Privacy Policy

Last updated: May 2026

1. Responsible Person

Responsible for data processing on this website:

Lisa Grebenstein

Sunny Day 6 Bl.35 Ap.7

8237 Tankovo

Bulgaria

E-Mail: office.hhm.grebenstein@gmail.com Phone: +359 895 277329

2. General Information on Data Processing

I only process personal data to the extent necessary to provide a functional website and my content and services. Your personal data is only processed with your consent or where processing is permitted by law.

3. Hosting

This website is hosted by:

Hostinger International Ltd. 61 Lordou Vironos str., 6023 Larnaca, Cyprus www.hostinger.com

When the website is accessed, the following data is automatically stored by the hosting provider in server log files:

• IP address of the requesting device

• Date and time of access

• Name and URL of the retrieved file

• Browser type and version

• Operating system

This data is processed for the technical provision and security of the website. The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in the secure and stable operation of the website).

A data processing agreement with Hostinger exists pursuant to Art. 28 GDPR.

4. Cookies

This website uses cookies — small text files stored by your browser on your device.

Technically necessary cookies are used to ensure the basic functions of the website. These cookies are required for the operation of the website and can be disabled in your browser settings, though this may affect functionality. The legal basis is Art. 6 Para. 1 lit. f GDPR.

Additional cookies (e.g. for analytics or marketing) are only set with your explicit consent (Art. 6 Para. 1 lit. a GDPR).

5. Contact by Email

If you contact me by email, the data you submit (in particular your email address and message content) will be stored to process your inquiry. This data will not be shared without your consent.

The legal basis is Art. 6 Para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

6. External Services and Integrations

WhatsApp This website offers a contact option via WhatsApp (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland). If you use WhatsApp to get in touch, the privacy policy of WhatsApp/Meta applies. I recommend reading WhatsApp's privacy policy at www.whatsapp.com/legal/privacy-policy.

Google Fonts / External Fonts If this website loads external fonts or other third-party resources, your IP address may be transmitted to the respective provider. I endeavor to host all resources locally to avoid this.

7. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser address bar changing from "http://" to "https://".

8. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You may request information about the personal data I process.

• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.

• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided no legal retention obligations apply.

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR): You may object to the processing of your data where it is based on Art. 6 Para. 1 lit. f GDPR.

• Right to withdraw consent (Art. 7 Para. 3 GDPR): Any consent given may be withdrawn at any time with effect for the future.

To exercise your rights, please contact: office.hhm.grebenstein@gmail.com

9. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

Competent authority in Bulgaria:

Commission for Personal Data Protection (CPDP) 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria www.cpdp.bg

10. Updates to this Privacy Policy

This privacy policy is currently valid as of: May 2026.

I reserve the right to update this privacy policy in response to changes to the website or amended legal requirements.