Privacy Policy (Datenschutzerklärung)

1. Controller

Katrin Zahlmann, trading as KAT Projects
Bantaskine 1, 1112 WL Diemen, The Netherlands
KvK 42155844 · BTW NL005541806B55
E-mail: katrin90@web.de

2. Hosting and server log files

This website is hosted by Cloudflare, Inc. (USA). When you visit the site, the hosting provider technically processes your IP address and request data (e.g. date and time, requested page, browser type) to deliver the site and to ensure its security and stability. The legal basis is my legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Where data is transferred to the USA, this takes place on the basis of the safeguards provided for in the GDPR (such as the EU-US Data Privacy Framework or standard contractual clauses).

3. Fonts

The fonts used on this website (Fraunces and Nunito Sans) are hosted locally on this website. No connection to Google servers is established when you visit the site.

4. Cookies and local storage

This website does not use cookies and does not use analytics or tracking tools. Your chosen language is stored in your browser’s session storage for the duration of your visit. This information stays on your device and is not transmitted to me.

5. Contact form

If you send me a message via the contact form, I process the data you enter (name, e-mail address, organisation (optional), message) solely to answer your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (my legitimate interest in answering enquiries).

The form is processed by the service provider FormSubmit (formsubmit.co), which forwards your message to my e-mail inbox. FormSubmit is operated outside the European Union, so your data may be transferred to a third country. The e-mail inbox itself is provided by web.de (1&1 Mail & Media GmbH, Germany).

Providing this data is voluntary, but I cannot answer your enquiry without your name and e-mail address.

6. Spam protection

The contact form contains a hidden field (honeypot) that only bots fill in, so that automated messages can be recognised. No CAPTCHA is used and no additional data about you is collected for this purpose.

7. Data processors

I use the following service providers to run this website and handle your enquiries:

Cloudflare, Inc. – hosting and delivery of the website
FormSubmit – delivery of contact form messages
web.de (1&1 Mail & Media GmbH) – e-mail inbox

Some of them may process data outside the European Economic Area. This relies on safeguards such as adequacy decisions or standard contractual clauses.

8. Retention

I keep contact messages for up to two years after our last contact. If your message leads to a project or contract, I keep the relevant data for as long as needed for it, and for up to seven years where Dutch rules for business records require this. After that, the data is deleted.

9. Your rights

You have the right to access, rectification, erasure and restriction of processing of your personal data, the right to data portability, and the right to object to processing based on legitimate interests (Art. 15–21 GDPR). To exercise your rights, please contact me by e-mail or via the contact form.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

10. AI-assisted content

Some of the text on this website was drafted with the help of AI tools. All content is reviewed by Katrin Zahlmann, who retains editorial responsibility.

11. Changes

I may update this privacy policy when the website or legal requirements change. The current version is always available on this page.