Privacy
Controller
Marie Lissy Cebulka
Rothenbaumchaussee 101d
20148 Hamburg
Email: kontakt@aurora-balance.de
Data minimisation as a principle
This website is deliberately built so that as little data as possible arises. There are no user accounts, no comment function, no analytics or tracking services, no advertising networks and no embedded third-party content. The only data passed to a third party is what you enter into the enquiry form yourself, and it goes to the form service that delivers it. There is more on this below.
Visiting the website
When you visit this website, the hosting provider automatically records access data in server log files. This includes the IP address, the date and time of access, the page requested, the browser used and the operating system.
This processing is based on Article 6(1)(f) GDPR. The legitimate interest lies in the technically faultless operation and the security of the website. The log files are deleted after seven days at the latest.
The hosting provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, represented in the EU by Cloudflare Germany GmbH, Rosental 7, 80331 Munich. A data processing agreement under Article 28 GDPR is in place with the provider. For transfers to the USA, Cloudflare relies on the European Commission standard contractual clauses.
Getting in touch and the enquiry form
The enquiry form is operated through the service Web3Forms. The details you enter are transmitted to that service in order to deliver your enquiry, and are sent on from there by email to my inbox. The legal basis is Article 6(1)(b) or (f) GDPR. The data is not stored permanently for any other purpose. No form data is stored on this website itself. Provider of the form service: Web3Forms, [PROVIDER AND ADDRESS]. A data processing agreement under Article 28 GDPR is in place with the provider.
If you get in touch by email, phone or messenger, the details you provide are processed in order to handle your enquiry and any follow-up questions. The legal basis is Article 6(1)(b) GDPR for enquiries preparatory to a contract, and otherwise Article 6(1)(f) GDPR.
This data is deleted as soon as it is no longer needed to handle your enquiry, and at the latest once the correspondence has concluded. Statutory retention obligations remain unaffected.
Payment data
Where payment is made by bank transfer, the data arising is processed solely to settle the payment and to meet tax retention obligations. The legal basis is Article 6(1)(b) and (c) GDPR in conjunction with commercial and tax retention periods.
Fonts
The fonts used are served locally from this server. There is no connection to external font providers and no data is transferred to third parties.
Cookies
This website sets no cookies and uses no comparable technologies to recognise visitors.
Your rights
- Access to the data processed about you under Article 15 GDPR
- Rectification of inaccurate data under Article 16 GDPR
- Erasure under Article 17 GDPR
- Restriction of processing under Article 18 GDPR
- Data portability under Article 20 GDPR
- Objection to processing under Article 21 GDPR
- Withdrawal of consent with effect for the future
An informal message to the address given above is enough to exercise them.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the one where you live or where the controller is established. For Hamburg this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit.
Changes
This privacy policy will be adjusted as soon as the legal situation or the processing changes. Last updated: 13 September 2026.
This is a translation for convenience. In case of doubt, the German version of this privacy policy applies.