Privacy

Controller

Good Disorder - Miriam Everding & Alexandra Martin GbR, Fürstenwall 41, 40219 Düsseldorf, Germany.

Authorised partners

Miriam Everding and Alexandra Martin

Hosting with Netlify

For hosting this website, Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA, may process technically necessary connection and access data when a page is requested, including the IP address, time of access, requested resource, browser and device information, referrer and HTTP status.

The purpose is secure, stable and technically reliable delivery of the website. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of this website.

Recipients may include Netlify and the infrastructure and security providers it uses to deliver the hosting service. Processing may take place outside the European Economic Area, including in the USA. Netlify publishes a Data Processing Agreement (DPA). Its transfer provisions refer to the EU–US Data Privacy Framework where applicable and to EU Standard Contractual Clauses where that framework does not apply. The agreement applicable to the hosting account and the scope of the relevant safeguards determine which provisions apply; a link to the standard DPA alone does not establish a concluded agreement.

Access and security logs are retained only for as long as needed to deliver the service, investigate technical or security incidents, or meet applicable retention requirements. Logs no longer needed for those purposes are to be deleted under the hosting service’s deletion processes. No fixed retention period for every category of hosting data is stated here. You can contact us for information about the applicable transfer safeguards.

Email via Gmail

We use a standard consumer Google / Gmail account for gooddisorder@gmail.com. Google does not act as our processor for this consumer service and does not provide a data processing agreement for it. Alex and Miriam handle incoming enquiries. Sending an email transmits your address, message, any attachments and technical mail metadata through the email providers involved, including Google. Merely visiting this website does not connect your browser to Gmail.

Google may process email data on infrastructure outside the EEA. Its Privacy Policy describes the relevant Google entities, processing and international transfer safeguards. Correspondence is deleted when no longer needed for the enquiry, subject to applicable retention duties and the email service’s deletion and backup processes.

Contacting us

When you contact us, we process your email address, the content of your message and information you choose to provide to respond to your enquiry. Where your enquiry concerns a purchase or steps before a purchase, processing is based on Article 6(1)(b) GDPR. For other ordinary business enquiries, it is based on our legitimate interest in responding to correspondence under Article 6(1)(f) GDPR, subject to the required balancing of interests.

Please do not send completed food, health or financial trackers when requesting routine support. Remove personal details from screenshots where possible.

Phone enquiries

When you contact us by phone, we process the information you provide and your phone number, where transmitted, to handle your enquiry. For contract-related enquiries or steps prior to a contract, the legal basis is Article 6(1)(b) GDPR. For other business enquiries, we rely on our legitimate interest in appropriate communication under Article 6(1)(f) GDPR. The retention criteria for correspondence below apply.

Retention of correspondence

We delete ordinary enquiries when the purpose of handling them no longer applies. We retain information beyond that point only where a specific statutory obligation requires it or where it is needed to establish, exercise or defend legal claims. Business correspondence and accounting records are retained separately under the rules applicable to those records. This does not mean that every email is kept for the same fixed period.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then stop processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You can exercise this right using the contact details below.

Providing information

Email contact is voluntary. Without a reply address and enough information about your enquiry, we may be unable to respond. Technical connection data is needed to deliver requested website files. We do not use automated decision-making or profiling on this website.

Website features

This website has no analytics, advertising pixels, newsletter forms, user accounts, chatbot or active sales or payment functions. Its pages do not use cookies, localStorage, sessionStorage or IndexedDB. Fonts and illustrations do not load from external services. Email and phone links open the corresponding application on your device; they do not submit a form to this website. External information links connect to the linked provider only when you follow them. Your browser may keep ordinary cached website files; we do not use that cache to identify or track you.

HTTPS and email security

When you access this website over HTTPS, the connection between your browser and the website is encrypted in transit. You can check the connection information in your browser. This does not provide end-to-end encryption for a separate email you send to us; ordinary email may involve several providers. Please avoid sending sensitive personal information by ordinary email.

Your rights

Subject to the applicable legal conditions, you may request access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of earlier processing.

You may lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence, place of work or alleged infringement. For North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; poststelle@ldi.nrw.de.

Contact

Phone: +49 175 2076514
Email: gooddisorder@gmail.com