top of page

PRIVACY POLICY (DATENSCHUTZERKLÄRUNG)

PRIVACY POLICY (DATENSCHUTZERKLÄRUNG)

This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter: “data”) within our website and online services.
 

A. Controller

The party responsible for data processing (Controller according to Art. 4 (7) GDPR) is:
 

Lana Gräbner
Business Name: GRAEBNER.AI
Arndorf 6
84434 Kirchberg
Germany
Email: lana.graebner@gmx.net
 

B. Hosting by Wix

Our website is hosted by Wix.com Ltd.,
40 Namal Tel Aviv St., Tel Aviv 6350671, Israel.
Additional processing may occur via Wix.com Inc.,
500 Terry Francois Blvd., San Francisco, CA 94158, USA.
 

Wix acts as a Data Processor on our behalf (Art. 28 GDPR).
Wix automatically processes data when you visit this website, including:

​

  • IP address

  • device information

  • browser type and version

  • operating system

  • time and date of access

  • referrer URL

  • pages viewed

  • ​

This data is necessary to ensure the security, functionality, and stability of the website.
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure and efficient website operation).

​

International data transfer:
Data may be transferred to servers in the EU, USA, and Israel.
Israel is recognized as a country with adequate data protection (Art. 45 GDPR).
Wix uses Standard Contractual Clauses for transfers to the USA (Art. 46 GDPR).

C. Cookies and Consent Manager

Wix uses cookies to enable essential website functions, ensure security, and analyze performance.

​

Types of cookies used:

  • Essential cookies (necessary for security and operation)

  • Functional cookies (e.g., language preferences)

  • Analytics cookies (aggregated statistics)
     

You will see a cookie consent banner where you can accept or reject non-essential cookies.
Cookies are processed based on:

  • Art. 6 (1) lit. f GDPR (essential cookies – legitimate interest)

  • Art. 6 (1) lit. a GDPR (analytics/marketing cookies – consent)

You may withdraw consent at any time.
 

D. Contact Form

When you contact us through the website form, we process:

  • Your name

  • Email address

  • Message content

  • Any attachments

This data is used solely to process your inquiry.

​

Legal basis:
Art. 6 (1) lit. b GDPR (pre-contractual communication).

​

Retention:
We store contact form messages for up to 6 months, unless legal retention periods require longer storage.
 

E. Embedded YouTube Videos

We use embedded videos from YouTube (Google Ireland Limited), Gordon House, Barrow Street, Dublin 4, Ireland.

​

YouTube is loaded in “Privacy-Enhanced Mode (nocookie)”, meaning:

  • No cookies or tracking until you click “Play.”

  • Once you play the video, data may be transferred to Google.
     

Legal basis:
Art. 6 (1) lit. f GDPR (legitimate interest in presenting our portfolio).
 

International transfer:
Google may process data outside the EU. Standard Contractual Clauses apply.
 

F. Social Media and External Links
(Behance, LinkedIn, Instagram, Facebook, YouTube)

Our website contains simple links to external platforms such as Behance, LinkedIn, Instagram, Facebook, and YouTube.
No data is transmitted to these services unless you actively click the link and visit the respective platform. Once redirected, the processing of your data is subject to the privacy policies of the respective platform providers.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in providing online presence).

G. Server Log Files

Wix automatically creates log files that include:

  • IP address

  • browser and device type

  • timestamps

  • page requests

  • error logs

  • referrer information
     

This data is used for:

  • security (e.g., preventing attacks)

  • website performance

  • troubleshooting

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure operation).
 

H. Data Retention

We store personal data only as long as necessary for the stated purposes:

  • Server logs: up to 7 days

  • Contact form data: up to 6 months

  • Cookies: depending on the cookie type

  • YouTube/Google data: according to Google's retention periods

After expiry of the retention periods, the data is deleted or anonymized.

I. Your GDPR Rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR)

  • Right to withdraw consent at any time (Art. 7 (3) GDPR)

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
     

Your supervisory authority in Germany is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany.
 

J. Data Security

We use technical and organizational measures to protect your data (TLS encryption, secure hosting, access control).
Wix provides ISO/PCI-certified security frameworks.
 

K. Changes to This Privacy Policy

We may update this Privacy Policy due to legal changes or adjustments to our services.
The current version is always available on this website.

bottom of page