Privacy policy
Last updated: 22 October 2026
1. Controller
The controller for data processing on this website is:
Antje Schaaf, Kapuzinerstraße 19, 80337 Munich, Germany
Email: antje.ugc@gmail.com
2. Hosting
This website is built and hosted with Framer, provided by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands. Framer runs on Amazon Web Services, including the Amazon CloudFront content delivery network, which serves the site from a location near you.
When you visit the site, the server processes technical data your browser sends automatically. This can include: IP address, date and time of access, the page requested, referrer URL, browser type and operating system. This is needed to deliver the site and keep it secure. Framer keeps these log records under its own rules; I do not store them myself.
Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in a secure, working website. A data processing agreement under Art. 28 GDPR is in place with Framer.
Data may be transferred to the USA. Transfers rely on the EU Commission’s adequacy decision for the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the EU Commission’s Standard Contractual Clauses (Implementing Decision (EU) 2021/914, Art. 46(2)(c) GDPR).
3. Analytics with Framer Analytics
I use Framer’s built-in statistics to see how often pages are visited. Framer Analytics sets no cookies and stores no persistent identifiers on your device. Returning visits are counted through a hash of IP address and browser string, built with a secret that changes and is deleted every day. I only see aggregated numbers, never individual people.
Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in understanding which content is used.
4. Fonts
The fonts on this website are served directly by Framer. No connection is made to Google servers.
5. Videos and images
Videos and images load from Framer’s servers. No content from YouTube, Instagram or other platforms is embedded.
6. Contact by email
If you email me, I process your details (name, email address, message) to answer your request and, where relevant, to prepare a quote.
Legal basis: Art. 6(1)(b) GDPR where your request aims at a contract, otherwise Art. 6(1)(f) GDPR. I delete the data once the request is closed, unless statutory retention duties (for example under commercial and tax law) require longer storage.
I use Google Mail for email (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Google may also process email on servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer relies on the EU Commission’s adequacy decision (Art. 45 GDPR).
7. Contact form
If you write to me through the contact form, I process the details you enter: name, email address, brand or company, type of inquiry, your message and, if given, date and link. Required fields are marked. Without them I can’t answer your inquiry; the other fields are optional.
The purpose is to handle your inquiry and, where relevant, to prepare a collaboration. Legal basis: Art. 6(1)(b) GDPR where your inquiry aims at a contract, otherwise Art. 6(1)(f) GDPR (my legitimate interest in answering inquiries).
The form is provided by Framer B.V. (see section 2) as a processor. Framer forwards your message to my email address. To protect against spam, Framer checks technical characteristics on submission, such as browser and device properties, network signals and interaction patterns, has your browser solve a small computing task in the background, and limits the number of submissions. No Google reCAPTCHA is used and no cookie is set. The legal basis for spam protection is Art. 6(1)(f) GDPR, my legitimate interest in preventing abusive submissions. Section 2 applies to transfers to the USA.
I delete your inquiry no later than six months after it is closed, unless statutory retention duties (for example § 257 HGB, § 147 AO) require longer storage, for instance if it leads to an order.
8. Link to Instagram
This website links to my Instagram profile. It is a plain link, not embedded content. Only when you click it do you leave this site, and the privacy policy of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland applies.
9. Cookies and browser storage
This website sets no cookies. It stores only seven technical markers in your browser for the one-time entrance animation of the home page (sessionStorage). They contain no identifier, are deleted when you close the tab, and are needed to display the page (§ 25(2) no. 2 TDDDG). No consent is needed for them.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). Email antje.ugc@gmail.com.
You can also complain to a data protection supervisory authority (Art. 77 GDPR). The authority responsible for me is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.