Privacy Policy

Last updated: 16 July 2026

1. Controller

The controller responsible for data processing on this website is:

Dr. Katharina Grimm
Felix-Dahn-Straße 4
81925 Munich
Germany

Email: hello@katharinagrimm.com

The controller is the natural or legal person who determines the purposes and means of processing personal data.

2. General Information

We take the protection of your personal data seriously. Personal data is any information that can be used to identify you directly or indirectly.

This Privacy Policy explains which personal data is processed when you visit this website, why it is processed, and which rights you have under the General Data Protection Regulation (GDPR).

Please note that data transmission over the internet, including communication by email, may be subject to security risks. Complete protection against access by third parties cannot be guaranteed.

3. Hosting and Website Operation

This website is hosted and operated using Squarespace.

The provider for users outside the United States is:

Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8, D08 N12C
Ireland

When you visit this website, Squarespace may process technical information required to operate, secure and display the website. This may include:

  • Your IP address

  • Browser type and version

  • Operating system

  • Device and network information

  • Referrer URL

  • Pages visited

  • Date and time of access

  • Information about errors and technical events

The processing of this information is based on our legitimate interest in providing a secure, reliable and technically functional website pursuant to Article 6(1)(f) GDPR.

We have entered into a data processing agreement with Squarespace. Where Squarespace processes personal data on our behalf, it is required to process that data in accordance with our instructions and applicable data protection law.

Squarespace may process data in the United States. Data transfers are protected through appropriate safeguards, including the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

4. Squarespace Analytics

This website uses Squarespace Analytics to obtain general information about website traffic and activity.

Squarespace Analytics may process information such as:

  • Browser, network and device information

  • IP address

  • Referring websites

  • Pages visited

  • Clicks and internal links

  • Scrolling activity

  • Search queries

  • Date and time of visits

We use this information to understand how visitors use the website and to improve its content and functionality.

Where analytics data is collected using cookies or similar technologies that are not strictly necessary, the processing takes place only with your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

You can withdraw or change your consent at any time through the cookie settings available on this website.

We do not currently use Google Analytics.

5. Cookies

This website uses cookies and similar technologies. Cookies are small files or pieces of information stored on your device.

Some cookies are technically necessary for the secure and reliable operation of the website. These cookies may be used without your consent where permitted by Section 25(2) TDDDG.

Optional cookies, including analytics cookies, are only activated after you have given your consent through the cookie banner.

You can accept, reject or manage optional cookies through the cookie banner. You can also withdraw or change your consent at any time through the cookie settings available on the website.

You can additionally configure your browser to block or delete cookies. Disabling technically necessary cookies may affect the functionality of the website.

6. Contact Form

If you contact us through the contact form, we process the information you provide. Depending on the information you enter, this may include:

  • Your name

  • Your email address

  • The content of your message

  • Other information voluntarily provided by you

We process this information to respond to your inquiry.

If your inquiry relates to a contract or steps taken before entering into a contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on our legitimate interest in responding to inquiries effectively pursuant to Article 6(1)(f) GDPR.

Contact form submissions are processed through Squarespace and delivered to us using the storage method connected to the form.

Your information will be stored until your inquiry has been fully processed and there is no further reason to retain it. Statutory retention obligations remain unaffected.

7. Contact by Email

If you contact us by email, we process the personal data contained in your message to respond to your inquiry.

If your inquiry relates to a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. Otherwise, processing is based on our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR.

We retain your message until the inquiry has been resolved unless statutory retention obligations or other legitimate reasons require longer storage.

8. SSL and TLS Encryption

This website uses SSL or TLS encryption to protect data transmitted between your browser and the website.

You can usually recognize an encrypted connection by the lock symbol in your browser and by the use of “https” in the website address.

9. Recipients of Personal Data

We only share personal data with external parties where:

  • This is necessary to provide the website or respond to your inquiry

  • It is necessary for the performance of a contract

  • We are legally required to do so

  • You have given your consent

  • Another legal basis permits the disclosure

Where external service providers process personal data on our behalf, we use appropriate data processing agreements where required by law.

10. Storage Period

Unless a more specific storage period is stated in this Privacy Policy, personal data is retained only for as long as necessary for the purpose for which it was collected.

Data will be deleted if you submit a justified request for deletion or withdraw your consent, unless statutory retention obligations or another legal basis require or permit further storage.

11. Your Rights

Under the GDPR, you may have the following rights:

  • The right to access your personal data

  • The right to correct inaccurate or incomplete data

  • The right to request the deletion of your data

  • The right to restrict processing

  • The right to data portability

  • The right to withdraw consent at any time

  • The right to object to processing based on legitimate interests

  • The right to lodge a complaint with a supervisory authority

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact:

hello@katharinagrimm.com

12. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing based on reasons relating to your particular situation.

We will then stop processing your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority.

The supervisory authority responsible for private companies and self-employed professionals in Bavaria is:

Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht – BayLDA
Ansbach, Germany

14. Changes to This Privacy Policy

We may update this Privacy Policy if the website, the services used on it or the applicable legal requirements change.

The current version is always available on this website.