Last updated: 20.11.2025​

We take the protection of your personal data seriously. This Privacy Policy explains what data we collect, how we use it, and your rights under the GDPR.

 

1. Data Controller

​Carolin Ruggaber 

Köpenicker Chaussee 36

10317 Berlin, Germany
Email: studio@carolinruggaber.com

 

2. Hosting Provider

This website is hosted by:

Wix.com Ltd.
40 Namal Tel Aviv St.
Tel Aviv 6350671
Israel

Wix processes data on our behalf. Wix may store data on servers located in the EU, Israel, or the United States under GDPR-compliant safeguards (SCCs).

 

3. Types of Data We Collect

a. Contact Form Data

If you contact us via form or email, we collect:

• Name

• Email address

• Message content

Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication)

 

b. Automatically Collected Data (Server Logs)

Wix automatically collects:

• IP address

• Browser type

• Device information

• Referrer URL

• Date and time of access

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in website security)

 

c. Cookies

Our website uses cookies for:

• Essential website functions

• Security

• Analytics (if enabled)

For details, see our Cookie Policy.

Legal basis:

• Essential cookies → Art. 6(1)(f) GDPR

• Analytics/marketing cookies → Art. 6(1)(a) GDPR (consent)

 

4. Use of Wix Tools and Integrations

Wix Analytics (if activated)

Wix may collect anonymized analytics data such as page views, session duration, and user behavior.
Legal basis: Consent (Art. 6(1)(a) GDPR).

 

Embedded Services

Depending on your site setup, third-party services (YouTube, Vimeo, Google Maps, Instagram embeds) may collect data.
If you don’t use these, remove this section.

 

5. Purpose of Processing

We process data in order to:

• Provide and operate the website

• Respond to your inquiries

• Improve website performance and security

• Fulfill legal obligations

 

6. Data Retention

• Contact form messages: up to 12 months

• Server logs: up to 30 days (Wix default)

• Analytics data: according to provider settings

We delete data once it is no longer needed.

 

7. Sharing of Data

We do not sell personal data.
Data may be shared only with:

• Wix (hosting provider)

• Service providers necessary to operate the site

• Authorities if legally required

 

8. International Data Transfers

If data is transferred outside the EU (e.g., to the U.S. or Israel), it is protected using:

• Standard Contractual Clauses (SCCs)

• Adequacy decisions (Israel is recognized as GDPR adequate)

 

9. Your Rights Under GDPR

You have the right to:

• Access your data (Art. 15 GDPR)

• Correct incorrect data (Art. 16)

• Request deletion (Art. 17)

• Restrict processing (Art. 18)

• Data portability (Art. 20)

• Object to processing (Art. 21)

• Withdraw consent at any time (Art. 7)

To exercise these rights, contact: [your email]

You have the right to file a complaint with your local data authority:
Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).

 

10. Changes to This Privacy Policy

We may update this policy occasionally. The latest version will always be available on this page.