Privacy Policy
Last updated: 10 May 2025
1 · Controller
Radiant Face Moves – Owner Julia Thielert
Am Ortfelde 78, 30916 Isernhagen, Germany
E‑mail:radiantfacemoves@posteo.com
2 · Legal framework
We process your personal data exclusively under
- the EU General Data Protection Regulation (GDPR),
- the German Federal Data Protection Act (BDSG), and
- – where cookies are concerned – the
German TTDSG.
Where the GDPR requires a legal basis we indicate it (Art. 6 (1) GDPR).
3 · Hosting (Looka)
This website is hosted by Looka Inc., #400‑116 Spadina Ave., Toronto, ON M5V 2K6, Canada.
- Primary server locations:Canada and the United States.
- Canada enjoys an adequacy decision by the European Commission (Art. 45 GDPR).
- Transfers to theUSA are protected by Standard Contractual Clauses and – where applicable – the EU‑US Data Privacy Framework (Art. 46 GDPR).
- A data‑processing agreement pursuant to Art. 28 GDPR is in place.
4. Contacting Me / Contact Form
When you contact me via the form provided on this website, I process the personal data you enter — name, e-mail address, subject and message content (plus any voluntary information you supply).
Purpose & Legal Basis
I process these data solely to handle your enquiry and — where your enquiry relates to a (prospective) contract — to initiate or perform that contract in accordance with
Article 6 (1) (b) GDPR. Where no contractual relationship exists, processing is based on my legitimate interest in effective communication with website visitors (Article 6 (1) (f) GDPR).
Storage Period
Your data are stored only as long as necessary to answer your request. The conversation is deemed finished when it is clear from the circumstances that the matter has been fully resolved. Your data will then be erased
no later than six (6) months after the last communication, unless statutory retention duties require longer storage.
Disclosure to Third Parties
Your data will
not be passed on to third parties, unless this is necessary in an individual case to fulfil your request or I am legally obliged to do so.
Encryption
Your form submission is transmitted via
TLS encryption, so the content you send cannot be read by unauthorised parties in transit.
Voluntariness & Right to Withdraw
Providing your data is voluntary. You may withdraw your consent to processing — or object to it — at any time with effect for the future. A brief e-mail to ✉
radiantfacemoves@posteo.com is sufficient. In that event, I may no longer be able to process your enquiry.
5 · Newsletter (Mailchimp)
We send our newsletter via Intuit Mailchimp, The Rocket Science Group LLC, Atlanta GA, USA.
- Sending only after your explicit double‑opt‑in consent (Art. 6 (1)(a) GDPR).
- Mailchimp participates in the EU‑US Data Privacy Framework and additionally relies on SCCs.
- You can withdraw consent at any time via the “Unsubscribe” link or by contacting us.
6 · Data we process
We process – and keep to a minimum – only the data that are strictly necessary to run this website and send our newsletter:
Site visit logs – When you access the site, our servers automatically store your IP address, the date and time of the request and your browser’s user‑agent string. We use these log files solely to deliver the website, maintain stability and detect attacks. Processing rests on our legitimate interest (Art. 6 (1)(f) GDPR). Log files are deleted automatically within 30 days.
Newsletter data – If you subscribe to our newsletter we record your e‑mail address, optionally your first name, the time stamp of your double opt‑in and subsequent e‑mail opens and link clicks. We use these data to send the newsletter and improve its content and deliverability. Processing is based on your consent (Art. 6 (1)(a) GDPR). The data are erased as soon as you unsubscribe.
Essential cookies – We set strictly necessary cookies such as a session ID, a CSRF token and your consent status. These cookies are required for core functionality and security and therefore placed pursuant to § 25 (2) No. 2 TTDSG in conjunction with Art. 6 (1)(f) GDPR. Each cookie is removed automatically after the period indicated in your browser.
We do not use analytics, advertising or social‑media trackers.
7 · Cookies & local storage
Only technically necessary cookies are set. You may delete or block cookies in your browser at any time; some functions may then be limited.
8 · Data recipients
Personal data are shared solely with the processors listed above (Looka for hosting,
Mailchimp for e‑mail).
We do
not sell or otherwise disclose your data to third parties, nor do we engage in
profiling or
automated decision‑making (Art. 22 GDPR).
9 · International transfers
Where data are processed outside the EEA, we ensure an adequate level of protection throughadequacy decisions, SCCs, or the EU–US DPF (Art. 44 ff. GDPR).
10 · Data retention
We retain personal data only as long as necessary for the purposes stated or as required by law. Log files rotate after 30 days; newsletter data are erased immediately upon withdrawal of consent.
11 · Security
The site is delivered viaTLS 1.3. Looka uses firewalls, redundancy and regular updates. Data access is role‑based and restricted to authorised personnel.
12 · Your rights
You have the right toaccess, rectification, erasure, restriction, portability and objection (Art. 15‑21 GDPR) and may lodge a complaint with a supervisory authority, e.g. Landesbeauftragte für den Datenschutz Niedersachsen. To exercise these rights, e‑mail radiantfacemoves@posteo.com.
13 · Minors
Our services arenot directed at children under 16 and we do not knowingly process children’s data.
14 · Changes to this policy
We may update this Privacy Policy to reflect legal or technical changes. The latest version is always available at/privacy‑policy; material changes will be announced on the site or by e‑mail.
TL;DR
- Hosting: Looka (Canada/USA) – Canada adequacy, other transfers under SCC/DPF.
- Newsletter: Mailchimp – double opt‑in; opt‑out at any time.
- No tracking cookies or analytics.
- Your rights: Access, erase, object – just e‑mail us.