Privacy policy

Sebastian Weger, Innerkoflerstraße 15, 81377 München, hallo@curatedbysebastian.com

This site is hosted by Hostinger. When you visit, your browser necessarily transmits technical data (IP address, time, requested page, browser type) which the host processes to deliver the site and for security. Legal basis: Art. 6(1)(f) GDPR (secure, efficient delivery). A data processing agreement under Art. 28 GDPR is in place.

When you use the contact form, the details you enter (name, email, phone and your message, plus any optional fields) are transmitted encrypted via HTTPS to my server at Hostinger and delivered to me from there by email. Processing takes place exclusively on servers within the EU — there is no transfer to a third country and no third-party form service is involved. The details are used solely to handle your enquiry and are not passed on. Legal basis: Art. 6(1)(b) and (f) GDPR. I keep the correspondence for as long as needed to deal with your request and any follow-up.

Fonts are hosted on this server. Your browser does not contact Google or any other third party to load them — no data leaves for that purpose.

This site sets no cookies and uses no advertising or cross-site tracking. The reach measurement described below works without cookies and without storing personal data, so nothing legally requires your consent — that is why you see no cookie banner.

To see which pages are read and where visitors come from, this site uses GoatCounter (goatcounter.com), an open-source analytics service hosted in the EU. It works entirely without cookies and does not store your IP address. Only aggregated, non-identifying data is recorded: the page visited, the referring site, an approximate country (derived from the IP without keeping it), browser and device type, and screen size. Nothing is stored on your device and you are not tracked across other websites — no individual can be identified. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding and improving the site’s reach); you can object at any time. Data is processed on EU servers and a data processing agreement under Art. 28 GDPR is available from the provider.

The Instagram link leads to a service operated by Meta. Once you follow it, that provider’s privacy terms apply. I have no influence on their data processing.

You have the right to access, rectification, erasure, restriction, and data portability, and to object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority. Just get in touch and I’ll sort it out.