Name and address of the controller:
The controller within the meaning of the EU General Data Protection Regulation and other data protection regulations is:
Sabina Witzel
Eschenweg 9, 87466 Oy-Mittelberg, Germany
Tel.: 08366 – 8 11 37 98
Website: www.sabina-witzel.com
We respect your data!
Thank you for your interest in our website. The trust of all visitors and customers, the security of your data, and the protection of your privacy are of paramount importance to us. We therefore treat your personal data in accordance with the applicable data protection regulations and this privacy policy. Personal data is information that can be used to determine your identity, such as your real name, address, or telephone number.
If you view and use our website without registering or otherwise expressly providing us with information, we process the data that is transmitted to us with each request from your browser (see “Log data” below). If you expressly provide us with personal data, this is done exclusively for the purpose of the request or the respective order. Please note that data transmission over the Internet can never be completely protected against access by third parties. Below, we would like to explain in more detail what data we process, when, and for what purpose. We explain how our services work and how the protection of your personal data is guaranteed.
Legal Basis for the processing of personal data
If we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis.
Art. 6 (1) (b) GDPR serves as the legal basis for the processing of personal data that is necessary for the performance of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
If the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR serves as the legal basis for data processing.
Data deletion and storage period
The personal data of the data subject will be deleted as soon as the purpose of storage no longer applies. Storage may also take place if this is provided for by European or national laws or other regulations to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned regulations expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Your rights
You have the right to obtain information free of charge about the data we have stored about you and, if necessary, the right to correct, restrict the processing or delete this data. You also have the right to data portability. Finally, you also have the right to complain to the data protection supervisory authority about our processing of your personal data.
We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements of Art. 21 GDPR. In particular, you can object to the processing of your data for direct marketing purposes.
Provision of information
If you have any questions about the collection, processing, or use of your personal data, for information, for the correction, blocking, or deletion of data, as well as for the revocation of any consent given or to object to a specific use of data, please contact us at the following email address:
Log data
The automatic collection and storage of log data by the Internet service provider (provider) is necessary because the processing of this data is technically necessary in order to display our website to you and to ensure stability and security. The log data includes the following information:
• Date and time of the respective request
• Internet address (URL) that was requested
• URL that the visitor visited immediately before
• Browser and language used
• Operating system used and its interface
• IP address and host name of the visitor
• Access status / http status code
• Amount of data transferred in each case
This data is transmitted to us automatically and cannot be assigned to your person with reasonable effort. The legal basis for the processing of this data is our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f GDPR, as this data processing is necessary for the operation and display of the website. The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended. The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
Cookies
We use cookies to make visiting our website attractive and to enable the use of certain functions. These are small text files that are stored on your device and store certain information for exchange with our system. The legal basis for the processing of this data is Art. 6 (1) sentence 1 lit. f GDPR.
Some of the cookies we use are deleted after the end of the browser session, i.e., after closing the browser (transient cookies). These include, in particular, session cookies. These store a unique identifier (session ID). This session ID allows various requests from your browser to be assigned to a common session. This allows your device to be recognized when you return to our website during a session. Session cookies are also deleted when you log out. Other cookies remain on your device for a specified period of time and enable us to recognize your browser or device on your next visit (persistent cookies).
Please note that certain cookies are set as soon as you enter our website. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases, in particular third-party cookies, or in general. If you do not accept cookies, the functionality of our website may be limited for you.
Configuring cookie settings in your browser
You can prevent cookies from being stored on your computer by adjusting your browser settings accordingly. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers under the following links:
Internet Explorer™:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™:
https://support.apple.com/de-de/guide/safari/ibrw850f6c51/18.0/mac/15.0
Chrome™:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html
Encryption through SSL
For security reasons, our website uses SSL (Secure Sockets Layer) encryption. This protects transmitted data and prevents it from being read by third parties. You can recognize successful encryption by the fact that the protocol designation in the browser status bar changes from “http://” to “https://” and that a closed lock symbol is visible there.
Web hosting
We use the services of WesensStern.net – Eschenweg 9, D-87466 Oy-Mittelberg for web hosting for our websites and have concluded a contract for order processing in accordance with Art. 28 GDPR with WesensStern. Further information can be found in WesensStern's privacy policy at https://wesensstern.net/datenschutzerklaerung
Legal basis: The legal basis for the processing of this data is our legitimate interest in operating and maintaining the operational security of these websites in accordance with Art. 6 (1) (f) GDPR.
Newsletter provider
The information provided in this section explains how the registration, dispatch, evaluation, and content of our email newsletter are organized.
We use the services of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin (hereinafter referred to as “Brevo”) to send our newsletter. If you would like to subscribe to our email newsletter and read it regularly, you must register with a valid email address and thereby consent to the processing of your personal data by us. Please note the declaration of consent on the newsletter registration form.
Before sending the newsletter, you must expressly confirm to us in the context of the so-called double opt-in procedure that you want us to activate the email newsletter service for you. We do this to prevent third-party email addresses from being used for registrations. To this end, you will receive a confirmation and authorization email from us, in which we ask you to click on the link contained in this email and thereby confirm that you wish to receive our newsletter.
In connection with the registration, in addition to the email address, the time of registration, the time of confirmation, the IP address, and the consent text are also stored, and we use the email address exclusively for the delivery of the newsletter, unless you have expressly agreed to another use. Small, “invisible” files (beacons) sent with the newsletter can be used to perform various analyses to improve our offerings. The IP address, browser, time of retrieval and opening of the newsletter, and click behavior on links contained in the newsletter are recorded and statistically evaluated.
You can cancel your subscription by revoking your consent. You can unsubscribe from the newsletter at any time. To do so, please use the link provided in the newsletter. Unfortunately, it is not possible to separately revoke the sending of the newsletter or the evaluation of user behavior.
We have concluded a contract with the provider for order processing in accordance with Art. 28 GDPR. You can view the data protection provisions of the shipping service provider at https://www.brevo.com/de/legal/privacypolicy/.
Legal basis: The newsletter is sent and the opening and click rates are analyzed on the basis of the recipient's consent in accordance with Art. 6 (1) (a), Art. 7 GDPR in conjunction with § 7 (2) No. 3 UWG (German Unfair Competition Act). The analysis of opening and click rates is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR. It is in our interest to create the most suitable offers for our users and to achieve this by analyzing user behavior and continuously optimizing it.
Online service
As part of our offering, we use the services of Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA, represented by Lionheart Squared, 2 Pembroke House, Upper Pembroke Street 28-32, Dublin, DO2 EK84, Republic of Ireland, for online meetings, webinars, and video conferences.
Zoom is a product of Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. Please note that there is a possibility that data may be transferred to the USA and processed by US authorities. Zoom Video is not certified under the EU-US Data Privacy Framework.
We have concluded a data processing agreement with Zoom Video in accordance with Art. 28 GDPR.
Zoom has committed to complying with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 2016/679 (Standard Contractual Clauses - SCC). For more information on the Standard Contractual Clauses, please visit
https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de and
https://blog.zoom.us/de/sicherheit-und-datenschutz-bei-zoom-unsere-antworten-auf-ihre-fragen/.
Further information can be found in Zoom's privacy policy, https://zoom.us/de-de/privacy.html, and at https://zoom.us/de-de/gdpr.
Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR and your express consent in accordance with Art. 49 (1) (a) GDPR.
Video hosting
Our website uses YouTube functions. When you visit our site, a connection to YouTube's servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you give YouTube the ability to associate your user behavior directly with your personal YouTube profile. You can prevent this by logging out of your YouTube account. We have no knowledge of further processing or the duration of storage. The operator of the service is Google LLC, D/B/A YouTube, 901 Cherry Ave., San Bruno, CA 94066, USA. We would like to point out that there is a possibility that data may be transferred to the USA and processed by US authorities.
However, Google LLC is certified under the EU-US Data Privacy Framework. Data transfer to the USA is therefore currently considered sufficiently secure. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.
For more information on how YouTube handles user data, please refer to YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy
Legal basis: The legal basis for this processing of data is your consent in accordance with Art. 6 (1) (a) GDPR.
System and information security
We secure our website and other systems through technical and organizational measures against loss, destruction, access, modification, or distribution of stored data by unauthorized persons. Despite controls, however, complete protection against all dangers is not possible. Due to the connection to the Internet and the resulting technical possibilities, it is not possible to guarantee that content and the flow of information will not be viewed and recorded by third parties.
Objection to unauthorized advertising by email
In accordance with the legal notice requirements under Section 5 of the German Data Protection Act (DDG), we have published general contact details and an email address on our website. We hereby object to the use of this contact information for the unsolicited sending of information material, advertising, or spam emails that we have not explicitly requested.
Status of the privacy policy: January 23, 2026
Data protection declaration: Legal Secrets Club by Lawlikes.
