1. Data Controller
The controller responsible for the processing of personal data on this website, within the meaning of Art. 4 (7) GDPR, is:
Mona Jassem Batschari
Blankeneser Hauptstraße 159
22587 Hamburg, Germany
Email: moni.market.studio@gmail.com
You may reach the controller for all data-protection matters using the contact information above.
2. Overview of Processing
When you use this website, the following categories of personal data may be processed:
- Technical connection data (IP address, browser type, operating system, referrer, timestamp)
- Data you actively provide (email address if you contact us)
- Purchase and payment data — processed by Digistore24 GmbH as the seller of record (see Section 7)
We do not use tracking pixels, third-party analytics, retargeting scripts, or social-media plugins on this website. If this ever changes, this policy will be updated in advance.
3. Legal Bases
We process personal data on the following legal bases under Art. 6 GDPR:
- Art. 6 (1)(b) GDPR — processing necessary for the performance of a contract (e.g., delivering the digital product you purchased).
- Art. 6 (1)(c) GDPR — processing necessary for compliance with a legal obligation (e.g., tax retention obligations).
- Art. 6 (1)(f) GDPR — processing necessary for the purposes of our legitimate interests (e.g., securing the website, preventing abuse, maintaining server logs).
- Art. 6 (1)(a) GDPR — consent, where you have specifically given it.
4. Hosting & Server Log Files
This website is hosted by an external hosting provider. When you visit the site, the following data is automatically transmitted to the server and stored in log files:
- Anonymised IP address of the requesting device
- Date and time of the request
- URL of the requested page
- Referring URL (if any)
- Browser type and version
- Operating system
Purpose: ensuring reliable delivery of the website, security (detection of abuse or attacks), and technical troubleshooting.
Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in a secure and functioning website).
Storage period: log data is stored for a maximum of 7 days, after which it is automatically deleted, unless a specific incident requires longer retention.
Hosting provider: Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Where the hosting provider is located outside the EU/EEA, a valid transfer mechanism (Standard Contractual Clauses per Art. 46 GDPR, and/or the EU–US Data Privacy Framework where applicable) is in place. A data-processing agreement (Auftragsverarbeitungsvertrag) under Art. 28 GDPR has been concluded with the hosting provider.
5. Self-Hosted Web Fonts
The fonts used on this website ("Inter" and "Instrument Serif") are self-hosted and delivered directly from our own server. No requests are made to Google Fonts, Adobe Fonts, or any other external font provider. Your IP address is not transmitted to any third party for the purpose of loading fonts.
6. Cookies
This website does not set tracking, analytics, or marketing cookies. Only strictly necessary technical storage (if any) is used to deliver the requested content.
If in the future we introduce optional cookies (e.g., for analytics), a compliant consent banner will be presented before any such cookie is set, in accordance with § 25 TTDSG and Art. 6 (1)(a) GDPR.
7. Payment Processing (Digistore24)
All purchases of our digital products are processed through Digistore24 GmbH, St.-Godehard-Straße 32, 31139 Hildesheim, Germany. Digistore24 acts as the reseller of record: when you click a "Buy" button on this website, you are redirected to the Digistore24 checkout page. From that point on, your data is processed directly by Digistore24 as an independent controller for the purpose of contract execution, payment, invoicing, and — where applicable — refund handling.
The data typically processed by Digistore24 includes: your name, billing address, email address, payment data (e.g., credit-card data, PayPal account, bank details — depending on the method you choose), IP address, and information about the product purchased.
The privacy policy of Digistore24 is available at: https://www.digistore24.com/info/privacy.
After a completed purchase, Digistore24 shares certain customer data with us (as the vendor) — in particular your name and email address — so that we may deliver the purchased product and, where required, provide customer service. This transmission is based on Art. 6 (1)(b) GDPR (performance of a contract).
8. Contact by Email
If you contact us by email, the personal data you transmit (email address, name if provided, message content) will be processed exclusively for the purpose of responding to your inquiry and any related follow-up.
Legal basis: Art. 6 (1)(b) GDPR (pre-contractual measures or contract performance) and/or Art. 6 (1)(f) GDPR (legitimate interest in responding to inquiries).
Storage period: your inquiry data will be deleted once the matter has been fully resolved and no statutory retention obligations (e.g., tax or commercial-law retention of 6–10 years) apply.
9. Your Rights as a Data Subject
Under the GDPR, you have the following rights concerning your personal data:
- Right of access (Art. 15 GDPR) — to obtain confirmation as to whether we process your personal data, and if so, to receive information about that processing.
- Right to rectification (Art. 16 GDPR) — to have inaccurate personal data corrected.
- Right to erasure (Art. 17 GDPR) — to have your personal data deleted, subject to statutory retention obligations.
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR) — to receive your data in a structured, commonly used, machine-readable format.
- Right to object (Art. 21 GDPR) — in particular against processing based on legitimate interests.
- Right to withdraw consent (Art. 7 (3) GDPR) — where processing is based on consent, you may withdraw it at any time, with effect for the future.
- Right to lodge a complaint (Art. 77 GDPR) — with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. For Germany, the competent authority is typically the state data-protection authority of the state in which the controller resides. A directory is maintained by the Federal Commissioner for Data Protection and Freedom of Information: bfdi.bund.de.
10. Changes to this Policy
We may update this privacy policy from time to time to reflect changes in our services, in our technical setup, or in applicable law. The current version is always available on this page. Substantial changes will be announced with reasonable prior notice on our website.