Privacy policy

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.

1. Data controller
The person responsible for processing data on this website is:

THE BRAND GARDENER – independent consulting
Wanja Schultz-Brummer
Felicitas-Kukuck-Straße 11
22765 Hamburg
Email: info@thebrandgardener.de
Phone: 040 27809993

2. Collection and storage of personal data, and the nature and purposes of its use

a) When visiting the website
When you access this website, your browser automatically sends information to the website’s server. This information is temporarily stored in a log file. The following information may be recorded:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Browser used and, where applicable, your device’s operating system
• Website from which access originates (referrer URL)

The data is processed for the following purposes:
• Ensuring a smooth connection
• Ensuring convenient use of this website
• Evaluating system security and stability

Legal basis: Article 6(1)(f) GDPR.

b) When contacting me by email or phone
If you contact me by email or phone, I store and process the information you provide (name, email address, phone number and the content of your enquiry) in order to respond to your enquiry.

Legal basis: Article 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract).

3. Disclosure of data
As a general rule, your personal data is not disclosed to third parties. Exceptions apply only where:

• You have given your explicit consent,
• Processing is necessary for the performance of a contract,
• There is a legal obligation to disclose the data, or
• Disclosure is necessary to assert legal claims.

4. Cookies
This website generally does not use cookies unless additional services or plugins (such as analytics tools) are used. If cookies are used, a notice with a consent option is displayed when the website is first accessed.

5. Rights of data subjects
You have the right:

• Under Article 15 GDPR, to request information about your personal data processed by me,
• Under Article 16 GDPR, to request the correction of inaccurate data,
• Under Article 17 GDPR, to request the deletion of your data stored by me,
• Under Article 18 GDPR, to request restriction of processing,
• Under Article 20 GDPR, to receive your data in a structured, commonly used and machine-readable format,
• Under Article 21 GDPR, to object to processing,
• Under Article 77 GDPR, to lodge a complaint with a supervisory authority.

6. Data security
I use the widely adopted SSL/TLS protocol for website visits. This encrypts data and protects it against access by third parties.

7. Validity and amendments to this privacy policy
This privacy policy is currently valid and was last updated in October 2025.
I reserve the right to amend it as necessary.