Privacy policy
This policy explains how personal data is processed when you visit the website of Kräuter & Kreativschmiede.
Who is responsible
Kräuter & Kreativschmiede operates this website and is responsible for the processing of personal data described here (the controller). You can reach us here: Contact
Visiting this website
When you open a page, your browser sends technical information such as your IP address, the requested address, the time, the previously visited page and your browser’s identification. This information is needed to deliver the website and to protect it against misuse. The legal basis is our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR, where the GDPR applies).
Visitor statistics
We count page views and estimate the number of visitors without cookies. For this, a pseudonymous identifier is calculated from your IP address and browser identification using a secret key; it cannot be reversed, and your IP address and browser identification are not stored with it. We also record the page viewed, the time between page views, the domain of the referring website, your approximate country, device type, browser, operating system, preferred language, the hour of the visit and campaign labels contained in the link (utm parameters). We only see aggregated figures. The identifier and the daily records are deleted automatically after 60 days at the latest. The legal basis is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR).
Cookies and third parties
This website does not set cookies and does not use browser storage, advertising or tracking services. Fonts, scripts and images are not loaded from third parties.
Contact form and requests
If you send us a request through the form on this website, we receive your email address, your message and your preferred date. We use this information only to handle your request and to reply to you. The legal basis is the performance of a contract or steps taken at your request before entering into one (Art. 6(1)(b) GDPR), and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your request when it is no longer needed, unless statutory retention periods apply.
To prevent spam, the number of submissions from one network address is limited.
Email and telephone
If you contact us by email or telephone, we process the details you share with us to handle your request, on the same legal bases.
Hosting and service providers
This website is built and operated with DolphinPage, a service of Lengo LLC, which processes data on our behalf. DolphinPage uses Cloudflare, Inc. for hosting, delivery and storage. Your data may therefore also be processed outside your country, including in the United States. Where the GDPR applies, such transfers are based on appropriate safeguards such as the EU Standard Contractual Clauses or the EU–U.S. Data Privacy Framework.
Your rights
Where data protection law such as the GDPR applies, you have the right to access your personal data and to have it corrected, erased or restricted, the right to data portability and the right to object to processing based on legitimate interests. Where processing is based on consent, you can withdraw it at any time with effect for the future. To exercise your rights, contact us using the details above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.
You are not obliged to provide personal data; without an email address, however, we cannot answer a request. We do not use automated decision-making or profiling.
Changes to this policy
We update this policy when our website or our data processing changes. Last updated: November 5, 2026.