1. Controller
Sonja Schwarz, Sonja Schwarzarbeit
Schumannstraße 91
40822 Mettmann, Germany
Email: info@sonja-schwarz.com
A data protection officer is not required by law and has not been appointed.
2. Overview
On your first visit our cookie banner asks which services we may load. Without your consent this website sets no cookies and loads no analytics or advertising services (see section 6). With your consent we use Google Analytics to measure reach (see section 9); no advertising services are currently integrated. We only load third-party content for Instagram: the profile picture and follower count on the homepage, and the Instagram feed on the “Brands & Content” page and on the thank-you page after an enquiry (see section 8). Fonts and images are hosted on our own server. We only process personal data as far as necessary to run the website and to answer your enquiries.
3. Hosting and server log files
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. Each time a page is accessed, the server automatically stores data transmitted by your browser: IP address, date and time, page accessed, amount of data transferred, referrer URL, browser and operating system.
We need this data to deliver the website securely and reliably and to detect attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted or anonymised after 7 days at the latest, unless they are needed longer to investigate a security incident. A data processing agreement under Art. 28 GDPR is in place with the host.
4. Encryption
The website is delivered exclusively over an encrypted connection (HTTPS/TLS). Data you send to us cannot be read by third parties.
5. Contact by email and enquiry form
If you write to us by email or via the enquiry form, we process the details you provide: name, email address, phone number, occasion, date, place and your message. Our server sends the details from the form to our mailbox by email. We only use them to answer your enquiry and, where applicable, to prepare an appointment or booking.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and otherwise Art. 6(1)(f) GDPR (interest in answering). We delete the data once the enquiry has been dealt with and no statutory retention obligations apply. If a booking is made, the commercial and tax retention periods of up to 10 years apply.
6. Consent and cookie settings
We only load services that are not strictly necessary to run the website with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). In the cookie banner you can allow them by category: statistics and marketing. We store your choice in your browser (local storage, key “sonja-consent”) together with the time, so that the banner does not appear on every page view. This is technically necessary (Section 25(2) no. 2 TDDDG). You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page.
7. Links to Instagram, WhatsApp and Airbnb
On the website we link to our Instagram profile, to WhatsApp and to our Airbnb listing. These are simple links; no data is transferred to Meta or Airbnb when you visit our pages. Only when you click a link do the privacy policies of the respective provider apply. If you write to us via WhatsApp, WhatsApp Ireland Ltd. processes your message and your phone number; we only use both to answer your enquiry (Art. 6(1)(b) GDPR). If you do not want that, please email us instead.
8. Instagram feed (Behold)
On the homepage we show our Instagram profile picture and the current follower count, and on the “Brands & Content” page and the thank-you page after an enquiry our latest Instagram posts. For this we use the service Behold (behold.so, Brooklyn, New York, USA). When you visit these pages, your browser loads the feed data, a script and the images from servers of Behold and its service providers (Cloudflare, Google Cloud). Your IP address is transmitted, which Behold says it stores temporarily in server logs. To our knowledge the widget sets no cookies. Data is only transferred to Meta when you click a post and open Instagram.
The legal basis is Art. 6(1)(f) GDPR, our interest in showing our work up to date. Behold transfers data to the USA and relies on the EU Commission's standard contractual clauses. More information: behold.so/privacy.
9. Google Analytics
If you consent to the “Statistics” category in the cookie banner, we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates which pages are visited, for how long and how visitors reach the website. To do this, the service sets cookies and processes your shortened IP address, device and browser data and your usage behaviour. We only see aggregated statistics, no profiles of individual people.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via “Cookie settings” at the bottom of the page. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google. The data is deleted after 14 months. More information: policies.google.com/privacy.
10. Fonts
All fonts are hosted locally on our server. There is no connection to Google Fonts or other font providers.
11. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future. An email to info@sonja-schwarz.com is enough.
You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
12. Changes
We adapt this statement when the website or the legal situation changes. The version published here applies.
As of: November 2026