Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Lena Schnier
Anne-Frank-Weg 17
28790 Schwanewede
Germany
E-mail: hello@studiosandbox.de

2. General

Protecting your personal data matters to me. This website is deliberately kept lean: it sets no cookies, runs no analytics or tracking, and uses no advertising network. Personal data is only processed where it is technically necessary to run the website or where you get in touch with me. Below you can read what data is involved and what it is used for.

3. Hosting and server log files

This website is hosted by OVHcloud (OVH GmbH, St. Johanner Str. 41–43, 66111 Saarbrücken, Germany) on servers located in the European Union. When you visit the site, your browser automatically sends data to the server, which is stored in so-called server log files. This includes:

This data is not merged with other data sources and is used solely to run the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in providing and securing the website). The hosting provider deletes the log files automatically after a short time. A data processing agreement under Art. 28 GDPR is in place with OVH.

4. Cookies and tracking

This website does not set cookies and does not use any analytics or tracking services. No data is stored in your browser's local storage either.

5. Fonts

The fonts used on this website are served from my own server. No connection is made to Google or any other font provider.

6. Instagram feed (Behold)

The home page shows my latest Instagram posts. They are loaded through the service Behold (behold.so), which provides the content of my Instagram account. When you open the home page, your browser connects to Behold's servers; the thumbnail images are then loaded from Behold's servers or from Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). For technical reasons, your IP address is transmitted to these providers. A transfer to the USA cannot be ruled out; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

I do not receive any personal data about you through this integration. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an appealing presentation of my social media content). You can find further information in the privacy notices of Behold and Instagram.

Only when you click on a post do you leave this website and get redirected to Instagram. From that point on, Instagram's privacy policy applies exclusively.

7. Links to Amazon (affiliate programme)

The "Shop Now" buttons lead to Amazon. I take part in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for websites to earn advertising fees by advertising and linking to Amazon.de. You only leave this website when you click such a link; Amazon (Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) then sets cookies to attribute a purchase to my associate account. I do not receive any personal data about you, only anonymised statistics. Information on privacy at Amazon is available at amazon.de.

8. Contact by e-mail

If you write to me by e-mail, the details you provide (e-mail address, name, content of the message) are stored by me in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer required for this purpose and no statutory retention obligations apply.

9. Giveaways on Instagram

From time to time I run giveaways on Instagram. Participation takes place exclusively on Instagram; the data processed is described in the respective terms and conditions. I use the winners' data (name, postal address) only to ship the prize and delete it afterwards. The legal basis is Art. 6(1)(b) GDPR.

10. Encryption

For security reasons this website uses SSL/TLS encryption. You can recognise the encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

11. Your rights

With regard to your personal data you have the following rights:

To exercise your rights, an e-mail to the address above is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hanover, Germany (lfd.niedersachsen.de).

12. Changes

I reserve the right to update this privacy policy if the website or the legal requirements change. The version published here applies.

Last updated: October 2026