Privacy Policy

We are pleased about your interest in our website. Protecting your privacy is very important to us. Below we provide detailed information about how we handle your personal data.

​

Responsible Party (Controller)
Yvonne Wieda
www.tobiaswieda.com
contact@tobiaswieda.com
Cheruskerweg 32B
65187 Wiesbaden
Germany

​

Collection and Storage of Personal Data and the Nature and Purpose of Use
We collect personal data when you voluntarily provide it to us in the course of an inquiry, registration, order, or other contact. This may include first and last name, email address, telephone number, postal address, social media accounts, and IP address. Processing is carried out to provide our website and its functions, to respond to contact requests, to perform contracts and issue invoices, and to improve our offering. Depending on the purpose, the legal basis is Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures), Art. 6(1)(c) GDPR (legal obligation), or Art. 6(1)(f) GDPR (legitimate interest in optimizing our offering).

Cookies
Our website uses cookies. Cookies are small text files stored on your device that contain information. Different types of cookies are used. Technically necessary cookies are used to provide basic website functions and are permitted under Art. 6(1)(f) GDPR. These cookies are set automatically and are required for the operation of the website. Functional cookies and analytics cookies are used to improve user-friendliness and optimize our offering. These cookies are set only with your express consent in accordance with Art. 6(1)(a) GDPR (opt-in). Without your consent, no consent-required cookies will be set. Since our website is operated on the Wix platform, cookies may be set by Wix. Wix also processes data in Israel and in the USA. Israel is subject to an adequacy decision by the European Commission pursuant to Art. 45 GDPR. For transfers to the USA, Standard Contractual Clauses pursuant to Art. 46 GDPR are used to ensure an adequate level of data protection. You can withdraw your consent at any time via our cookie consent tool on the website or change your cookie settings. In addition, you can disable cookies in your browser settings. Please note that this may limit the functionality of the website.

​

Overview of cookies used (examples):
XSRF-TOKEN (Wix, session, security)
hs (Wix, session, security)
svSession (Wix, 2 years, user identification)
SSR-caching (Wix, 1 minute, cache optimization)
smSession (Wix, session, login)

​

A complete overview of the cookies used by Wix can be found at:
https://support.wix.com/de/article/cookies-und-deine-website-bei-wix

​

Use of Analytics Tools
We use analytics tools to better understand user behavior, evaluate the use of our website, and optimize our offering. In particular, IP addresses (usually anonymized), device types and browser information, operating systems, pages accessed and interactions, timestamps and duration of visits, and referral sources may be processed. Because our website is operated on the Wix platform, Wix Analytics is used automatically. The provider is Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel. Wix processes data on its own servers and may also transfer it to the USA. Israel is covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR. For transfers to the USA, Standard Contractual Clauses pursuant to Art. 46 GDPR are used to ensure an adequate level of protection. If additional analytics services such as Google Analytics are used, this will only occur with your consent under Art. 6(1)(a) GDPR. Google Analytics is operated with IP anonymization enabled. You can withdraw your consent for analytics cookies at any time via the cookie consent tool.

Contact Form
If you send us an inquiry via a contact form, your details, including the contact data you provide, will be stored for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent. The legal basis for processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(a) GDPR (consent). Data from contact forms is generally deleted after six months, unless a statutory retention obligation applies.

​

Newsletter
If you subscribe to our newsletter, we use your email address to send you regular information about our offers and services. Registration takes place via a double opt-in procedure. Your data is used exclusively to send the newsletter and is not passed on to third parties. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in the newsletter. Newsletter data is deleted immediately after unsubscribing, but no later than after three years.

Recipients and Categories of Recipients
Your personal data will only be shared with the following categories of recipients where necessary: hosting provider (Wix.com Ltd.), newsletter service providers, payment service providers, shipping service providers, IT service providers, and, where applicable, external consultants or authorities in the context of legal obligations. Data processing agreements pursuant to Art. 28 GDPR are in place with all processors.

​

Transfers to Third Countries
If personal data is transferred to a third country outside the European Union or the European Economic Area, this takes place only in compliance with the special requirements of Art. 44 et seq. GDPR. Wix, headquartered in Israel, processes data in a country covered by an adequacy decision of the European Commission. Where data is transferred to the USA, this is done on the basis of Standard Contractual Clauses. We note that despite contractual safeguards, there may be a residual risk that authorities in the USA may access data.

​

Storage Period
We store personal data only as long as necessary for the respective purposes or as required by statutory retention periods. Contract and business data is stored for six or ten years in accordance with commercial and tax law requirements. Data from contact inquiries is deleted after no later than six months. Newsletter data is deleted after unsubscribing, no later than after three years. Server log files and technical logs are generally deleted automatically after 14 days, unless longer storage is required for security reasons.

​

Your Rights
You have the right at any time to obtain information about the personal data we store about you. You also have the right to rectification of incorrect data, deletion of your data, restriction of processing, objection to processing, and the right to data portability. In addition, you have the right to withdraw any consent you have given at any time with effect for the future. To exercise your rights, please contact the controller listed above.

Requirement to Provide Data
Providing personal data is partly required by law (e.g., tax regulations) or necessary for entering into a contract. Failure to provide such data may mean that a contract cannot be concluded or an inquiry cannot be processed.

​

Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. The competent authority is generally the supervisory authority at your habitual residence or place of work, or the data protection authority responsible for our place of business.

Automated Decision-Making
Automated decision-making or profiling pursuant to Art. 22 GDPR does not take place.

​

Data Security
We use technical and organizational security measures to protect your data against manipulation, loss, destruction, or unauthorized access. These measures are continuously adapted in line with technological developments. The legal basis for these measures is Art. 6(1)(c) GDPR in conjunction with Art. 32 GDPR and Art. 6(1)(f) GDPR.

Currency and Amendments to This Privacy Policy
This privacy policy is currently valid and dated 10 September 2025. We reserve the right to amend this privacy policy if necessary to ensure it always complies with current legal requirements or to reflect changes to our services in this privacy policy.