This website is the personal blog of Ellen Bauer and Manuel Esposito. We don’t sell anything here, we don’t run ads, and we collect as little data as possible. This page explains what data is still processed when you visit, and what happens to it.

Who is responsible

Ellen Bauer and Manuel Esposito
Elmastudio Ltd., New Zealand

Email: kontakt@elmastudio.de

Hosting and server logs

This website is hosted on WordPress.com (Automattic Inc., USA). When you open a page, the server processes technically necessary data such as your IP address, date and time of the request, browser, and the page you visited (server log files). This data is required to run the site securely (Art. 6(1)(f) GDPR) and is not combined with other data. See Automattic’s privacy policy for details.

Statistics and search

We use the visitor statistics built into WordPress.com (Jetpack Stats) and Jetpack Search. The statistics show us page views and approximate countries of origin; we don’t see profiles of individual visitors. Search queries are processed by Automattic to deliver the search results. The legal basis is our legitimate interest in a working website (Art. 6(1)(f) GDPR). Details in Automattic’s cookie policy.

Comments

When you write a comment, we store the comment text and the details you provide (name, email address, optionally a website) until you object to the storage. Your email address is never published. To prevent spam, these details, including your IP address, may be checked automatically (Art. 6(1)(f) GDPR).

For profile pictures next to comments, WordPress.com uses the Gravatar service (Automattic). Your email address is transmitted to Gravatar in encrypted form to check whether a profile picture is stored there. If you’d rather avoid this, simply comment with an email address that isn’t registered with Gravatar.

Your rights

You have the right to access the data stored about you, and to have it corrected, deleted, restricted in processing, or transferred (Art. 15–20 GDPR). You can object to processing at any time (Art. 21 GDPR) and lodge a complaint with a data protection authority (Art. 77 GDPR). Just send us an email.

Deletion

We keep personal data only for as long as it is needed for its purpose, and delete it afterwards.

Last updated: August 2026