1. Controller
I am the data controller responsible for the data processing that takes place on my website:
Insa Höppner
Pflügerstraße 78b
12047 Berlin
Phone: +49 152 34107270
insa@raum-und-bewegung.de
2. PERSONAL DATA, PURPOSES AND LEGAL BASIS FOR DATA PROCESSING
2.1 PERSONAL DATA
According to the GDPR, personal data means “any information relating to an identified or identifiable natural person (hereinafter ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”
2.2 GENERAL USE OF THE WEBSITE
I do not collect or store any personal data during your visit to my website, unless you actively provide it to me (for example, if you write me an email). Notwithstanding the above general circumstances, my host’s web server automatically registers access to the website and, in particular, your IP address.
In addition, my host creates so-called log files to maintain system security. These log files contain, among other things, the following information:
- Date of access
- the URL
- content accessed and
- the information transmitted
This information remains anonymous to me. It is therefore not possible for me to draw conclusions about any person. The processing of your IP address during connection establishment is necessary so that you can retrieve the data for my website and visit and use the website. It is based on Article 6(1)(f) GDPR. My legitimate interest lies in the stated purpose.
2.3 WordPress and Hosting
This website is operated with WordPress and hosted by STRATO AG. The host collects the following data in so-called log files, which your browser automatically transmits:
- IP address
- the address of the previously visited website (referrer)
- date and time of the request
- time zone difference to Greenwich Mean Time
- content of the request
- HTTP status code
- amount of data transferred
- website from which the request originates
- information about browser and operating system
This is necessary to display the website and ensure stability and security. The legal basis for this is Article 6(1)(1)(f) GDPR.
2.4 EMAILS IN GENERAL
You can send me emails using the email address provided on the website. I store and process the associated personal data contained in your emails in order to communicate with you and to use the information received for my professional work for you, should it come to that. The legal basis here is generally Article 6(1)(f) GDPR and, insofar as you provide me with health data and thus special categories of personal data within the meaning of Article 9(1) GDPR, Article 9(2)(h) GDPR.
2.5 HOLIDAY EMAILS, ETC.
I also process your email address, as long as I have it (see below), to send you a holiday email, congratulatory emails or similar, and possibly to inform you about events organized by me or colleagues with a relevant subject area. The legal basis for this is Article 6(1)(f) GDPR.
2.6 RECIPIENTS OF PERSONAL DATA
Our email correspondence is technically handled via external email platforms and their providers. I have carefully selected the providers and concluded corresponding contracts with them that safeguard data protection in accordance with the GDPR. The legal basis for this is Article 6(1)(b) GDPR (email processing for contract initiation and execution), otherwise Article 6(1)(f) GDPR.
2.7 STORAGE PERIOD
Log files are stored for a maximum of 7 days. I store your emails and the personal data transmitted or communicated in the course of these for as long as necessary for my communication with you and my work for you, and then store them for a period of 3 years in case you wish to contact me again regarding your original request.
3. DATA SUBJECT RIGHTS AND ADDITIONAL INFORMATION
3.1 DATA SUBJECT RIGHTS
The General Data Protection Regulation guarantees you certain rights that you can assert against me at any time – provided the legal requirements are met.
Article 15 GDPR – Right of access by the data subject: You have the right to obtain confirmation from me as to whether personal data concerning you are being processed and, if so, what these are and the more detailed circumstances of the data processing.
Article 16 GDPR – Right to rectification: You have the right to obtain from me without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 17 GDPR – Right to erasure: You have the right to obtain from me the erasure of personal data concerning you without undue delay, whereby there are always certain legal retention obligations as well as certain retention rights.
Article 18 GDPR – Right to restriction of processing: You have the right to obtain from me restriction of processing.
Article 20 GDPR – Right to data portability: You have the right, in the case of processing based on consent or for the performance of a contract, to receive the personal data concerning you, which you have provided to me, in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from me, or to have the data transmitted directly to the other controller, where technically feasible.
Article 21 GDPR – Right to object: You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on a legitimate interest (Article 6(1)(f) GDPR, see above) on my part or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
If you object, I will no longer process your personal data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Where I process your personal data for direct marketing purposes, you have the right to object at any time to the processing. If you object to processing for direct marketing purposes, I will no longer process your personal data for these purposes.
Article 77 GDPR in conjunction with § 19 BDSG – Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a supervisory authority at any time, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes applicable law.
3.2 OBLIGATION TO PROVIDE DATA
You have no contractual or legal obligation to provide me with personal data. However, without the data you provide, I am unable to offer you my services.
3.3 EXISTENCE OF AUTOMATED DECISION-MAKING (INCLUDING PROFILING)
I do not use any automated decision-making that has legal effects on you or similarly significantly affects you.
Berlin, November 2025