Privacy policy

1) Introduction and contact details of the data controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we provide information on how we handle your personal data when you use our website. Personal data refers to any data that can be used to identify you personally.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Vivien Kauf, Rütschistrasse 23, 8037 Zurich, Switzerland, Tel.: +41 77 404 08 23, Email: vivienbullert@gmail.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you use our website purely for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

The page visited

Date and time of access

Amount of data sent in bytes

Source/referrer from which you accessed the page

Browser used

Operating system used

IP address used (where applicable: in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser address bar.

3) Cookies

To make visiting our website an enjoyable experience and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), whilst others remain on your device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

Where individual cookies used by us also process personal data, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of the contract, in accordance with Article 6(1)(a) of the GDPR in the event that consent has been given, or in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective design of the site visit.

You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or you can exclude the acceptance of cookies in specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contacting us

Personal data is collected when you contact us (e.g. via the contact form or by email). The data collected when using a contact form is specified in the relevant contact form. This data is stored and used exclusively for the purpose of responding to your enquiry or for establishing contact and the associated technical administration.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1)(b) of the GDPR. Your data will be deleted once your enquiry has been fully processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that there are no conflicting statutory retention obligations.

5) Comment function

When using the comment function on this website, in addition to your comment, details of the time the comment was posted and the username you have chosen will be stored and published on this website. Furthermore, your IP address is also logged and stored. This storage of the IP address is carried out for security reasons and in the event that the data subject infringes the rights of third parties through a comment posted or publishes unlawful content. We require your email address to contact you should a third party object to your published content as unlawful.

The legal basis for the storage of your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported as unlawful by third parties.

As a user, you can subscribe to follow-up comments. You will receive a confirmation email to ensure that you are the owner of the email address provided (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Article 6(1)(a) of the GDPR. You may unsubscribe from current comment subscriptions at any time with future effect; please refer to the confirmation email for further information on how to unsubscribe.

6) Use of customer data for direct marketing

Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers via email for similar goods or services to those you have already purchased from our range. In accordance with Section 7(3) of the German Unfair Competition Act (UWG), we are not required to obtain your separate consent for this. Data processing in this regard is carried out solely on the basis of our legitimate interest in personalised direct marketing pursuant to Article 6(1)(f) of the General Data Protection Regulation (GDPR). If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect by notifying the controller named at the beginning. You will only incur transmission costs in accordance with standard rates. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7) Web analytics services

7.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last few digits to prevent direct personal identification.

The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services relating to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated in this process is not merged with other data held by Google. The data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You may withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google (Universal) Analytics uses the special ‘demographic characteristics’ feature and can generate statistics that provide insights into the age, gender and interests of website visitors. This is achieved by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR, analyse your usage behaviour across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the ‘Personalised ads’ feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google (Universal) Analytics, the “UserIDs” feature may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Article 6(1)(a) of the GDPR, have set up an account on this website and log in to this account on various devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision by the European Commission.

7.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and collect certain information. This information includes your IP address, although Google truncates the last few digits to prevent direct personal identification.

The information is transmitted to Google’s servers and processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide other services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You may withdraw your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with Google which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses the special ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual.

Further legal information regarding Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses the special ‘demographic characteristics’ feature and can use this to generate statistics that provide insights into the age, gender and interests of website visitors. This is achieved by analysing advertising and information from third-party providers. This enables target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) of the GDPR, analyse your usage behaviour across devices and create database models, including those relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the ‘Personalised ads’ feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension to Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) of the GDPR, have set up an account on this website and log in to this account on various devices, your activities, including conversions, may be analysed across devices.

7.3 Jetpack

This website uses the web analytics service provided by the following provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation fundamentally precludes direct personal identification. No merging takes place with personal data collected about you by other means.

All processing described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

8) Website features

8.1 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when the video is played, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behaviour, compile playback statistics and prevent abusive behaviour.

If you are logged into a user account with the provider whilst visiting the site, your data will be directly linked to your account when you click on a video. If you do not wish your data to be associated with your account, you must log out before clicking the play button.

All the aforementioned processing activities, in particular the setting of cookies to read information from the device used, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw the consent you have given at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website.

8.2 Google Web Fonts

This site uses so-called web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly, and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data when establishing a connection with the font provider will only take place if you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the ‘Cookie Consent Tool’ provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

8.3 Monotype Web Fonts

This site uses so-called web fonts from the following provider to ensure consistent font display: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA

The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent to do so in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect by deactivating this service via the ‘Cookie Consent Tool’ provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For the transfer of data to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

9) Tools and Miscellaneous
9.1 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the page in the form of an interactive user interface, on which consent for specific cookies and/or cookie-based applications can be granted by ticking the relevant boxes. When using the tool, all cookies/services requiring consent are only loaded if the respective user grants the relevant consent by ticking the appropriate boxes. This ensures that such cookies are only set on the user’s device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this context.

If, in individual cases, the storage, assigning or logging cookie settings does result in the processing of personal data (such as the IP address), this is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

A further legal basis for the processing is Article 6(1)(c) of the GDPR. As the data controller, we are subject to the legal obligation to make the use of technically non-essential cookies subject to the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information on the operator and the settings options for the cookie consent tool can be found directly in the relevant user interface on our website.

9.2 Wordfence

For security purposes, this website uses the service of the following provider: Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA

The provider protects the website and the associated IT infrastructure against unauthorised third-party access, cyber attacks, as well as viruses and malware. The provider collects users’ IP addresses and, where applicable, further data regarding your behaviour on our website (in particular, URLs accessed and header information) in order to detect and ward off illegitimate site access and threats. In doing so, the recorded IP address is compared with a list of known attackers. If the recorded IP address is identified as a security risk, the provider may automatically block it from accessing the site. The information collected in this way is transmitted to a server belonging to the provider and stored there.

The data processing described is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interests in protecting the website from harmful cyber attacks and in safeguarding structural and data integrity and security.

If website visitors have login rights, the provider also places cookies (= small text files) on the visitor’s respective device. With the help of these cookies, certain location and device information can be read, enabling an assessment of whether the logged-in access originates from an authorised person. At the same time, cookies can be used to evaluate access rights and grant access via an internal website firewall in accordance with the authorisation level. Finally, the cookies serve to register irregular access attempts by site administrators from new devices or new locations and to notify other administrators accordingly.
These cookies are only set if a user has login rights. The provider does not set cookies for site visitors without login authorisation.
Where personal data is processed via the cookies, such processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in preventing illegitimate access to site administration and in defending against unauthorised administrator access.

We have concluded a data processing agreement with the provider which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

10) Rights of the data subject
10.1 Under applicable data protection law, you have the following data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data; please refer to the legal basis cited for the respective conditions for exercising these rights:

Right of access pursuant to Article 15 of the GDPR;
Right to rectification pursuant to Article 16 of the GDPR;
Right to erasure pursuant to Article 17 of the GDPR;
Right to restriction of processing pursuant to Article 18 of the GDPR;
Right to be informed pursuant to Article 19 of the GDPR;
Right to data portability pursuant to Article 20 of the GDPR;
Right to withdraw consent pursuant to Article 7(3) of the GDPR;
Right to lodge a complaint pursuant to Article 77 of the GDPR.
10.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. WE RESERVE THE RIGHT TO CONTINUE PROCESSING, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION FOR DIRECT MARKETING PURPOSES.

11) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Article 6(1)(b) of the GDPR, such data is routinely deleted upon expiry of the retention periods, provided they are no longer required for the performance of a contract or for entering into a contract and/or we no longer have a legitimate interest in continuing to store them.

When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where personal data is processed for the purposes of direct marketing on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.

Unless otherwise specified in the other information contained in this statement regarding specific processing situations, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Stand 14.03.2026