Privacy Policy

Last updated: 2 July 2026

1. Privacy at a glance

This website is designed to be privacy-friendly and data-minimal. It does not use cookies, visitor profiling, analytics tools or advertising services.

When you visit this website, only the data technically required to deliver the website, maintain server security and identify technical issues is processed. If you contact me by email, I process the information you provide in order to reply to your message.

2. Controller

The controller responsible for data processing on this website is:

Eva Marie Schreck
Tumringer Str. 209
79539 Lörrach
Germany

Email: info@evaschreck.de
Phone: +49 160 910 22 555

I publicly use the name Evi Schreck.

3. Hosting

This website is hosted by:

lima-city / TrafficPlex GmbH
Konsul-Smidt-Str. 90
28217 Bremen
Germany

When this website is accessed, the hosting provider processes technically necessary data so that the website can be delivered and the servers can be operated securely. This may include in particular:

IP address of the accessing device,
date and time of access,
requested page or file,
amount of data transferred,
browser type and browser version,
operating system used,
referrer URL, if transmitted by the browser,
web server status messages.

This data is processed in server log files. The purpose is the technical delivery of the website, stability, security, error analysis and protection against misuse or attacks.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, stable and technically error-free operation of this website.

According to the hosting provider, IP addresses are anonymised where possible and stored for an appropriately short period, usually seven days or less. I do not combine this data with other data sources.

Where required, a data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. Cookies

This website does not use cookies.

No information is stored on or read from your device unless it is technically required for accessing the website itself. Therefore, based on the current setup, this website does not require a cookie banner.

5. No analytics, tracking or advertising services

This website does not use analytics or tracking services. In particular, I do not use Google Analytics, Matomo, Facebook Pixel or similar services.

No visitor profiles are created, no reach measurement is performed and no personal data is processed for advertising purposes.

6. Fonts

The fonts used on this website are hosted locally. When loading the fonts, no connection is made to Google Fonts, Adobe Fonts or similar external font providers.

7. Images and media files

Images and media files on this website are delivered directly from the webspace hosted by lima-city. No external content delivery network (CDN) or external image service is used.

8. Contact by email

If you contact me by email, I process the personal data you provide in your message. This may include in particular:

your email address,
your name, if you provide it,
the content of your message,
technical metadata of the email communication.

I use this data only to handle and answer your request and, where necessary, to clarify follow-up questions.

The legal basis is Art. 6(1)(b) GDPR if your message relates to contractual or pre-contractual communication. In all other cases, the legal basis is Art. 6(1)(f) GDPR. My legitimate interest is being able to respond to messages and communicate with you.

Emails are deleted once the request has been fully handled, unless statutory retention obligations or legitimate interests prevent deletion.

Please note that email communication over the internet can generally involve security risks. If you would like to send particularly confidential information, please contact me first so that we can agree on a suitable communication channel.

This website may contain links to my profiles on Facebook and Instagram.

These are simple links. When you merely visit my website, no data is transmitted to Facebook, Instagram or Meta Platforms. Only when you click such a link do you leave my website and move to the respective platform.

The respective provider is responsible for data processing on those platforms:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

If you visit my social media profiles, personal data may be processed by the respective platform. This may apply in particular if you are logged in to that platform. Further information can be found in the privacy notices of the respective platform.

10. External content

Currently, this website does not load external content such as embedded videos, maps, social media feeds or external fonts.

If external content is added in the future, for example YouTube videos, this Privacy Policy will be updated accordingly. Where appropriate, I will prefer privacy-friendly solutions, such as a two-click solution or a simple link instead of automatic embedding.

11. Retention period

Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.

Server log files are stored by the hosting provider only for a limited period. Data from email enquiries is deleted once the enquiry has been completed, unless statutory retention obligations or legitimate interests prevent deletion.

12. Disclosure of data

Personal data is disclosed to third parties only where this is necessary for providing the website, handling your enquiry, complying with legal obligations or on the basis of another valid legal ground.

No data is disclosed for advertising purposes.

13. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Your rights

Under the GDPR, you have in particular the following rights:

right of access to the personal data processed about you (Art. 15 GDPR),
right to rectification of inaccurate data (Art. 16 GDPR),
right to erasure of your data (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to data portability (Art. 20 GDPR),
right to object to certain types of processing (Art. 21 GDPR),
right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

If you wish to exercise any of these rights, you may contact me at any time.

15. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

For Baden-Württemberg, the competent authority is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

You may also contact another competent data protection supervisory authority.

16. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the browser address begins with https:// and a lock symbol is displayed.

Encryption helps protect data transmitted between your browser and the web server from being easily read by third parties.

17. Updates to this Privacy Policy

This Privacy Policy applies to the current version of this website.

If the website, the services used or the legal requirements change, this Privacy Policy will be updated accordingly.