Privacy Policy
Last updated: 04.09.2026
## 1. Controller
The controller responsible for data processing on this website is:
Pablo Brandt
Kreuzbergstraße 74
10965 Berlin
Germany
Email: pablobrandt2000@gmail.com
Website: www.pablobrandt.com
## 2. General Information
I take the protection of your personal data seriously. This policy explains what data is collected when you visit this website, what it is used for, and what rights you have.
Please note that data transmitted over the internet can have security gaps. Complete protection against access by third parties is not possible.
## 3. Hosting
This website is hosted by Squarespace. The provider is
Squarespace Ireland Limited
Squarespace House, Ship Street Great
Dublin 8, D08 N12C, Ireland
Handelsregisternummer: 527641, which processes data on my behalf under a data processing agreement in accordance with Art. 28 GDPR.
Squarespace processes data that you enter on this website, including your IP address, in order to deliver the website to you.
Where data is transferred outside the EU, this takes place on the basis of the EU Standard Contractual Clauses.
## 4. Server Log Files
The hosting provider automatically collects and stores information in server log files, which your browser transmits automatically. This includes:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing device
- Time of the server request
- IP address
This data is not merged with other data sources. It is processed on the basis of Art. 6(1)(f) GDPR — my legitimate interest in the technically error-free presentation and optimisation of my website.
## 5. Cookies
This website uses cookies. Cookies are small text files stored on your device that cause no harm.
Some cookies are technically necessary for the website to function. These are used on the basis of Art. 6(1)(f) GDPR.
Any cookies that are not technically necessary — for example for analytics purposes — are only set with your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw this consent at any time.
You can configure your browser to notify you about cookies, to accept cookies only in individual cases, or to block them entirely. Disabling cookies may limit the functionality of this website.
## 6. Contact by Email or Contact Form
If you contact me by email or via a contact form, the details you provide — including your name, email address, and the content of your message — will be stored in order to process your enquiry and for any follow-up questions.
The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR — my legitimate interest in responding to enquiries.
This data is retained until you ask me to delete it, until your enquiry has been fully dealt with, or until any statutory retention periods expire.
## 7. Newsletter
When you subscribe to my newsletter, I collect your email address as well as the date, time, and IP address of your sign-up. This data is used solely to send you the newsletter and to document your consent.
The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time using the unsubscribe link in every email or by contacting me directly. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
Double opt-in: After entering your email address, you will receive a confirmation email. Your address is only added to the mailing list once you click the confirmation link.
Service provider: The newsletter is sent using Brevo, a service provided by Sendinblue SAS (firmierend als Brevo)
17 rue Salneuve
75017 Paris, Frankreich
Handelsregister Paris: 498 019 298.
Brevo processes your data on my behalf under a data processing agreement in accordance with Art. 28 GDPR.
Analysis: Brevo's analysis functions record whether newsletters are opened and which links are clicked. This helps me understand which content is of interest. This analysis is covered by your consent given at sign-up.
Storage: Your data is stored for as long as you remain subscribed. After unsubscribing, your email address is retained only for the purpose of documenting your previous consent, and is not used for further mailings.
## 8. Social Media
I maintain a presence on Instagram (@pablokencana). When you visit this profile, the platform operator processes your data according to its own privacy policy. I have no influence over this processing.
If you contact me via this platform, I process the data you send in order to respond to your enquiry, on the basis of Art. 6(1)(f) GDPR.
Information on Instagram's data processing can be found in Meta's privacy policy.
## 9. Online Shop and Orders
If you place an order through this website, the data you provide — including name, address, email address, and payment details — is processed in order to fulfil the contract, on the basis of Art. 6(1)(b) GDPR.
Payment is handled by squarespace, which processes your payment data under its own privacy policy.
Data required by commercial and tax law is retained for the statutory periods (generally six to ten years).
## 10. Your Rights
You have the following rights regarding your personal data:
- Information (Art. 15 GDPR) — to know what data I hold about you
- Rectification (Art. 16 GDPR) — to have incorrect data corrected
- Erasure (Art. 17 GDPR) — to have your data deleted
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR) — to receive your data in a machine-readable format
- Objection (Art. 21 GDPR) — to object to processing based on legitimate interest
- Withdrawal of consent (Art. 7(3) GDPR) — at any time, with effect for the future
To exercise any of these rights, contact me at the address given in section 1.
## 12. Right to Lodge a Complaint
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with a supervisory authority. The authority responsible for Berlin is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
## 13. SSL/TLS Encryption
This site uses SSL/TLS encryption to protect the transmission of confidential content. You can recognise an encrypted connection by the "https://" prefix in your browser's address bar and the lock symbol.