General InformationThis Privacy Policy explains what happens to your personal data when you visit this website. Personal data is any information that can be used to identify you directly or indirectly. For more detailed information about how your data is processed, please read the sections below.
Who is responsible for data processing?The website operator is responsible for processing personal data collected through this website. Contact details can be found under Controller in this Privacy Policy.
How do we collect your data?Some data is provided voluntarily when you contact us by email. Other information is collected automatically when you visit this website. This mainly includes technical information such as your browser type, operating system, and the time of your visit.
Why do we process your data?We process certain data to ensure the website functions correctly and securely. Where applicable, data may also be used to analyse website usage and improve the user experience.
YOUR RIGHTSUnder the GDPR, you have the right to request information about your personal data, to correct or delete it, to restrict or object to processing in certain circumstances, and to withdraw any consent you have given. You also have the right to lodge a complaint with the relevant supervisory authority.
1. At a Glance2. HostingWe host the content of our website with the following provider:
SQUARESPACEThe provider is Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland (hereinafter “Squarespace”).
Squarespace is a platform for creating and hosting websites. When you visit our website, your data is processed on Squarespace’s servers. This may also involve the transfer of personal data to Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA.
Squarespace uses cookies that are necessary for the technical operation, display, and security of the website (essential cookies).
The use of Squarespace is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the reliable and secure presentation of our website.
Where consent is required (e.g. for the storage of cookies or access to information on your device under the German Telecommunications and Digital Services Data Protection Act (TDDDG)), processing is carried out solely on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be withdrawn at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses.
Further details can be found here:
https://support.squarespace.com/hc/en-us/articles/360000851908-GDPR-and-Squarespace
Squarespace is certified under the EU–U.S. Data Privacy Framework (DPF), an agreement between the European Union and the United States designed to ensure compliance with European data protection standards in cases of data processing in the U.S. Certified companies under the DPF commit to complying with these standards. More information is available at:
https://www.dataprivacyframework.gov/participant/4774
Data Processing AgreementWe have entered into a Data Processing Agreement (DPA) with Squarespace. This is a legally required contract ensuring that personal data of website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
3. General Information and Mandatory DisclosuresData ProtectionWe take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with applicable data protection laws and this Privacy Policy.
When you use this website, various types of personal data may be collected. Personal data is any information that can be used to identify you personally.
This Privacy Policy explains what data we collect and how and why we process it.
Please note that data transmission over the internet (for example, communication by email) may have security vulnerabilities. A complete protection of data from third-party access cannot be guaranteed.
Controller (Responsible Party)The controller responsible for data processing on this website is:
Leonie Christien Markhorst
Conradstr. 12
13509 Berlin
Germany
Email: leonie@thisisapt.com
The controller is the natural or legal person who determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage PeriodUnless a specific storage period is stated in this Privacy Policy, your personal data will be retained only as long as necessary for the purposes for which it was collected.
If you request deletion or withdraw your consent, your data will be deleted unless we are legally required to retain it (for example, due to tax or commercial retention obligations). In such cases, deletion will occur once these obligations no longer apply.
Legal Bases for ProcessingIf you have given consent to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR and, where applicable, Article 9(2)(a) GDPR.
If you have explicitly consented to the transfer of personal data to third countries, processing is additionally based on Article 49(1)(a) GDPR.
Where cookies or similar technologies are stored or accessed on your device, processing is based on Section 25(1) of the German Telecommunications and Digital Services Data Protection Act (TDDDG). Consent can be withdrawn at any time.
If data processing is necessary for the performance of a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR.
If processing is required to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
Data may also be processed on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The applicable legal basis is explained in the relevant sections of this Privacy Policy.
Recipients of Personal DataIf you have given consent to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR and, where applicable, Article 9(2)(a) GDPR.
If you have explicitly consented to the transfer of personal data to third countries, processing is additionally based on Article 49(1)(a) GDPR.
Where cookies or similar technologies are stored or accessed on your device, processing is based on Section 25(1) of the German Telecommunications and Digital Services Data Protection Act (TDDDG). Consent can be withdrawn at any time.
If data processing is necessary for the performance of a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR.
If processing is required to comply with a legal obligation, it is based on Article 6(1)(c) GDPR.
Data may also be processed on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR. The applicable legal basis is explained in the relevant sections of this Privacy Policy.
Withdrawal of ConsentIf data processing is based on your consent, you may withdraw this consent at any time. The lawfulness of processing carried out prior to withdrawal remains unaffected.
Right to Object (Art. 21 GDPR)If your personal data is processed on the basis of Article 6(1)(e) or (f) GDPR, you have the right to object at any time to processing based on your specific situation.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.
If your data is processed for direct marketing purposes, you have the right to object at any time. In this case, your data will no longer be used for such purposes.
Right to Lodge a ComplaintYou have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. This applies in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
Data PortabilityYou have the right to receive personal data we process automatically on the basis of your consent or a contract in a structured, commonly used, and machine-readable format.
You also have the right to request direct transfer of this data to another controller, where technically feasible.
Right of Access, Rectification, and ErasureWithin the scope of applicable law, you have the right to request information about your stored personal data, its origin, recipients, and purpose of processing.
You also have the right to request correction or deletion of this data at any time.
Right to Restriction of ProcessingYou have the right to request restriction of processing of your personal data in certain cases, including:
if you contest the accuracy of the data,
if processing is unlawful,
if the data is no longer needed but required for legal claims,
or if you have objected under Article 21 GDPR while a balancing of interests is pending.
If processing is restricted, data may only be processed with your consent or for specific legal reasons.
4. Data Collection on This WebsiteContact via EmailIf you contact us by email, we will process the personal data you provide (such as your name, email address, and the content of your message) solely for the purpose of handling your enquiry.
This data will not be shared with third parties without your consent.
The processing of this data is based on Article 6(1)(b) GDPR, where your enquiry relates to the performance of a contract or pre-contractual measures.
In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) GDPR), or on your consent (Article 6(1)(a) GDPR) if this has been requested. Consent may be withdrawn at any time.
The data you send to us via email will remain stored until you request its deletion, withdraw your consent, or the purpose for data storage no longer applies (for example, after your enquiry has been fully processed).
Mandatory statutory retention periods remain unaffected.