Privacy Policy

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data ("data") on this website and its related online offers, in accordance with the EU General Data Protection Regulation (GDPR) and the German Digital Services Act (Digitale-Dienste-Gesetz, DDG).

1. Controller

The controller responsible for data processing on this website is:

Victoria Maier – Victoria Digital Consulting

Wilmersdorfer Straße 94

10629 Berlin, Germany

Email: office@victoriadigitalconsulting.com

2. Overview of Your Rights

You have the right at any time to obtain information free of charge about the origin, recipients, and purposes of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. You can contact us at any time using the contact details given in the Legal Notice (Impressum) or in Section 1 above for this purpose, as well as for further questions on the topic of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

The supervisory authority responsible for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin, Germany.

3. Hosting and Content Delivery (Framer)

This website is hosted and technically delivered by Framer B.V., Danzigerkade 23, 1013 AP Amsterdam, Netherlands ("Framer").

Framer collects and processes certain data automatically in so-called server log files, which your browser transmits automatically. This typically includes:

• IP address of the requesting device

• Date and time of access

• Browser type and version, operating system

• Referrer URL (the page previously visited)

• Amount of data transferred and access status (HTTP status code)

This data is technically necessary to display the website correctly and to ensure the stability and security of the system. It is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the technically error-free and secure provision of the website).

Where Framer processes data on our behalf, we have entered (or will enter) into a data processing agreement (Art. 28 GDPR) with Framer. Framer may process data on servers located in the EU/EEA and, depending on configuration, in the United States or other third countries; where this is the case, Framer relies on appropriate safeguards such as the EU Standard Contractual Clauses. Further information is available in Framer's own privacy policy at https://www.framer.com/legal/privacy/.

Please verify the current registered address and sub-processor list for Framer B.V. before publishing, as these details can change.

4. Cookies

This website uses cookies. Cookies are small text files that are stored on your device and that store certain settings and data for exchange with our system via your browser.

We distinguish between two categories of cookies used on this website:

a) Technically necessary cookies

These cookies are required for the basic functioning of the website (e.g. saving your cookie consent choice, enabling core navigation and security features). They are processed on the basis of Art. 6 (1) (f) GDPR (legitimate interest in providing a technically functional website) and, insofar as they fall under § 25 (2) TDDDG, do not require separate consent.

b) Marketing and tracking cookies

These cookies are used to analyse user behaviour for marketing purposes, to measure the effectiveness of campaigns, and/or to display personalised content or advertising, potentially including cookies set by third-party services embedded on this site. These cookies are only set with your prior, active consent via the cookie banner shown when you first visit the website, in accordance with Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.

You can grant, decline, or withdraw your consent at any time with future effect via the cookie settings available on the website (typically accessible via a cookie/consent management link in the footer). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

If a specific consent management platform / cookie banner tool is used (e.g. a Framer-native cookie consent component, Cookiebot, Usercentrics, etc.), that provider should be named here explicitly, together with a link to withdraw or change consent.

5. Web Analytics (Google Analytics)

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated (including your IP address) is transmitted to and stored by Google on servers in the United States and other countries. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services relating to website activity and internet usage.

Google Analytics is only activated, and the corresponding cookies are only set, after you have given your active, prior consent via the cookie banner. The legal basis for this processing is therefore Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You may withdraw your consent at any time with future effect via the cookie settings on the website.

Technically, this is implemented via Google Tag Manager in conjunction with Google Consent Mode: by default, all consent categories relevant to Google Analytics (in particular "analytics_storage") are set to "denied". The Google Analytics tag is configured to require explicit additional consent before it is allowed to fire. It is only triggered, and only then are cookies set or data transmitted to Google, once you actively accept the corresponding category in the cookie banner. Where consent is declined or not yet given, Google may still receive limited, cookie-less and non-personally-identifiable signals ("consent mode pings") used for basic modelling purposes; no cookies are set and no personal data such as your IP address is stored in connection with these signals before consent is granted.

As Google is a US-based company, data may be transferred to a third country. Google has committed to appropriate safeguards, in particular the EU Standard Contractual Clauses, as described in Google's privacy policy. Further information on Google Analytics' data processing and on your opt-out options is available at https://policies.google.com/privacy and https://tools.google.com/dlpage/gaoptout (browser add-on to opt out of Google Analytics).

Please confirm: (1) the exact Google Analytics property in use (GA4), (2) that the Google Tag Manager consent settings for the GA4 tag actually require "analytics_storage" consent before firing (test by rejecting the banner and checking that no request to google-analytics.com / analytics.google.com occurs and no _ga cookie is set), and (3) that a data processing agreement with Google is in place — these details should be verified in your live setup to match this description.

6. Web Fonts (Google Fonts)

This website may use "Google Fonts" for the uniform display of typefaces, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), as integrated by the Framer platform.

Depending on the configuration set by Framer, Google Fonts are either (a) hosted locally on Framer's own servers, in which case no connection to Google's servers is established and no data is transmitted to Google, or (b) loaded dynamically from Google's servers, in which case your browser's IP address is necessarily transmitted to Google when the page is loaded, and Google may process this data in the United States.

Where fonts are loaded from Google's servers, the legal basis is your consent (Art. 6 (1) (a) GDPR), obtained via the cookie/consent banner, or alternatively our legitimate interest (Art. 6 (1) (f) GDPR) in a consistent and fast presentation of our website content.

Further information on Google Fonts is available at https://developers.google.com/fonts/faq and in Google's privacy policy at https://policies.google.com/privacy.

Please confirm in Framer's project settings whether fonts are self-hosted or Google-hosted, and adjust this section accordingly — this affects whether consent is strictly required.

7. Appointment Scheduling (Calendly)

To allow you to book a consultation, this website links to or embeds the booking tool "Calendly", provided by Calendly LLC, 271 17th Street NW, Suite 1000, Atlanta, GA 30363, USA ("Calendly").

When you use Calendly to schedule an appointment, Calendly processes the data you actively enter (such as your name, email address, and any information you provide in optional fields), as well as technical data such as your IP address and browser information. This data is processed by Calendly on our behalf and on our instruction to organise and confirm the appointment.

The legal basis for this processing is Art. 6 (1) (b) GDPR (processing necessary for the performance of a contract or to take steps prior to entering into a contract, i.e. arranging our consultation) and, where applicable, Art. 6 (1) (a) GDPR (consent).

As Calendly LLC is based in the United States, data may be transferred to a third country. Calendly participates in appropriate data transfer safeguards (such as the EU Standard Contractual Clauses) as described in its privacy policy at https://calendly.com/privacy.

8. Social Media and Messaging Links

a) LinkedIn

This website contains a link to our LinkedIn profile (de.linkedin.com/in/victoria-maier-4b488a97). This is a simple hyperlink, not an embedded LinkedIn plug-in; no data is transmitted to LinkedIn Ireland Unlimited Company merely by visiting our website. Data is only transmitted to LinkedIn once you actively click the link and are redirected to LinkedIn's platform, where LinkedIn's own privacy policy applies: https://www.linkedin.com/legal/privacy-policy.

b) WhatsApp

This website contains a link/button that opens a chat with us via WhatsApp, a messaging service provided by WhatsApp Ireland Limited, part of the Meta group ("Meta"). Clicking this link opens the WhatsApp application or web client and initiates a direct connection between your device and WhatsApp/Meta; it is not embedded on our page and no data is exchanged with WhatsApp/Meta merely by viewing our website.

Once you initiate a chat, WhatsApp/Meta processes your phone number, the content of your messages, and associated metadata (e.g. timestamps, device information) in accordance with WhatsApp's own privacy policy. As Meta is a US-based group, data may be transferred to and processed in the United States and other countries outside the EU/EEA. The legal basis for us receiving and processing messages you send us via WhatsApp is Art. 6 (1) (b) GDPR (pre-contractual communication and inquiry handling) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your enquiry).

WhatsApp's privacy policy is available at https://www.whatsapp.com/legal/privacy-policy.

Using WhatsApp for business communication involves data transfer to Meta in the US. If you would prefer a more privacy-friendly alternative, consider replacing or supplementing the WhatsApp link with an email contact or a self-hosted contact option.

9. Storage Duration

Unless a more specific storage period has been stated in this policy, your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected, and no statutory retention obligations (e.g. under German commercial or tax law, typically 6 or 10 years for business correspondence and accounting records) stand in the way of deletion.

10. Data Security

This website uses TLS/SSL encryption for the transmission of confidential content, such as data you may submit through third-party tools linked from this site (e.g. Calendly). We take appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons, and we review these measures on an ongoing basis.

11. Your Rights in Detail

Under the applicable data protection law, you have, in particular, the following rights:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object to processing based on legitimate interest, in particular direct marketing (Art. 21 GDPR)

• Right to withdraw consent given, with effect for the future (Art. 7 (3) GDPR)

• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise any of these rights, please contact us using the details in Section 1.

12. Changes to this Privacy Policy

We reserve the right to amend this privacy policy from time to time so that it always complies with current legal requirements or in order to reflect changes to our services or the way in which we process personal data, e.g. when introducing new features or tools. The new privacy policy will then apply to your next visit.

Last updated: [Month] 2026 — please replace with the actual publication date.