PRIVACY

Controller

The controller responsible for data processing on this website is:

Add Some Glitter
Owner: Alina Bülbül
Ottostraße 19
80333 Munich
Germany

Phone: +49 176 31267329
Email: hello@addsomeglitter.com

General information

Protecting personal data is important to me. Personal data is processed on this website only insofar as this is necessary to operate and provide the website, display its content or communicate with me.

Personal data means any information relating to an identified or identifiable natural person.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR) and the applicable data-protection laws.

Hosting and website delivery

This website is operated using Onepage.

Provider:
Onepage GmbH
Hanauer Landstraße 172
60314 Frankfurt am Main
Germany

When the website is accessed, technically necessary connection data may be processed. This may include, in particular, the IP address, date and time of access, requested content, browser and device information and other technical access data.

This processing is necessary to provide the website technically, ensure its stability and security and identify misuse or technical faults.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and efficient provision of this website.

A data processing agreement pursuant to Art. 28 GDPR is in place with Onepage.

According to Onepage, the servers and personal data used for Onepage websites are processed within the European Union. Onepage uses infrastructure services including Amazon Web Services and Google.

Fonts and images

The Fraunces and Inter fonts used on this website are delivered through Onepage infrastructure / onecdn.io. No connection to Google Fonts is established.

Static images used on this website are also predominantly delivered through Onepage infrastructure / onecdn.io.

When these files are delivered, connection data required for the technical transmission, in particular the IP address of the accessing device, is processed.

The processing serves the technically reliable and efficient display of the website and is based on Art. 6(1)(f) GDPR.

Video and media delivery via Cloudinary

Cloudinary is used for the technical provision and optimised delivery of videos and certain media content.

The provider is Cloudinary Ltd. or the relevant affiliated Cloudinary entity.

When media hosted through Cloudinary is accessed, the visitor's browser establishes a connection to Cloudinary's servers. Technically necessary connection data is processed in this context. This includes, in particular, the IP address and standard HTTP and device information.

The integration is used to deliver media efficiently, with high performance and optimised for different devices.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the reliable and high-performance presentation of the visual content of this portfolio website.

Cloudinary uses international infrastructure to provide its services. Personal data may therefore also be processed outside the European Union or European Economic Area. Cloudinary provides information on safeguards for international transfers, including, where applicable, adequacy decisions, the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.

Local storage of functional preferences

This website uses the browser's local storage (“localStorage”) for certain functional preferences.

Only technical or functional settings are stored:

• the language version selected by the visitor (EN or DE)
• technical information used to coordinate audio playback between portfolio videos

This information is used exclusively for the website functionality used by the respective visitor. It is not used for analytics, advertising or profiling and is not transmitted to third parties by the website logic.

According to the current technical implementation, the website itself does not use analytics or marketing cookies.

Analytics and tracking

This website currently does not use external analytics or marketing tracking services such as Google Analytics, Meta Pixel, TikTok Pixel, Hotjar or comparable tracking technologies.

If such services are introduced in the future, this Privacy Policy will be updated accordingly and, where legally required, consent will be obtained before they are activated.

Instagram

This website contains links to my Instagram profile and to individual Instagram posts.

The Instagram post previews displayed on this website are static images stored as website assets. Simply visiting this website does not establish a connection to Instagram through these previews.

Only when a visitor actively clicks an Instagram link is the Instagram website opened. From that point onwards, the privacy policies and data-processing practices of the respective provider apply.

Instagram is a service provided by Meta.

Contact by email or telephone

If you contact me by email or telephone, the information you provide will be processed for the purpose of handling your enquiry and communicating with you.

Depending on the nature of the enquiry, processing is based on Art. 6(1)(b) GDPR where the communication relates to the initiation or performance of a contract, or on Art. 6(1)(f) GDPR for other enquiries. The legitimate interest lies in processing and responding to enquiries.

The data will only be stored for as long as necessary to handle the respective enquiry, unless statutory retention obligations require longer storage.

Contact via WhatsApp

This website provides the option to start a WhatsApp chat via an external link.

Simply visiting my website does not establish a connection to WhatsApp. Only when you actively click the WhatsApp link are you redirected to WhatsApp.

If you subsequently communicate with me via WhatsApp, the information you provide will be processed to handle your enquiry. The privacy policies of WhatsApp / Meta also apply to the use of that service.

Depending on the nature of the communication, processing is based on Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Encrypted connection

This website is delivered via an encrypted HTTPS connection. This helps protect data transmitted between your browser and the website while it is in transit.

Data retention

Personal data is generally processed or stored only for as long as necessary for the respective processing purpose.

Where statutory retention or documentation obligations apply, data may be retained for the legally required period.

For purely technical server and infrastructure information, the respective deletion and retention policies of the processors and infrastructure providers used also apply.

Your rights

Subject to the statutory requirements, you have in particular the following rights:

• right of access to personal data processed about you (Art. 15 GDPR)
• right to rectification of inaccurate data (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability where the statutory requirements are met (Art. 20 GDPR)
• right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
• right to withdraw consent at any time with effect for the future

You also have the right to lodge a complaint with a competent data-protection supervisory authority regarding the processing of your personal data.

Changes to this Privacy Policy

This Privacy Policy may be updated if the services used, the technical implementation of the website or the applicable legal requirements change.

Last updated: September 2026