Privacy policy

Last updated: 2026-09-10

The following information explains how personal data is processed on this website under Art. 13 GDPR. The German version is authoritative in case of discrepancies.

Controller

Franziska Mende, email: hallo@franziskamende.de(see the legal notice).

No cookies, no tracking on this site

This website does not set any cookies itself and currently does not use any analytics or tracking services that would require consent. That is why there is no cookie banner. If cookieless audience measurement (Cloudflare Web Analytics) is enabled in the future, this section will be updated accordingly.

Hosting and server logs

This website is served as a static site via Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you visit, Cloudflare processes technically necessary connection data (IP address, date and time, requested URL, browser and operating system information) to deliver the site and fend off attacks. The legal basis is our legitimate interest in a secure, fast site (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework; a data processing agreement with EU standard contractual clauses is in place. We do not store log files ourselves.

Booking links (affiliate)

This website is designed to be funded through affiliate booking links. Currently, no affiliate or tracking links are active — booking buttons currently point to internal placeholder pages. Once a partner program is live, this section will be updated with the specific processing involved (network, controller, transfers outside the EU) and the date above will be revised.

Contact by email

If you contact us by email, we process your email address and message content solely to handle your inquiry, based on our legitimate interest in communicating with you (Art. 6(1)(f) GDPR). The data is deleted once it is no longer required and no statutory retention periods apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interests, as well as the right to lodge a complaint with a supervisory authority. No automated decision-making within the meaning of Art. 22 GDPR takes place.