Privacy Policy
Last updated: 11 November 2026
1. Controller and scope
The controller for personal data processed in connection with this website and your enquiries is Birgit Braun, Kocherstraße 36, 74613 Öhringen, Germany. Email: bb@birgit-braun.eu.
This notice covers website delivery, optional video playback, external booking links and email enquiries. Processing in connection with individual advisory engagements falls outside this website notice and may require separate information.
2. Hosting and server logs
In production, this static website is hosted exclusively by ALL-INKL (ALL-INKL.COM – Neue Medien Münnich). Its pages, images, fonts and CSS and JavaScript files are delivered by that host’s web server. There is no application server, database, user account or contact form.
Visiting the website involves processing technically necessary connection data, in particular your IP address, to deliver the content. Whether and to what extent the host stores server logs (for example requested address, time, status code, browser information), and for how long, remains to be confirmed from ALL-INKL’s configuration and documentation. Until then, no log fields or retention periods are stated here.
Lovable is used solely for development and preview. In production, the static files are delivered directly by ALL-INKL; the production website requires no connection to Lovable. A separate visit to a Lovable preview address is subject to the privacy information provided there.
The proposed legal basis for secure, stable website delivery is Article 6(1)(f) GDPR: the legitimate interests of accessibility, functionality, fault diagnosis and preventing misuse.
3. Processors, recipients and international transfers
The host processes the data required for delivery on our behalf. The data processing agreement with ALL-INKL dated 28 April 2021 is available. Its current validity and applicability to the specific hosting package in use remain to be confirmed.
No transfer of visitor data from the production website to countries outside the European Economic Area through hosting is asserted or confirmed here; the server location is to be verified with the host. Optional videos, external booking and email are covered in the sections below.
Lovable processes project content as part of the development and preview platform. Whether a data processing agreement applies to Lovable and which transfer safeguards exist has not been confirmed. After the switch, production visitor requests are not delivered through Lovable.
4. Cookies and access to your device
Before a video is activated, the static website itself sets no cookies and uses no local storage. Page references and scroll positions are stored in the browser’s session storage to restore the scroll position during navigation. This storage is scoped to the browser session or tab; browser session restoration may restore the stored values. Tool inputs and video consent are not stored there.
Whether the specific ALL-INKL hosting environment uses additional cookies or other device access has not yet been confirmed. These statements concern the static website files, not additional host features.
Storing information on, or accessing information from, a device must be assessed separately under section 25 of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG). Whether an exception under section 25(2) applies to the technical session storage entry requires legal review.
5. Visitor analytics is disabled
The static website files contain no visitor analytics or tracking script.
Whether the host generates its own access statistics from server logs must be checked with ALL-INKL. If statistics are introduced later, this notice would need to be updated.
6. YouTube and Vimeo – optional video playback
The conversations pages offer YouTube or Vimeo videos behind a two-click consent process. Preview images are hosted locally. No player is loaded and no connection to these video providers is made before your active consent.
After you confirm, the selected player is embedded. YouTube uses www.youtube-nocookie.com and Vimeo uses the Do-Not-Track setting dnt=1. Neither setting excludes personal data processing. Once activated, providers may process your IP address, browser and device information, originating website and playback information, and load additional resources. Association with an existing provider account may be possible. The strict-origin-when-cross-origin setting sends only the originating site address, not the full page path.
The proposed legal basis for voluntarily loading a player is consent under Article 6(1)(a) GDPR and, where applicable, section 25(1) TDDDG. You can use the rest of the website without consenting. A normal external video link takes you to the provider’s website only when clicked.
You can withdraw consent at the individual video. This removes the player and prevents further connections triggered by that embedded player. It does not retroactively delete data already transmitted or cookies set by the provider. Withdrawal does not affect the lawfulness of processing before withdrawal. This website holds your selection only in temporary page state, not in cookies or local/session storage; consent is requested again after reloading.
Recipients are the relevant YouTube/Google or Vimeo provider and potentially their service providers. Processing outside the EEA, particularly in the United States, is possible. The providers’ notices describe their processing, retention and safeguards; nocookie and Do-Not-Track are not international-transfer safeguards.
7. External appointment booking with TidyCal
The website uses external TidyCal booking links only, with no calendar embed or TidyCal scripts. Simply visiting this website does not connect you to TidyCal. Clicking a booking link opens the external booking page.
Technical processing on that page is subject to the provider’s terms. When voluntarily booking, the details you enter, such as your name, email address and appointment information, may be processed to organise the conversation. The actual booking configuration, required fields, recipients and connected calendars require separate confirmation; this website does not store booking inputs.
For Birgit Braun’s handling of a booking, Article 6(1)(b) GDPR may apply to a contract-related enquiry; otherwise Article 6(1)(f) may apply to organising and responding to a voluntary conversation request. The provider’s legal bases for independent processing must be considered separately.
8. Voluntary contact by email
The website contains email links, not a contact form. A link opens your email application; the website itself sends no message and stores no form entries. If you send a message to bb@birgit-braun.eu, Birgit Braun processes your sender and contact details, message and any attachments to handle and answer your enquiry.
The proposed legal basis is Article 6(1)(b) GDPR for enquiries preceding or concerning a contract, or Article 6(1)(f) for other enquiries, reflecting the legitimate interest in appropriate communication. Legally required retention may be based on Article 6(1)(c) GDPR. Please provide only information needed for your enquiry.
Email service providers are involved in sending and receiving messages. The actual mailbox provider, contractual status and processing locations are not yet confirmed; no particular provider is assumed. Messages are retained for handling the enquiry and, where applicable, to meet contractual or legal retention duties or protect necessary legal claims. The actual deletion practice and applicable periods have not yet been confirmed.
9. Local tools, fonts and images
The Orientation tool and Governance platform process your inputs only in your browser. They are not transmitted to Birgit Braun, saved in a database or placed in local or session storage. Inputs remain in temporary page state and are lost when you reload or leave. This applies to tool inputs, not the hosting requests needed to deliver the page.
Fonts, images and video previews are served from the website origin. No Google Fonts or external image requests are intended during an ordinary page visit. The website has no visitor accounts, newsletter subscription, payment feature or server-side AI calls. Reading previously created AI-assisted text or illustrations does not call an AI service. The website is not intended to perform profiling or automated decisions with legal or similarly significant effects.
10. Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw consent at any time for the future under Article 7(3); this does not affect processing that was lawful before withdrawal.
Right to object: Where processing is based on Article 6(1)(e) or (f), Article 21(1) gives you the right to object on grounds relating to your particular situation. For direct marketing you may object at any time without stating particular grounds; this website is not currently intended to conduct such marketing.
For requests about Birgit Braun’s processing, contact bb@birgit-braun.eu. Where an external provider acts as an independent controller, you can also exercise your rights directly with that provider.
Optional videos and contacting Birgit Braun are voluntary. Booking or contact requires the information necessary to handle your request; without it the request may not be actionable. The exact required TidyCal fields remain to be confirmed.
11. Complaints to a supervisory authority
Under Article 77 GDPR, you may complain to a data protection supervisory authority, particularly in the Member State of your habitual residence, workplace or the alleged infringement. For Birgit Braun in Baden-Württemberg, the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg is a relevant contact. Current contact details are available on its official website.
12. Scope and updates
This privacy policy describes the static website with ALL-INKL as its production host. Separate development and preview addresses at Lovable are not part of the production website. The privacy information will be updated when features, hosting or providers change.