Privacy Policy

Last updated: May 2026.

1. Controller

Berger & Rosenstock GbR
Dieselstraße 22e
61231 Bad Nauheim
Germany

Authorised representatives: Marcel R. G. Berger · Jasmin Rosenstock
Data protection contact: data-protection@digitalfreedom.co.za

2. Hosting (GitHub Pages)

This site is served by GitHub Pages (GitHub Inc., 88 Colin P Kelly Jr Street, San Francisco, CA 94107, USA). Technical connection data (IP, user agent, timestamp, requested URL) is processed when the site is requested. GitHub is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure provision of the website). Retention: per GitHub's policies, typically a few weeks.

3. Cookies and analytics (Google Analytics 4)

This site uses Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to measure aggregated, anonymised usage of the site (pages viewed, traffic sources, device categories). Google Analytics sets cookies and transfers data to Google. The connection is configured with anonymize_ip so your IP is truncated before processing.

We use Google Consent Mode v2 (Advanced) with all storage categories (analytics_storage, ad_storage, ad_user_data, ad_personalization) defaulting to denied. Before you consent, Google Analytics only sends cookieless pings (no cookies, no client ID, no precise location) which Google uses for aggregated modelling. Cookies and personalised measurement are only set once you actively accept via the cookie banner. Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TTDSG for cookies; Art. 6 (1) (f) GDPR (legitimate interest in aggregated reach measurement) for cookieless pings. You can withdraw consent at any time via "Cookie settings" in the footer; the lawfulness of processing before the withdrawal remains unaffected.

Transfers to the United States rely on the EU-US Data Privacy Framework. More: Google Privacy Policy.

Apart from Google Analytics this site sets no cookies. Theme preference (light/dark) and your cookie decision are stored only in your browser's localStorage and never transmitted to a server.

4. No newsletter, no contact form

This website does not run a newsletter, does not host a contact form, and never collects email addresses or other personal data through forms. Any contact happens via the channels listed in the imprint (email).

5. YouTube video embeds

Videos shown on this site are embedded from YouTube, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). We exclusively use the privacy-enhanced domain youtube-nocookie.com, which YouTube describes as the cookie-free embed mode. When you load a page that contains a video, your browser still establishes a connection to Google to fetch the player; this transmits technical connection data (IP, user agent, the page URL). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in displaying video content). Transfers to the United States rely on the EU-US Data Privacy Framework. More: Google Privacy Policy.

6. YouTube thumbnails

Thumbnails for the latest videos are loaded from Google's CDN (i.ytimg.com). The same considerations as in section 5 apply.

7. External social media profiles

This website links to external profiles on YouTube (youtube.com/@jasminelise_beauty) and Instagram (instagram.com/jasminelise_beauty). The Instagram profile is not embedded; it is only a hyperlink. No data is transmitted to the respective platform while you simply view this site.

When you click an outbound link, the receiving platform (Google Ireland Limited for YouTube; Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland for Instagram) processes data according to its own privacy policy. The YouTube "Subscribe" buttons additionally include the URL parameter ?sub_confirmation=1, which only opens the subscribe dialog on YouTube — no personal data is sent to us in the process. Legal basis: Art. 6 (1) (a) GDPR (your active click). Transfers to the US rely on the EU-US Data Privacy Framework.

More: Google Privacy Policy · Instagram Privacy Policy.

8. Fonts

We use "Geist" and "Fraunces" — both self-hosted from this domain. No data is sent to third-party font providers (e.g. Google Fonts).

9. Server logs

GitHub Pages logs technical connection data on every request (IP, timestamp, URL, user agent, referrer). We have no direct access to these logs; GitHub keeps them for security and operations purposes. Legal basis: Art. 6 (1) (f) GDPR.

10. International transfers

Transfers to the United States (GitHub, Google, Meta) take place under the EU-US Data Privacy Framework (Commission decision of 10 July 2023).

11. Retention (summary)

• Server logs (GitHub): per GitHub's policies, typically a few weeks
• Google Analytics: 14 months (default retention period for user and event data)
• Theme preference and cookie decision (localStorage): until you delete it; lives only in your browser

12. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), deletion (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You can withdraw any consent at any time — the lawfulness of processing before the withdrawal remains unaffected.

Requests to: data-protection@digitalfreedom.co.za

13. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

14. Data Protection Officer

A DPO has not been appointed — the controller does not meet the threshold criteria for mandatory appointment under Art. 37 GDPR / § 38 BDSG.