Last updated: December 2025
1. Controller
The responsible entity for data processing on this website is:
Noa Leven
E-mail: noa.leven@tuta.com
(For further details, please refer to the imprint.)
2. Collection and Storage of Personal Data
When you visit this website, certain technical data are automatically collected by your browser.
This is necessary to display the website correctly and to ensure stability and security.
The following data may be collected:
IP address
Date and time of access
Name and URL of the accessed file
Website from which the access originated (referrer URL)
Browser type and operating system
These data are stored by the Namecheap / WordPress server in server log files.
They are not combined with other data sources.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
3. Hosting
This website is hosted by Namecheap in combination with WordPress.
A data processing agreement (DPA) is in place where required.
Namecheap ensures appropriate technical and organisational measures to protect personal data.
4. Contact by E-mail
If you contact me via e-mail, any personal data you provide (your e-mail address and the content of your message) will be processed solely for the purpose of responding to your inquiry.
The data will be deleted once the request has been dealt with.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication).
5. Cookies
This website does not use tracking cookies or cookies for analytics or marketing purposes.
Only technically necessary WordPress cookies may be used to enable the display and functionality of the site.
These cookies do not contain personal information.
6. External Links and Embedded Content
External links (e.g. Instagram)
This website uses simple external links only (for example, to Instagram).
When clicking such a link, you will leave my website.
The respective external service will then process your data according to its own privacy policy.
No data are transmitted to Instagram or any other third party before you click the link.
7. Fonts
This website does not use external Google Fonts or other third-party webfonts.
All fonts are hosted locally on the server, meaning no personal data are transferred to external providers.
8. SSL Encryption
For security reasons, this website uses SSL encryption (visible as “https://” in your browser’s address bar).
This ensures that any data you submit cannot be intercepted by third parties.
9. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to object (Art. 21 GDPR)
Right to data portability (Art. 20 GDPR)
You also have the right to lodge a complaint with a supervisory authority if you believe your data are being processed unlawfully.
10. Changes to This Privacy Policy
This privacy policy may be updated as necessary to reflect legal requirements or functional changes to the website.