Privacy Policy

1. Controller

Lisa Fellinger
Zum Breijpott 15
47533 Kleve
Germany
Email: lisafellinger.consulting [at] gmail [dot] com

2. Overview

This Privacy Policy explains how personal data is processed when you visit this website. Personal data is any data that can be used to identify you personally. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

3. Hosting

This website is hosted by a professional hosting provider. When you visit the website, server log files (such as IP address, date and time of access, browser type and operating system) may be processed to ensure the security, stability, and technical operation of the website.

The processing of this data is based on Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).

4. Cookies & Consent Management

This website uses a consent management platform (Usercentrics) to obtain and manage user consent for the use of cookies and similar technologies. Only technically necessary cookies are set without consent.

You can give, refuse, or withdraw your consent at any time via the consent banner. The legal basis for processing data based on consent is Art. 6(1)(a) GDPR.

5. Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited. Google Analytics is used to analyze how visitors use the website and to improve its content and usability.

Google Analytics processes usage data such as page views, interactions, and technical information (e.g. browser, operating system). IP addresses are processed in a truncated form where technically possible.

The use of Google Analytics takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time via the consent settings.

6. Google BigQuery

As part of our analytics setup, data collected via Google Analytics may be exported to Google BigQuery for advanced analysis. This data is used exclusively for statistical evaluation and improvement of the website.

The data stored in BigQuery is not merged with other data sources and is processed only in aggregated or pseudonymized form. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR.

7. Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager does not process personal data itself but is used to manage and deploy other tools (such as analytics and UX tools) in accordance with your consent preferences.

8. Microsoft Clarity

If you have given your consent, this website uses Microsoft Clarity, a UX analytics tool provided by Microsoft Corporation. Microsoft Clarity helps us understand how users interact with the website through aggregated usage data, heatmaps, and session recordings.

Microsoft Clarity processes interaction data such as mouse movements, scrolling, and page interactions. Personal data is masked or pseudonymized where possible. The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR.

9. YouTube Content

This website may embed videos from YouTube using the privacy-enhanced mode (youtube-nocookie.com). When you view a video, YouTube may process personal data. Such processing only takes place after you have given your consent.

10. PostHog

With your consent, we use PostHog to analyse website usage, improve usability, and investigate technical problems. The provider is PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, United States.

Website analytics, heatmaps, and error tracking

PostHog processes page views, website interactions, technical browser and device information, pseudonymous browser and session identifiers, and browser error details. Cookies and similar browser storage may be used to associate interactions with a browser.

We record events when visitors successfully submit the contact form or load additional publications. These custom events include the selected service category or the number of publications loaded. They do not include the name, email address, or message entered in the contact form.

We also use heatmaps to visualise patterns in clicks, mouse or touch positions, and scrolling. This helps us understand which parts of the website visitors interact with. Browser error tracking helps us identify and investigate technical failures.

Session replay

We use session replay to reconstruct interactions within this website, such as clicks, scrolling, and navigation, to investigate usability issues.

Form input values are masked in recordings. Ordinary page text and images are not masked. Browser console messages and network request metadata, including timing information, may also be captured for troubleshooting. Capture of request and response headers and bodies, as well as canvas content, is disabled.

Pseudonymous identifiers may associate recordings and browser errors with the corresponding browser or session. These identifiers do not directly identify visitors by name.

Consent and withdrawal

PostHog browser analytics, heatmaps, browser error tracking, and session recording are activated only after you grant Statistics consent through Cookiebot. The legal basis is Art. 6(1)(a) GDPR and, where applicable, § 25(1) TDDDG.

You can refuse or withdraw consent at any time through the cookie settings. Withdrawal stops further consent-based collection without affecting the lawfulness of processing carried out before withdrawal.

Technical contact-form logs

Separately, we send limited server-side contact-form logs to PostHog to monitor reliability and troubleshoot failures. These contain fixed status messages indicating email-request acceptance, email-sending errors, or rate limiting, together with the endpoint and technical log metadata.

The added log messages do not contain contact-form names, email addresses, or enquiry text. This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in maintaining a reliable contact form.

Hosting and retention

We use PostHog Cloud EU, with hosting in Frankfurt, Germany.

Session recordings are retained for 30 days. Analytics events and associated metadata are retained under PostHog's Free-plan retention period of one year. Separate server-side contact-form logs are retained for 14 days.

Recipients and international transfers

PostHog processes website data on our behalf as a processor. Its data processing terms provide for international-transfer safeguards, including the EU-U.S. Data Privacy Framework and, where applicable, EU Standard Contractual Clauses. EU hosting does not by itself exclude all processing or access outside the European Economic Area.

Further information is available in PostHog's privacy policy.

11. Contact

If you contact us by email or via a contact form, your data will be processed to handle your request. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).

12. Your Rights

You have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing of your personal data. You also have the right to lodge a complaint with a supervisory authority.