Privacy Notice

Last updated: [DATE]

This notice explains how personal data is handled when you visit katinkavonrichter.com, sign up for the newsletter or one of the gifts (the “Melody of the month” or the “Live session”), or otherwise contact us. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and French data protection law.

1. Who is responsible (data controller)

Katinka von Richter, Paris, France.

For any data protection matter — including to exercise the rights in section 8 — please contact us through the form at our contact page. We do not publish a direct email address here in order to limit spam; the contact form reaches us reliably.

We have not appointed a Data Protection Officer, as we are not legally required to do so.

2. What data we collect

  • Data you give us: your email address (and your name, if you provide it) when you sign up via a form, plus the content of any message you send us.
  • Email engagement data: whether our emails are delivered, opened, or whether links in them are clicked.
  • Technical data when you visit the site: IP address, browser type, pages viewed and similar server log data, plus information stored through cookies and similar technologies (see section 5).

3. Why we use your data, and on what legal basis

  • Sending you the monthly melody, live-session updates and our newsletter — your consent (GDPR Art. 6(1)(a)).
  • Confirming your sign-up (double opt-in) — your consent, and our legitimate interest in being able to prove it.
  • Operating, securing and maintaining the website — our legitimate interest (Art. 6(1)(f)).
  • Responding to messages you send us — our legitimate interest, or steps taken at your request.
  • Non-essential cookies and analytics — your consent (Art. 6(1)(a)).

You give consent for emails by ticking the consent box and confirming via the link in the confirmation email (double opt-in). You can withdraw your consent at any time — every email contains an unsubscribe link, or you can contact us through the contact form. Withdrawing consent does not affect processing carried out before the withdrawal.

4. The newsletter and gifts

When you sign up, your email is stored in our newsletter system and you receive a confirmation email. Only after you confirm do we add you to the relevant list and send you the content you asked for. We keep a record of your consent (the time and the form used) so we can demonstrate it.

Our newsletter system is Listmonk, self-hosted on our own server (newsletter.katinkavonrichter.com), so your subscriber data is not stored with a third-party marketing platform. Emails are delivered through our sending provider, [email delivery provider, e.g. Amazon SES / Postmark / Mailgun], which processes your email address solely to deliver our messages.

5. Cookies and analytics

The website is hosted on Squarespace, which sets cookies necessary for the site to function and may set additional cookies. We use [analytics tool, e.g. Squarespace Analytics / Plausible / none] to understand site usage. Non-essential cookies are only set with your consent, which you can manage or withdraw via the cookie banner; you can also block or delete cookies in your browser settings.

Pages that embed YouTube videos may cause Google to set cookies and receive data (including your IP address) when a video loads. This happens under Google’s own privacy terms.

6. Who we share your data with

We do not sell your data. We share it only with service providers who act on our instructions, and only as needed:

  • Squarespace — website hosting and forms.
  • Listmonk (self-hosted) and [email delivery provider] — newsletter storage and email sending.
  • Fourthwall — if you click through to the shop, it processes your data as a separate controller under its own privacy policy.
  • Cal.com / [scheduling tool] — if and when live-session booking is offered, for scheduling only.

Some of these providers are based in the United States. Where data is transferred outside the EU/EEA, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

7. How long we keep your data

We keep your email and consent record for as long as you stay subscribed. If you unsubscribe or withdraw consent, we remove you from active lists; we may retain a minimal record (for example, that you unsubscribed) where necessary to honour your choice or to comply with legal obligations. Server log data is kept only for a short period for security and maintenance.

8. Your rights

Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to its processing; receive it in a portable format; and withdraw consent at any time. To exercise any of these, contact us through the form at our contact page. We respond within one month.

9. Complaints

If you believe your data is handled improperly, you can lodge a complaint with the French supervisory authority:

Commission Nationale de l’Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
www.cnil.fr

10. Automated decision-making

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

11. Changes to this notice

We may update this notice from time to time. The current version is always available on this page, with the date of the last update shown at the top.