Privacy Policy

Last updated: 21.02.2026

This Privacy Policy explains how personal data is collected, used, and protected when you visit this website. It has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).

1. Data Controller

The data controller responsible for this website is:

Naomi Pallagi
Mollstr. 1
10178 Berlin, Germany

Email: naomipallagi@gmail.com

2. Hosting

This website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA. As part of operating the website, Squarespace automatically collects and processes certain technical data, including IP addresses, browser type, operating system, referring URLs, and pages visited. This data is processed on the basis of Article 6(1)(f) GDPR (legitimate interests) to ensure the technical stability and security of the website.

Squarespace acts as a data processor on behalf of the data controller. Data may be transferred to and processed in the United States. Such transfers are governed by standard contractual clauses approved by the European Commission. For further information, please refer to Squarespace's Privacy Policy at squarespace.com/privacy.

3. Cookies and Tracking Technologies

This website uses cookies. Cookies are small text files stored on your device that help the website function and allow certain features to work. Squarespace sets cookies that are technically necessary for the operation of the website, as well as analytical cookies that collect anonymised data about how visitors use the site.

In accordance with German data protection requirements and the ePrivacy Directive, cookies that are not strictly necessary will only be set with your prior consent. A cookie consent banner is displayed upon your first visit to this website, through which you may accept or decline non-essential cookies.

You may withdraw your consent at any time by clearing your browser cookies and revisiting the site. You may also configure your browser to refuse cookies; please note that some parts of the website may not function correctly if you do so.

Squarespace's cookie usage is detailed at squarespace.com/privacy.

4. Analytics

This website uses Squarespace Analytics, a built-in analytics tool provided by Squarespace. It collects anonymised data about visitor behaviour, such as page views, session duration, and traffic sources, to help understand how the website is used. This data does not identify individual visitors and is processed on the basis of Article 6(1)(f) GDPR (legitimate interests).

No third-party analytics services such as Google Analytics are currently in use. Should this change, this Privacy Policy will be updated accordingly.

5. Contact by Email

This website displays an email address for visitors who wish to get in touch. If you choose to send an email, the data you provide — including your email address and any information contained in your message — will be processed solely for the purpose of responding to your enquiry.

This processing is carried out on the basis of Article 6(1)(f) GDPR (legitimate interests). Your data will not be passed on to third parties and will not be used for any purpose other than responding to your message. Data is retained only for as long as necessary to handle your enquiry and will be deleted thereafter, unless a longer retention period is required by law.

Please note that email communication is not fully encrypted end-to-end. For sensitive information, it is advisable to use an alternative means of communication.

6. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access (Article 15): you may request a copy of the personal data held about you.

  • Right to rectification (Article 16): you may request correction of inaccurate data.

  • Right to erasure (Article 17): you may request deletion of your data, subject to certain conditions.

  • Right to restriction of processing (Article 18): you may request that processing of your data be restricted.

  • Right to data portability (Article 20): you may request your data in a structured, machine-readable format.

  • Right to object (Article 21): you may object to processing based on legitimate interests.

To exercise any of these rights, please contact the data controller at the email address listed in Section 1. Requests will be responded to within one month in accordance with Article 12 GDPR.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), reachable at datenschutz-berlin.de.

7. Data Security

This website is transmitted via HTTPS (SSL/TLS encryption) to protect data in transit. Squarespace implements appropriate technical and organisational measures to safeguard the data processed through its platform. No method of transmission over the internet is entirely secure, however, and absolute security cannot be guaranteed.

8. Links to Third-Party Websites

This website may contain links to external websites, including Instagram, Xiaohongshu, and Artsy. This Privacy Policy applies only to this website. The data controller is not responsible for the privacy practices of third-party sites and encourages visitors to review the privacy policies of any external sites they visit.

9. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in legal requirements or website functionality. The date at the top of this page indicates when it was last revised. Continued use of this website following any changes constitutes acceptance of the updated policy.

For any questions regarding this Privacy Policy, please contact: naomipallagi@gmail.com