Privacy Policy

Last updated: 27.09.2026

1. Controller

The controller responsible for processing personal data on this website is:

Dotty weaves

info@dottyweaves.de

If you have any questions about the processing of your personal data, please contact us using the details above.

2. Personal Data We Process

Depending on how you use our website, we may process the following categories of personal data:

• Name and contact details
• Email address
• Technical data, such as IP address, browser type, operating system, device information, and access times
• Usage data, such as visited pages and interactions with the website
• Information contained in messages or enquiries sent to us
• Cookie and similar technology data

We do not intentionally collect special categories of personal data through this website.

3. Purposes and Legal Bases

We process personal data for the following purposes:

Website operation

We process technical data to provide, maintain, secure, and improve our website.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in operating a secure and functional website.

Contact enquiries

If you contact us by email or through a contact form, we process the information you provide to respond to your enquiry and communicate with you.

Legal basis: Article 6(1)(b) GDPR, where your enquiry relates to a contract or pre-contractual measures; otherwise, Article 6(1)(f) GDPR, our legitimate interest in responding to enquiries.

Legal obligations

We process personal data where necessary to comply with legal, tax, accounting, or regulatory obligations.

Legal basis: Article 6(1)(c) GDPR.

Marketing and analytics

Where required, we use cookies, analytics tools, or marketing technologies only with your consent.

Legal basis: Article 6(1)(a) GDPR.

You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Server Log Files

When you visit our website, our hosting provider may automatically collect and store information in server log files. This may include:

• IP address
• Date and time of access
• Requested page or file
• Referrer URL
• Browser type and version
• Operating system
• Amount of data transferred
• Status code of the request

This information is processed to deliver the website, ensure technical security, detect misuse, and investigate technical errors.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in providing and securing the website.

Server log data is deleted or anonymised when it is no longer required for these purposes, unless a longer retention period is legally required.

5. Contact Forms and Email Communication

If you contact us by email or through a contact form, we process the information you provide, including your name, email address, and message.

We use this information only to process and respond to your enquiry, unless another purpose is stated at the time of collection.

We retain enquiries for as long as necessary to handle the matter and, where applicable, for the duration of statutory retention periods.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Cookies are small text files stored on your device.

We use:

• Necessary cookies: Required for the basic operation, security, and functionality of the website.
• Preference cookies: Used to remember settings selected by you.
• Analytics cookies: Used to understand how visitors use the website.
• Marketing cookies: Used to display or measure personalised advertising.

Non-essential cookies are used only with your consent, where legally required. You can withdraw or change your consent at any time through our cookie settings.

You can also configure your browser to refuse or delete cookies. Disabling certain cookies may affect the functionality of the website.

7. Analytics

We use [name of analytics provider] to analyse website usage and improve our services.

The provider may process information such as your IP address, device information, browser information, pages visited, and interactions with the website.

Analytics are activated only after you have given consent, where required.

For more information, please see the provider’s privacy policy: [Link to provider’s privacy policy].

8. Third-Party Services

Our website may use services provided by third parties, including:

• Hosting provider: [Name and link]
• Email provider: [Name and link]
• Payment provider: [Name and link]
• Analytics provider: [Name and link]
• Embedded media provider: [Name and link]
• Spam protection provider: [Name and link]

These providers may process personal data on our behalf or as independent controllers. We select service providers carefully and enter into appropriate data-processing agreements where required.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area.

Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, unless an applicable legal exception applies. EU data protection law provides safeguards for certain transfers to third countries. European Union

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

The retention period depends on:

• The purpose for which the data was collected
• Whether there is an ongoing contractual or business relationship
• Statutory retention obligations
• The need to establish, exercise, or defend legal claims

When personal data is no longer required, it is deleted or anonymised.

11. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

12. Your Data Protection Rights

Subject to applicable legal requirements, you have the following rights:

• The right to obtain information about the processing of your personal data
• The right of access to your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure of your personal data
• The right to restriction of processing
• The right to data portability
• The right to object to certain processing activities
• The right to withdraw consent at any time where processing is based on consent

You also have the right to lodge a complaint with a competent data protection supervisory authority. The GDPR recognises rights including access, rectification, erasure, restriction, portability, and objection. European Union

13. Automated Decision-Making

We do not use personal data for automated decision-making, including profiling, that produces legal effects or similarly significant effects.

Alternative, if applicable:
We use automated decision-making for [describe purpose]. The logic involved, the significance, and theexpected consequences are as follows: [describe clearly].

14. Children’s Data

Our website is not directed at children under the age of 5. We do not knowingly collect personal data from children without appropriate consent where required by law.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, legal requirements, or data-processing practices.

The current version will always be published on this page. The date shown at the top indicates when this Privacy Policy was last updated.

16. Contact

If you have questions about this Privacy Policy or our processing of personal data, please contact:

Dotty weaves

info@dottyweaves.de