Privacy Policy

(according to Art. 13 GDPR)

1. Introduction

Your privacy is very important to me. This Privacy Policy explains how I collect, use, and protect your personal data when you visit my website or engage with my services. I process your data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

By using this website, you agree to the terms of this Privacy Policy.

2. Data Controller

The data controller responsible for this website is:

Lisa Marie Simon
Moon Flow Circle
Mendelssohnstraße 84
60325 Frankfurt am Main
Germany
Email: hello@moonflowcircle.com
Website: www.moonflowcircle.com

3. What Personal Data I Collect and Why

a) Website Visits

When you visit this website, the server automatically collects certain data, which is temporarily stored in log files:

  • IP address

  • Date and time of access

  • Name of the accessed page or file

  • Referring website (referrer URL)

  • Browser and operating system used

Purpose:
This data is used to ensure website functionality, optimize performance, and maintain system security.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

b) Contact via Email or Form

When you contact me via email or a contact form, I collect the following data:

  • Name

  • Email address

  • Any additional information you voluntarily provide

Purpose:
To respond to your inquiry and maintain communication.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual or contractual communication)

c) Booking Sessions

I currently accept bookings via direct email or website forms. If you book a session, the following data may be collected:

  • Name

  • Email address

  • Date and time of the session

  • Relevant notes or concerns you share

Purpose:
To manage your booking and prepare for our session.
Legal basis: Art. 6(1)(b) GDPR

d) Payments

If you book a service or purchase a product, payment may be processed through providers like PayPal, Stripe, card payment or direct bank transfer. I do not store your payment details.

Legal basis: Art. 6(1)(b) GDPR (performance of contract)

4. Cookies and Tracking Technologies

This website uses cookies to enhance functionality and performance.

Types of cookies:

  • Essential cookies: Ensure website operation (e.g., session cookies)

  • Optional cookies: Used for statistics or marketing (only with your consent)

You can manage your cookie preferences when you first visit the site and at any time in your browser settings.

Legal basis:

  • Art. 6(1)(f) GDPR for essential cookies

  • Art. 6(1)(a) GDPR for optional cookies (consent)

5. Third-Party Services

This website may use the following tools and providers:

  • Squarespace (hosting and content management)

  • Email provider (e.g., hosted via Squarespace or another provider)

  • Payment processors (PayPal, Stripe)

Data processing agreements (DPAs) are in place according to Art. 28 GDPR. For services based outside the EU/EEA (e.g. Stripe, PayPal), standard contractual clauses or equivalent safeguards apply.

6. Your Rights

Under the GDPR, you have the following rights:

  • Access (Art. 15): Find out what data I store about you

  • Rectification (Art. 16): Correct inaccurate or incomplete data

  • Erasure (Art. 17): Request deletion of your personal data

  • Restriction (Art. 18): Restrict data processing under certain conditions

  • Data portability (Art. 20): Receive your data in a structured format

  • Withdraw consent (Art. 7(3)): You may withdraw consent at any time

  • Lodge a complaint (Art. 77): You may contact a supervisory authority

Supervisory Authority:

The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1, 65189 Wiesbaden
https://datenschutz.hessen.de

7. Data Security

I use technical and organizational measures (TOMs) to protect your data, including SSL encryption on this website. Data is stored securely and access is restricted.

8. Retention Period

I only store your personal data for as long as necessary to fulfill the purposes described above, or as required by law (e.g., tax retention periods).

9. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect legal or service changes. Please review it regularly.

Version: June 2025
Last updated: 4 June 2025