Privacy Policy
This is an English translation of the German Datenschutzerklärung, provided for convenience. In case of any discrepancy, the German version prevails.
1. Controller
Nina Pfatischer
Am Wiesbach 17
86944 Unterdiessen, Germany
Email: info@ninapfatischer.com
2. Hosting
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the website, Netlify processes technically necessary data (in particular your IP address, date and time of access, and browser and device information) in server log files. This processing is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website). Transfers to the USA are based on the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. More information: Netlify Privacy Policy.
3. Contact form
If you use the contact form, we process the data you provide (name, email address, the practice you are interested in if given, and your message) exclusively to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract, or performance of a contract) or Art. 6(1)(f) GDPR. To protect against abuse (spam), your IP address is additionally processed temporarily when you submit the form (Art. 6(1)(f) GDPR); the IP address is not stored permanently for this purpose.
For the technical delivery of the email we use the service Resend (Plus Five Five, Inc., USA); the transfer is based on the EU Standard Contractual Clauses. Your enquiry is then received and stored in an email mailbox provided by Google (Gmail); the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the USA cannot be ruled out; it is based on the EU-US Data Privacy Framework. Your data is deleted as soon as it is no longer required to handle your enquiry and no statutory retention obligations apply.
4. Fonts
This website uses fonts that are hosted locally on the server. No connection to servers of Google or other third parties is established when the fonts are loaded.
5. Cookies and tracking
This website uses technically necessary local storage and, after your explicit consent, Google Analytics 4 for reach measurement.
For technically necessary functions, only local storage on your device is used: your chosen display setting (light or dark theme) is stored in your browser's local storage (localStorage), and a service worker caches website content to make the site faster and available offline (Progressive Web App). This data remains on your device, contains no personal data, and is not transmitted to us or to third parties. No consent is required for this, as it is strictly necessary storage within the meaning of Section 25(2) of the German TDDDG. You can delete this data at any time via your browser settings.
If you click “Accept” in the cookie notice, Google Analytics 4 is loaded. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Usage data (e.g. pages visited, approximate location information, browser and device information, and truncated or otherwise processed IP addresses) may be processed to statistically evaluate the use of the website. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Processing by Google LLC in the USA cannot be ruled out; Google relies, among other things, on the EU-US Data Privacy Framework.
After your consent, Google Analytics sets cookies on your device: the “_ga” cookie and a cookie with the prefix “_ga_” (on this website “_ga_ZKB4JPM2LK”). Both are used to recognise your browser and are stored for up to two years.
You can withdraw your consent at any time with effect for the future: click “Cookie settings” in the footer of the website and choose “Only necessary”. The cookies set by Google Analytics are then deleted and further collection on this device is disabled.
6. Your rights
You have the following rights vis-à-vis the controller with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
7. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar.
Last updated: July 2026