Privacy Policy

Last updated: 20.09.2026

This privacy policy informs you about which personal data is collected, processed, and used when you use this website. Personal data means any information that can be used to identify you personally. The legal basis is the General Data Protection Regulation (GDPR) as well as applicable national data protection laws.

1. Privacy at a Glance

General

The following notes provide a simple overview of what happens to your personal data when you visit this website. Detailed information can be found in the sections below.

Who is responsible for data collection on this website?

The party responsible is the person named under "Controller" (Section 3).

How do we collect your data?

Some data is collected when you provide it to us – for example, when you book an appointment via Acuity Scheduling, sign up for the newsletter, or contact us by email. Other data is collected automatically when you visit the website, in particular technical data such as browser type, operating system used, or the time of access.

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze user behavior, to organize booked appointments, and to send our newsletter.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. You also have the right, under certain circumstances, to request the restriction of processing, as well as the right to lodge a complaint with the competent supervisory authority. Please feel free to contact us at any time with any questions on this subject.

Analytics tools

When you visit this website, your usage behavior may be statistically evaluated using Squarespace Analytics. Details can be found in Section 6.

2. Hosting

Hosting with Squarespace

This website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA ("Squarespace"). The appointment booking tool Acuity Scheduling used on this website is also part of the Squarespace offering (see Section 5).

When you visit this website, Squarespace processes technical access data (e.g., IP address, time of access, browser type) on its servers in order to provide and secure the website.

Data processing agreement

By using Squarespace, Squarespace's own Data Processing Addendum automatically applies as a data processing agreement within the meaning of Art. 28 GDPR; according to Squarespace, no separate signature is required.

Transfer of data to the USA

Since Squarespace is a US company, personal data may be transferred to and processed in the USA. Squarespace, Inc. states that it has certified compliance with the EU-U.S. Data Privacy Framework. Where this does not apply in an individual case, Squarespace relies as a fallback on the European Commission's Standard Contractual Clauses. For more information, see Squarespace's Privacy Policy and the Data Processing Addendum.

The legal basis for using Squarespace is Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable, secure, and technically flawless presentation of our website.

3. General Information and Mandatory Disclosures

Data protection

The protection of your personal data is important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy. Please note that data transmission over the internet (e.g., when communicating by email) may be subject to security vulnerabilities; complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Pauliina Ledebrink

Melanchthonstraße 62

33615 Bielefeld, Germany

Email: hello@pauliinaco.com

Storage period

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for continued storage (e.g., retention periods under tax or commercial law).

Transfer of data to the USA and other third countries

We use tools from providers based in the USA (see Sections 2 and 5). In doing so, personal data may be transferred to and processed in the USA. The USA cannot guarantee a level of data protection comparable to that of the EU; US authorities may, under certain circumstances, access data stored there without affected individuals having access to a judicial remedy. The providers we use base such transfers on the EU-U.S. Data Privacy Framework or, as a fallback, on the EU Standard Contractual Clauses.

Withdrawing your consent to data processing

Many data processing operations are only possible with your explicit consent. You may withdraw consent you have already given at any time, for example by email to hello@pauliinaco.com. The lawfulness of data processing carried out before the withdrawal remains unaffected.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock icon in your browser bar.

Access, deletion, correction, and restriction of processing

Within the scope of applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of its processing, as well as, where applicable, a right to correction, deletion, or restriction of the processing of this data. Please contact us at the address given above at any time regarding this or any other questions on the subject of personal data.

Objection to promotional emails

We hereby object to the use of contact data published within the scope of the legal notice (Impressum) obligation for the purpose of sending unsolicited advertising and information materials. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example via spam email.

4. Data Collection on This Website

Cookies

This website uses cookies set by our hosting provider, Squarespace. Cookies are small text files that are stored on your device and cause no harm. Some cookies are technically necessary for certain website functions to work at all (e.g., the secure delivery of content); other cookies are used to evaluate usage behavior as part of Squarespace Analytics (see Section 6).

Necessary cookies are stored on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in providing our website in a technically flawless and secure manner. Where consent is obtained for individual cookies, storage takes place exclusively on the basis of Art. 6(1)(a) GDPR; such consent can be withdrawn at any time. You can set your browser so that you are informed when cookies are set and allow cookies only in individual cases or reject them generally; disabling cookies may limit the functionality of this website.

Server log files

Our hosting provider automatically collects and stores information in so-called server log files, which your browser automatically transmits. These are, in particular: browser type and version, operating system used, referrer URL, time of the server request, and IP address. This data is not combined with data from other sources. This collection is based on Art. 6(1)(f) GDPR; we have a legitimate interest in the technically error-free presentation and security of our website.

Email inquiries

If you contact us by email (hello@pauliinaco.com), we store and process your inquiry, including all personal data arising from it (e.g., name, email address, content of the inquiry), in order to handle your request. We do not pass this data on without your consent.

Processing is based on Art. 6(1)(b) GDPR, provided your inquiry relates to the initiation or performance of a contract; otherwise it is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on consent (Art. 6(1)(a) GDPR), where such consent has been obtained. Your data remains with us until you object to storage, request that we delete it, or the purpose for storing it no longer applies; statutory retention periods remain unaffected.

5. Booking Appointments with Acuity Scheduling

On this website, you have the option to schedule an appointment with us (e.g., an initial conversation or call) using the tool "Acuity Scheduling." Acuity Scheduling is a product of Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA, and is therefore part of the same provider that also hosts our website (see Section 2).

To book an appointment, you enter the requested data (typically name, email address, optionally a phone number, and voluntary information about your request) and your desired appointment time. This data is used to plan, carry out, and, where applicable, follow up on the appointment, and is stored on Squarespace/Acuity Scheduling's servers.

The legal basis is Art. 6(1)(b) GDPR, insofar as the appointment booking serves to prepare or perform a contract; otherwise, our legitimate interest in offering a straightforward way for prospective and existing clients to schedule appointments (Art. 6(1)(f) GDPR). For the transfer of data to the USA, the information given in Section 2 applies (EU-U.S. Data Privacy Framework, with EU Standard Contractual Clauses as a fallback).

Your data remains stored until you object to storage, request that we delete it, or the purpose for storing it no longer applies. For more information, see Squarespace's Privacy Policy.

6. Analytics Tools

Squarespace Analytics

This website uses Squarespace Analytics, a first-party analytics tool provided by our hosting provider, Squarespace. Squarespace Analytics evaluates, among other things, page views, time spent on the site, visitor origin (e.g., search engine used or referring website), and devices/browsers used. This evaluation is carried out using first-party cookies (see Section 4) set by Squarespace itself; according to Squarespace, the data collected is not sold to third parties or shared with advertising networks.

The use of Squarespace Analytics is based on Art. 6(1)(f) GDPR. We have a legitimate interest in understanding usage behavior on our website and continuously improving our offering. Where consent has been obtained for storing the cookies used for this purpose, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR; such consent can be withdrawn at any time.