Datenschutzerklärung – Biancas Blog

Privacy Policy

1. Data protection at a glance

The protection of your personal data is important to us. Below, we inform you about which personal data is processed when you use this website, for what purposes this is done, and what rights you have.

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, name, email address, IP address, or information about your usage behavior.

2. Responsible body

The entity responsible for data processing on this website is:

Bianca Murthy
Marianne-Plehn-Straße 35
81825 Munich
Germany

Telephone: +49 176 32105732
E-mail: info@biancas-blog.de

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

3. Legal basis for processing

We process personal data in particular on the basis of the following provisions of the General Data Protection Regulation:

Article 6 paragraph 1 letter a GDPR – if you have given us your consent.

Article 6 paragraph 1 letter b GDPR – if the processing is necessary for the performance of a contract or for taking steps prior to entering into a contract.

Article 6 paragraph 1 letter c GDPR – if we are obliged to process data due to a legal obligation.

Article 6 paragraph 1 letter f GDPR – if the processing is necessary to protect our legitimate interests or the interests of a third party and your interests, fundamental rights and freedoms do not override those interests.

Insofar as information is stored on your device or previously stored information is read, the provisions of the Telecommunications Digital Services Data Protection Act (TDDDG) also apply.

Cookies, analytics technologies and similar access to your device that are not technically necessary will only be used after you have given your consent.

4. Hosting

This website is hosted by:

Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4–6
32339 Espelkamp
Germany

When you access our website, the hosting provider processes technically necessary data. This may include, in particular:

IP address of the accessing device
Date and time of access
accessed page or file
amount of data transferred
Referrer URL
Browser type and browser version
Operating system used
HTTP status code

This processing is necessary to technically provide the website and to ensure its stability and security.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable provision of our website.

Insofar as Mittwald processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

5. SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

You can recognize an encrypted connection in particular by the fact that the address of our website begins with "https://".

6. Cookies and similar technologies

Our website uses cookies and similar technologies.

Cookies are small files or pieces of information that can be stored on your device. Information can also be stored in your browser's local storage or session storage.

We distinguish between technically necessary functions and those functions that may only be used after your consent.

Technically necessary storage and access serve in particular the secure and functional operation of the website as well as the storage of your data protection and consent decisions.

Analytics and external media services are generally only activated after you have given your consent.

You can change or withdraw your consent at any time with effect for the future via the cookie settings of our website.

7. Consent management with compliance

We use Complianz – GDPR/CCPA Cookie Consent on this website to manage your consents for cookies, analytics services and external content.

Complianz stores information about whether and which categories or services you have consented to or declined.

For this purpose, technically necessary cookies and information in your browser's local storage or session storage may be used.

The information used by Complianz may include, in particular, details about your consent decision, the current version of the cookie banner and the selected categories.

This processing is necessary so that your privacy decision can be saved and taken into account on subsequent page visits.

The legal basis is Article 6(1)(c) GDPR in conjunction with our legal obligations to provide evidence, as well as Article 6(1)(f) GDPR. Our legitimate interest lies in the legally compliant and user-friendly management of consents.

Insofar as information is stored on or read from your device for this purpose, this is done in accordance with Section 25 Paragraph 2 TDDDG, insofar as this storage is technically necessary.

You can change or withdraw your consent to non-essential services at any time via the cookie settings on our website.

For an up-to-date overview of the cookies and services used on this website, please refer to our cookie policy provided by Complianz.

8. Making contact

When you contact us by email, telephone or via a contact form (if available), we process the data you provide to handle your request.

This may include, in particular:

name
E-mail address
Telephone number
Content of your message
Time of contact
further information you voluntarily provide

If your request is related to an existing or potential contract, the processing is based on Article 6(1)(b) GDPR.

For other inquiries, processing is based on Article 6(1)(f) GDPR. Our legitimate interest lies in the efficient processing and response to your inquiry.

The data will be deleted as soon as it is no longer needed for processing the request and there are no legal retention obligations or other permissible reasons for further storage.

9. Google Analytics

Provided you give your consent, we use Google Analytics 4, a web analytics service provided by Google, on this website.

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics allows us to evaluate information about how visitors use our website.

In particular, the following data may be processed:

pages visited
Time and duration of page views
Interactions on the website
Clicks and navigation paths
Referrer information
Approximate geographical information
technical device and browser information
Screen resolution
Language settings
technical usage data

Google Analytics will only be activated on our website if you have agreed to the statistics category or the use of the service.

The legal basis for processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Insofar as information is stored on or read from your device, this is additionally done on the basis of your consent in accordance with Section 25 Paragraph 1 TDDDG.

Google uses IP addresses of users from the European Union or the European Economic Area for technical processing and to derive approximate location information. Individual IP addresses are not logged or stored by Google Analytics for such users and are discarded after location determination.

We use the information obtained through Google Analytics in particular to evaluate the use of our website, improve content and analyze reach.

The storage period depends on the retention periods defined in our Google Analytics configuration.

The processing of data by Google companies or service providers outside the European Union or the European Economic Area cannot be completely ruled out. Such transfers only take place in compliance with the requirements of Articles 44 et seq. GDPR, in particular on the basis of an adequacy decision or suitable safeguards.

You can withdraw your consent at any time via the cookie settings of our website with effect for the future.

10. Facebook and Instagram

We may use features or embedded content from the social networks Facebook and Instagram on our website.

The provider for users in the European Economic Area is generally:

Meta Platforms Ireland Limited
Merrion Road
Ballsbridge
Dublin D04 X2K5
Ireland

This can include, for example, embedded posts, images, videos, feeds or other social media content.

Such content is generally only loaded on our website after you have agreed to its use.

When loading embedded content, a direct connection may be established between your browser and Meta's servers.

In particular, the following data may be processed:

IP address
Browser and device information
Time of access
page accessed
Interactions with the embedded content
possibly information from your Facebook or Instagram account

If you are logged into Facebook or Instagram at the same time, Meta may be able to associate your visit to our website with your user account.

The legal basis for the processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Insofar as information is stored on or read from your device, this is additionally done on the basis of Section 25 Paragraph 1 TDDDG.

The processing of data outside the European Economic Area cannot be completely ruled out. Data transfers to third countries are carried out in compliance with the requirements of Articles 44 et seq. of the GDPR.

You can withdraw your consent at any time via the cookie settings of our website with effect for the future.

11. Facebook feed

Our website may display a Facebook feed or Facebook content.

For the technical presentation, we use a WordPress plugin to integrate Facebook content.

Local components of the plugin can be loaded from our own server when the page is accessed. However, a connection to Facebook or Meta is only established when necessary for displaying external content and when the corresponding consent has been obtained.

The information in the section „Facebook and Instagram“ applies to the subsequent data processing.

12. Links to Facebook and Instagram

Our website also contains links to our profiles on Facebook and Instagram.

With a simple link, a connection to the respective social network is only established when you actively click on the link.

From this point onwards, the data protection regulations of the respective platform operator also apply.

13. Our social media presence on Facebook and Instagram

We operate publicly accessible profiles or pages on Facebook and Instagram.

When you visit our pages on Facebook or Instagram, Meta processes personal data about you. This can happen even if you do not have your own user account or are not logged in.

Meta may process information about your device, your IP address, your usage behavior and your interactions with content.

We have only limited influence on the type, scope and purposes of the data processing carried out independently by Meta.

When you interact with our profiles, for example by commenting on, liking or sharing posts, following us or sending us a direct message, we also process the personal data that is recognizable in this process or that you transmit to us.

The processing is carried out in particular for communication with you, to answer inquiries and to manage our social media presence.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in modern public relations and communication with our readers and interested parties.

Insofar as the communication is aimed at the conclusion or execution of a contract, the processing is based on Art. 6 para. 1 lit. b GDPR.

If you have given us your consent, the processing is based on Art. 6 para. 1 lit. a GDPR.

Meta also provides operators of professional profiles and pages with statistical information about the use of their services. Insofar as we decide jointly with Meta on certain purposes and means of processing, joint controllership pursuant to Article 26 GDPR may exist.

14. Comments on this website

When you leave comments on our website, we process the information you provide and that is technically necessary.

This may include, in particular:

Comment text
specified name or username
E-mail address
Time of comment
IP address
possibly the website you specified

The data is processed to provide the comment function and to protect against abuse, spam and illegal content.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a comment function and protecting our website and other users.

Comments and related data may be stored as long as the respective content is published or the data is needed to defend against or enforce legal claims.

Statutory retention obligations remain unaffected.

15. Recipients of personal data

Personal data will only be passed on to third parties if there is a legal basis for doing so.

Possible recipients or categories of recipients include, in particular:

Hosting and IT service providers
Analysis and statistics service provider
Providers of external media and social media platforms
technical service providers
Authorities or other public bodies when legally obligated

Insofar as service providers process personal data exclusively on our behalf, contracts for commissioned data processing in accordance with Art. 28 GDPR will be concluded as necessary.

16. Data transfer to third countries

For some services, personal data may be processed outside the European Union or the European Economic Area.

Such a transfer will only take place under the conditions of Articles 44 et seq. GDPR.

Depending on the recipient, the transfer may be based in particular on an adequacy decision of the European Commission or suitable safeguards such as standard contractual clauses.

Despite such protective measures, it cannot be completely ruled out in every case that authorities of a third country may gain access to personal data within the scope of the legal powers applicable there.

17. Storage duration

Unless a specific storage period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective processing purpose.

If the purpose of the processing ceases to exist, the data will be deleted unless there are legal retention obligations, documentation requirements or other permissible reasons for further storage.

18. Revocation of your consent

Insofar as processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR, you may revoke this consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can change or withdraw your consent for cookies, Google Analytics and Facebook and Instagram content, in particular via the cookie settings of this website.

19. Right to object pursuant to Article 21 GDPR

Insofar as we process personal data on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.

We will subsequently no longer process the personal data in question unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, you can object to this processing at any time.

20. Your rights

Within the framework of the legal requirements, you have in particular the following rights:

Right to information pursuant to Article 15 GDPR

You can request information about whether and which personal data we process about you.

Right to rectification pursuant to Article 16 GDPR

You can request the correction of inaccurate and the completion of incomplete personal data.

Right to erasure pursuant to Article 17 GDPR

Under the legal conditions, you can request the deletion of your personal data.

Right to restriction of processing pursuant to Article 18 GDPR

Under the legal conditions, you can request that the processing of your personal data be restricted.

Right to data portability pursuant to Article 20 GDPR

Provided the legal requirements are met, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller.

Right to withdraw consent pursuant to Article 7(3) GDPR

You can revoke your consent at any time with effect for the future.

Right to object pursuant to Article 21 GDPR

Under the legal conditions, you can object to the processing of personal data.

21. Right to lodge a complaint with a data protection supervisory authority

According to Article 77 of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The following authority is particularly responsible for non-public bodies in Bavaria:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

You can also contact another competent data protection supervisory authority.

22. Obligation to provide personal data

There is generally no legal or contractual obligation to provide personal data when simply visiting our website.

Certain functions may require the provision of personal data, for example, if you wish to contact us or post a comment.

Without the required information, these functions may not be used.

23. Automated decision-making

We do not make any decisions based solely on automated processing within the meaning of Article 22 GDPR that have legal effects on you or similarly significantly affect you.