privacy policy

Controller

The controller responsible for data processing on this website is:

Kiana Ehmann

Nordbahnstr. 14

13359 Berlin, Germany

General

Protecting your personal data matters to me. I process your data solely on the basis of applicable law (GDPR, German Telemedia Act). This privacy policy explains what data is collected when you visit this website, what it's used for, and what rights you have.

Hosting and server log files

This website is hosted with Netlify, Inc.; the domain is registered with IONOS SE. When you visit this website, the hosting provider automatically collects technical information transmitted by your browser in so-called server log files. This typically includes:

IP address
date and time of the request
the page or file accessed and the amount of data transferred
browser and operating system used
referrer URL (the page visited previously)

This data is collected automatically when the website is accessed and is used to provide the website reliably and to ensure its security (e.g. to detect misuse). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a stable and secure operation of the website).

Because Netlify, Inc. is based in the USA, this may involve transferring personal data to a country outside the EU/EEA. Netlify states that it applies appropriate safeguards (including EU standard contractual clauses) to ensure an adequate level of data protection. More information is available in Netlify's privacy policy:netlify.com/privacy.

Contact form

If you use the contact form on this website, the data you enter (name, email address, message) is processed in order to handle and respond to your inquiry. Providing this data is voluntary; without it, I cannot process your request.

The legal basis is your consent (Art. 6(1)(a) GDPR), given by submitting the form, and where applicable Art. 6(1)(b) GDPR if your inquiry relates to the preparation of a contract. You can withdraw your consent at any time with future effect, e.g. by emailing kontakt@kianaehmann.de.

Data submitted via the form is stored only for as long as necessary to process your request, or until you object to further storage.

Contacting me by email or phone

If you contact me by email or phone, any personal data you share (e.g. name, contact details, message content) is stored by me for the purpose of handling your request. The legal basis is Art. 6(1)(b) or (f) GDPR.

Embedded YouTube videos

On individual project pages I embed videos from YouTube. These videos are embedded in the privacy-enhanced mode (domain youtube-nocookie.com). According to YouTube, this mode does not set cookies for advertising purposes as long as you don't start the video. Visiting such a page still automatically establishes a connection to YouTube's servers, transmitting your IP address and other technical data (e.g. browser type, time of access). Once you start a video, further data may be processed and cookies set, including to track your usage behavior.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA. This may involve transferring personal data to the USA; Google states that it applies its own safeguards (including EU standard contractual clauses). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in presenting my work in an engaging way). More information is available in Google's privacy policy:policies.google.com/privacy.

Embedded Instagram posts (reels)

On individual project pages I also embed individual posts (reels) from my Instagram profile directly. For this I use Instagram's official embed script (embed.js), which is automatically loaded from servers of Meta Platforms Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; possibly also Meta Platforms, Inc., USA) when such a page is visited.

Unlike the YouTube videos described above, a connection to Meta is established as soon as the page loads — regardless of whether you interact with the post. Meta may collect your IP address, set cookies, and potentially associate the page visit with your Meta account if you are logged into Instagram or Facebook. As the website operator, I have no influence over the exact scope and purpose of the data collected by Meta and no complete knowledge of it. Meta's privacy policy is available at:privacycenter.instagram.com/policy.

An embed of this kind, which is not technically necessary, generally requires your prior consent under Art. 6(1) GDPR in conjunction with § 25 German TTDSG. This embed is currently implemented without an upstream consent tool. If you do not agree with this data processing, please do not visit the affected project pages, or use a browser or add-on that blocks the loading of external scripts such as embed.js.

Other cookies and tracking

Aside from the embedded content described above (YouTube, Instagram), this website does not use any cookies of its own and no analytics/tracking tools (e.g. Google Analytics). No fonts are loaded from external servers (e.g. Google Fonts) either — the fonts used are hosted locally as part of the website. Should this change in the future, this privacy policy will be updated accordingly.

External links

The footer of this website contains a link to my Instagram profile. Clicking it takes you to a different website; Meta Platforms Ireland Ltd. is responsible for data processing there. Instagram's privacy policy applies:privacycenter.instagram.com/policy.

SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the address bar of your browser changing from "http://" to "https://".

Your rights

Under applicable law you have the right to free information about your stored personal data, its origin and recipients, and the purpose of its processing at any time (Art. 15 GDPR), as well as, where applicable, a right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), objection to processing (Art. 21 GDPR), and data portability (Art. 20 GDPR). If you have questions, feel free to contact me at the address given above.

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstr. 219, 10969 Berlin, Germany,datenschutz-berlin.de.

Currency of this privacy policy

This privacy policy is currently valid (last updated: August 2026). Further development of the website, or changes to applicable law or regulatory requirements, may make it necessary to update this privacy policy.