluded a data processing agreement (DPA) with Infomaniak. This contract, required by data protection law, ensures that Infomaniak processes our website visitors' personal data only on our instructions and in compliance with the GDPR.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
The controller responsible for data processing on this website is:
Maëlle Guillot
Pfarrstraße 126
10317 Berlin, Germany
Email: hello@maelleguillot.com
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you make a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law). In the latter case, the data will be deleted once these reasons no longer apply.
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device, processing is additionally based on § 25(1) TDDDG. Consent can be withdrawn at any time.
If your data is required to fulfil a contract or to carry out pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to fulfil a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The relevant legal bases in each individual case are explained in the following paragraphs of this privacy policy.
In the course of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these parties. We only pass on personal data to external parties if this is necessary to fulfil a contract, if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest under Art. 6(1)(f) GDPR, or if another legal basis permits the disclosure. When using processors, we only pass on our customers' personal data on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.
Many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. The lawfulness of the data processing carried out until the withdrawal remains unaffected.
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged breach. This right exists without prejudice to any other administrative or judicial remedies.
The supervisory authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction or deletion of this data. You can contact us at any time about this and other questions on personal data.
You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
For security reasons and to protect the transmission of confidential content, such as orders or enquiries you send to us as the website operator, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock symbol in your browser bar. When SSL/TLS encryption is activated, the data you transmit to us is protected against being read by third parties.
We hereby object to the use of contact details published under the legal notice obligation for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
This website uses cookies. Cookies are small text files that your browser stores on your device. Some cookies are technically necessary for the website to work (e.g. to save your cookie choices). Others, such as analytics cookies, are only set with your consent.
Technically necessary cookies are stored on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. All other cookies and similar technologies are only used with your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can change or withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page.
You can also set your browser to block or delete cookies. If you deactivate cookies, some functions of this website may be limited.
We use the consent management platform Cookiebot to obtain and store your consent to cookies and similar technologies. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter "Cookiebot").
When you visit our website, the Cookiebot banner is loaded from Cookiebot's servers. Cookiebot records your consent decision, the date and time, an anonymised IP address, browser information and the page on which you gave consent. A cookie on your device stores your choice so that you are not asked again on every visit. Your choice is stored for 12 months, after which we ask you again.
Cookiebot is used to obtain the consent legally required for the use of certain technologies. The legal basis is Art. 6(1)(c) GDPR.
Data processing agreement: Cookiebot processes this data on our behalf on the basis of a data processing agreement.
If you consent, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").
Google Analytics allows us to analyse how visitors use our website, for example which pages are viewed, how long visitors stay, which device and browser they use, their approximate location and which website they came from. To do this, Google sets cookies (e.g. _ga and _ga_<ID>, stored for up to 2 years) that recognise your browser. According to Google, IP addresses of users in the EU are not logged or stored; they are only used briefly to determine an approximate location and then discarded.
Google Analytics is only activated after you have consented via the cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future via the cookie settings.
Storage period: Data linked to cookies is automatically deleted by Google after 2 months.
Data processing agreement: We have accepted Google's data processing terms, under which Google processes the data on our behalf.
Data transfer to the USA: Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), on the basis of which the European Commission has recognised an adequate level of data protection (Art. 45 GDPR). More information: Google privacy policy.
All fonts and other resources on this website are hosted on our own server. Apart from the Cookiebot consent banner and the services you have consented to (see above), no connection is made to third-party servers (e.g. Google Fonts, YouTube or social networks).
When you visit this website, our host Infomaniak automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:
This data is not merged with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free presentation and the security of our website (e.g. defending against attacks). Infomaniak stores the log files for a short period (currently at least 7 days) and then deletes them automatically.
If you send us an enquiry via the contact form, we process the data you enter (name, email address and message) to handle your enquiry and any follow-up questions. The form runs on our own server at Infomaniak. Your message is then sent to our email inbox. We do not pass this data on without your consent.
If your enquiry relates to the performance of a contract or to pre-contractual measures, processing is based on Art. 6(1)(b) GDPR. In all other cases, it is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR).
The data you enter remains with us until you ask us to delete it or until the purpose for storing it no longer applies (e.g. once your enquiry has been fully handled). Mandatory statutory provisions, in particular retention periods, remain unaffected.
If you contact us by email, we store and process your enquiry, including all personal data it contains (name, email address, content of the enquiry), to handle your request. The legal bases and storage period are the same as for the contact form.
You can book an appointment with us via the scheduling service Cal.com. The provider is Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, United States (hereinafter "Cal.com").
We have embedded the Cal.com booking calendar on our website. The calendar is only loaded after you have given your consent by clicking “Show the calendar” (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Once it is loaded, your browser connects to Cal.com's servers. Cal.com receives your IP address and technical information (e.g. browser, device, page visited) and may store information on your device that is needed for the calendar to work. Your consent applies only to that visit and is not stored: the calendar is not loaded again until you click the button again. If you do not consent, you can still book an appointment via the direct link to our Cal.com page.
When you book an appointment, Cal.com processes the data you enter (name, email address, the selected date and time, and any notes you add) as well as technical data such as your IP address. We use this data to schedule and hold the appointment and to send you the confirmation and calendar invitation.
Processing is based on Art. 6(1)(b) GDPR if the appointment relates to a contract or to pre-contractual measures, and otherwise on our legitimate interest in organising appointments efficiently (Art. 6(1)(f) GDPR). We keep the booking data until the purpose no longer applies (e.g. once the appointment and any follow-up are complete), unless statutory retention periods apply.
Data processing agreement: Cal.com processes booking data on our behalf as a processor. Its data processing agreement (cal.com/dpa) is part of its terms of service.
Data transfer to the USA: Cal.com processes data in the United States. Cal.com, Inc. is certified under the EU-U.S. Data Privacy Framework (DPF), on the basis of which the European Commission has recognised an adequate level of data protection (Art. 45 GDPR). Where the DPF does not apply, Cal.com uses the EU Standard Contractual Clauses (Art. 46 GDPR). More information: Cal.com privacy policy.
You are not legally or contractually obliged to provide personal data. However, without the data requested in the contact form we cannot answer your enquiry. The server log files are technically necessary to display the website.
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
We will update this privacy policy whenever the website or the legal requirements change. The current version always applies.
Last updated: November 2026
Source: e-recht24.de