Legal
What data this website processes, on what legal basis, and what rights you have. This is a translation for convenience; in case of doubt, the German version applies.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Tina Hörholdt, Am Friedhof 3, 91074 Herzogenaurach, Germany. Email: office@tina-hoerholdt.de, phone: +49 157 54880888.
There is no legal requirement to appoint a data protection officer. If you have any questions about data protection, please use the contact details above.
Personal data is collected and used only where this is necessary to provide a functioning website and the services offered, or where explicit consent has been given. Data is passed on to third parties only in the cases described below.
Personal data is deleted as soon as the purpose of storage no longer applies. It is stored for longer only where statutory retention obligations exist, in particular under commercial and tax law.
This website is hosted by Webflow, Inc., 398 11th Street, San Francisco, CA 94103, USA. Webflow processes the technically necessary connection data on our behalf. The legal basis is our legitimate interest in operating the website securely and efficiently under Art. 6(1)(f) GDPR.
A data processing agreement under Art. 28 GDPR is in place with Webflow. A transfer of personal data to the USA cannot be ruled out. Webflow is certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses also apply.
Static files such as images, stylesheets, fonts and program libraries are delivered via the content delivery networks of Webflow and Amazon CloudFront. For technical reasons, your IP address is transmitted in the process so that the files can reach your browser. The legal basis is our legitimate interest in secure and fast delivery under Art. 6(1)(f) GDPR.
Each time this website is accessed, information transmitted by your browser is recorded automatically: browser type and version, operating system, referrer URL, date and time of access, amount of data transferred and IP address.
This data is used solely for the technical delivery of the page, system security and error analysis. It is not combined with other data sources, nor is it analysed for marketing purposes. The legal basis is Art. 6(1)(f) GDPR.
This website uses cookies. Technically necessary cookies are set without consent, as the website cannot function properly without them. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
All other services, in particular audience measurement, are loaded only after your explicit consent.
We use Finsweet Cookie Consent to obtain and document your consent. Your decision is stored only locally in your browser, in a cookie named fs-cc, so that you are not asked again on every page. No personal data is transmitted to the provider.
You can withdraw your consent at any time with effect for the future. To do so, use the “Cookie settings” link in the footer of this website.
With your consent, this website uses Google Analytics 4 (measurement ID G-JK45S8P99G), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It records information about how the website is used, such as pages visited, time spent, approximate location, and the device and operating system used. IP anonymisation is enabled; your IP address is shortened before it is stored.
The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. Without your consent, the service is not loaded and no corresponding cookies are set.
Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework; the standard contractual clauses also apply. The data collected is deleted automatically after 14 months. Further information can be found in Google’s privacy policy.
The fonts on this website are served locally. They are stored on the hosting provider’s server and loaded from there when the page is opened. No connection is made to servers of Google or other font providers, so no IP address is transmitted to third parties.
You can get in touch with us via the enquiry form. Required fields are your name, the name of your company and your email address; all other details are voluntary. The data you submit is stored by Webflow and also sent to us by email.
The data is processed solely to handle your enquiry and answer any follow-up questions. The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at concluding a contract, otherwise Art. 6(1)(f) GDPR.
To protect the form from automated entries, this website uses reCAPTCHA from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service assesses whether an entry comes from a person or a program. In the process, your IP address, information about your browser and operating system, time spent and mouse movements are transmitted to Google and analysed there. Processing in the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework.
The legal basis is our legitimate interest in preventing spam and abusive enquiries under Art. 6(1)(f) GDPR. Further details can be found in Google’s privacy policy at policies.google.com/privacy. If you would rather not use reCAPTCHA, you can reach me directly by email at any time.
If you contact us by email or phone, your details are stored in order to handle your request. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR.
Enquiries and the related correspondence are deleted as soon as they are no longer needed to handle the enquiry or any collaboration, but no later than the end of statutory retention periods. Server log files are deleted automatically after a short time. The consent management cookie expires after six months.
Recipients of personal data are the service providers named in this policy, who act for us solely on our instructions. Processing outside the European Union takes place only on the basis of an adequacy decision, the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses. Personal data is never sold.
You have the right to access the data stored about you (Art. 15 GDPR), to have incorrect data rectified (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).
You can withdraw any consent you have given at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3) GDPR). To exercise your rights, an informal message to office@tina-hoerholdt.de is sufficient.
Where the processing of your data is based on a legitimate interest under Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). Processing will then stop unless there are compelling legitimate grounds that override your interests.
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 27, 91522 Ansbach, Germany.
No automated decision-making, including profiling under Art. 22 GDPR, takes place.
This website uses SSL/TLS encryption to protect data in transit. You can recognise an encrypted connection by https:// in your browser’s address bar and by the padlock icon.
This privacy policy is updated whenever the legal situation or the services used on this website change. Last updated: September 2026.