Privacy Policy Last updated: 1 October 2026
The protection of your personal data is important to me. The following information explains which personal data is processed when you visit this website or contact me.
Controller
Gina Indra Engelbrecht Isla de Altea 1 03590 Altea (Alicante) Spain
Phone: +49 (0) 170 233 0 600 Email: gina@ginaindra.de
Contact
If you contact me via the contact form, by email or by telephone, I process the information you provide in order to respond to your enquiry and communicate with you.
The data processed depends on the information you provide. When using the contact form, your email address and your message are transmitted. Your name is only transmitted if you choose to provide it voluntarily.
Required information
To contact me via the contact form, your email address and a message are required so that I can receive and respond to your enquiry. Providing your name is voluntary.
Contact via WhatsApp
You can also contact me via WhatsApp. If you use this communication channel, your telephone number, your message and any other content you provide will be processed.
Personal messages and calls via WhatsApp are end-to-end encrypted. However, WhatsApp also processes other information in order to provide its service, such as account, device, connection and usage information. As WhatsApp has access to contacts on my device, contact details from the address book may also be processed as part of the contact synchronisation offered by WhatsApp.
Depending on the content of your enquiry, processing is based on Art. 6(1)(b) GDPR or on my legitimate interest in communicating with you pursuant to Art. 6(1)(f) GDPR.
For users in the European Region, WhatsApp is provided by WhatsApp Ireland Limited. Further information can be found in WhatsApp’s privacy policy.
Special categories of personal data
When contacting me, you may voluntarily provide particularly personal information. This may include information concerning your physical or mental health.
Such information constitutes special categories of personal data within the meaning of Art. 9 GDPR. Where processing of such information is necessary in order to deal with your enquiry, it is carried out on the basis of your explicit consent pursuant to Art. 9(2)(a) GDPR.
You may withdraw your consent at any time with effect for the future.
Contacts and appointment management via Apple iCloud
I use Apple iCloud to manage contact details and appointments. If I save your contact details in my address book or enter an appointment with you in my calendar, your name, telephone number, email address and information relating to agreed appointments may be processed and synchronised via iCloud.
I limit the information stored there to what is necessary for contact and appointment organisation. I do not store the contents of personal conversations or information concerning your health as contact or calendar notes.
Where processing is necessary for the preparation or performance of our cooperation, it is based on Art. 6(1)(b) GDPR. Otherwise, it is based on my legitimate interest in reliable contact and appointment organisation pursuant to Art. 6(1)(f) GDPR.
Within the European Union, Apple Distribution International Ltd. in Ireland is responsible for iCloud. Further information can be found in Apple’s privacy policy.
Transfers of data to third countries
When using WhatsApp and Apple iCloud, personal data may be processed outside the European Economic Area, including in the United States.
Apple states that international transfers of personal data from the European Economic Area are based on Standard Contractual Clauses. WhatsApp states that certain transfers to the United States are based on the EU-US Data Privacy Framework and that other transfers are based, among other things, on Standard Contractual Clauses.
Further information can be found in the privacy information provided by Apple and WhatsApp referred to above.
Recipients and disclosure of data
I only disclose personal data where this is necessary to provide this website, communicate with you, organise my activities or comply with a legal obligation.
A virtual server hosted by Host Europe is used to operate the website and the associated email infrastructure. Technical administration is carried out by SmileSoft, owner Gunter Engelbrecht. Access to personal data may be necessary in connection with technical operation, maintenance, security or troubleshooting.
If you use WhatsApp, data is processed by WhatsApp Ireland Limited and, where applicable, by other companies and service providers within the WhatsApp or Meta group in connection with the provision of the service.
For synchronisation of contacts and appointments, I use Apple iCloud. Personal data may therefore be processed by Apple and by service providers used by Apple.
Types of data processed
Depending on how you use this website and the available contact options, the data processed may include your email address, telephone number, the content of your messages and, if you provide it voluntarily, your name.
If you contact me by email, telephone or WhatsApp, any information that you voluntarily provide as part of that communication may also be processed.
When visiting the website, technically necessary connection data is generated.
Access to the website and server log data
When you access this website, technically necessary information is transmitted to the server. This may include information about the browser and operating system used, the date and time of access, the page accessed and the IP address.
IP addresses in the server log files are anonymised.
Log data is used solely for technical operation, security and troubleshooting. Visitor behaviour is not analysed for analytics or marketing purposes.
Server log data is stored for seven days and then deleted.
Processing is based on my legitimate interest in the secure, reliable and functional operation of this website pursuant to Art. 6(1)(f) GDPR.
How I use your data
I process personal data only to the extent necessary to operate this website and communicate with you.
If you contact me via the contact form, by email or by telephone, I use the information you provide solely to deal with your enquiry and to communicate with you.
Where your enquiry relates to entering into a contract or to a specific service, processing is based on Art. 6(1)(b) GDPR. In other cases, processing is based on my legitimate interest in responding to your enquiry and communicating with you pursuant to Art. 6(1)(f) GDPR.
The processing of technically necessary data when visiting this website is based on my legitimate interest in the secure, reliable and functional operation of the website pursuant to Art. 6(1)(f) GDPR.
I do not use your data for automated decision-making or profiling and I do not use it for personalised advertising.
Cookies and tracking
No analytics, marketing or tracking services are used on this website.
Your usage behaviour is not analysed for advertising or marketing purposes.
Data security
I take appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
Data transmitted through this website is encrypted using HTTPS (SSL/TLS).
Provision of the website and server operation
This website and the associated email communication are operated on a virtual server hosted by Host Europe.
The server is technically administered by SmileSoft, owner Gunter Engelbrecht.
As part of server operation, technically necessary data may be processed, in particular connection data and server log data.
Where necessary for technical operation, maintenance, security or troubleshooting, access to data may be possible as part of technical administration.
Processing is carried out for the secure and reliable provision of this website and its associated technical infrastructure on the basis of Art. 6(1)(f) GDPR.
Retention period
I retain personal data only for as long as necessary for the respective purpose or for as long as statutory retention obligations or other lawful grounds for further storage apply.
Data from contact enquiries is deleted once the enquiry has been fully dealt with and no further communication is expected, unless statutory retention obligations or other lawful grounds require further storage.
Contact details stored in my address book for ongoing or foreseeable further communication are retained only for as long as they are required for this purpose.
When the purpose of storage no longer applies, the contact details are deleted unless statutory retention obligations or other lawful grounds require further storage.
Information relating to agreed appointments is also retained only for as long as necessary for appointment organisation, our cooperation or compliance with legal obligations.
Your rights
Subject to the applicable legal requirements, you have the right to obtain information about the personal data stored about you and to request rectification, erasure or restriction of processing.
Where the legal requirements are met, you also have the right to data portability.
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with the applicable legal requirements.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
You also have the right to lodge a complaint with a data protection supervisory authority.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority in Spain is the Agencia Española de Protección de Datos (AEPD).
Further information can be found at www.aepd.es.