Data Protection

Privacy Policy

 

1. General Information

The protection of your personal data is a top priority for me. This Privacy Policy explains how I collect, use, and protect your personal data when you visit this website, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

 

2. Controller

The controller responsible for data processing on this website is:

Christiane Bode

Rua da Constituição 243 4T, 4200-198 Porto, Portugal

Email: hi@christianebode.com

Phone: +49 15678 586676

 

3. Data Collection on This Website

Server Log Files

The hosting provider of this website automatically collects and stores certain information in server log files that your browser transmits automatically. These include:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring the technical stability, functionality, and security of the website.

Retention: This data is stored for 30 days and is then automatically deleted, unless it is needed for evidentiary purposes in the event of an attack on the website’s infrastructure.

Contact via Email or Contact Form

If you contact me — by email or via the contact form — the personal data you provide (e.g., name, email address, message content) will be stored for the purpose of processing your inquiry and in case follow-up questions arise. This data is not shared with third parties without your consent.

Legal basis: Art. 6(1)(b) GDPR (processing necessary for contractual or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in efficiently handling inquiries directed to me).

Retention: This data will be deleted once your inquiry has been fully resolved and there is no legal obligation to retain it further, unless you object to its erasure or it is needed to establish, exercise, or defend legal claims.

 

4. Cookies

This website only uses strictly necessary cookies — small text files stored on your device that are required for the website to function correctly (e.g., to maintain basic technical operation). No analytics, marketing, tracking, or other non-essential cookies are used.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a functioning website. Because only strictly necessary cookies are used, no consent banner is required under the ePrivacy Directive or GDPR.

You can still configure your browser to notify you when cookies are set, to block them entirely, or to delete existing cookies at any time. Please note that blocking these necessary cookies may affect how the website functions.

If this ever changes — for example, if analytics or marketing cookies are added in the future — this Privacy Policy will be updated accordingly, and a consent mechanism will be implemented where required.

 

5. WordPress & Elementor Functions

Google Web Fonts

This site may use web fonts provided by Google (“Google Fonts”) for consistent, uniform display of text. When you visit a page that uses these fonts, your browser may load them directly from Google’s servers, in which case your browser establishes a connection to Google and your IP address is transmitted to Google.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in a uniform and professional presentation of the website.

If you prefer not to allow this connection, you can disable JavaScript or web font loading in your browser settings, though this may affect how the site is displayed.

Emojis and Other Static Content

Standard WordPress installations may load supplementary content — such as emoji graphics — from external domains (e.g., s.w.org, gstatic.com) to ensure correct rendering across devices. This involves the transmission of your IP address to these servers.

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in providing a fully functional and correctly displayed website.

 

6. Third-Party Recipients and International Data Transfers

Where this website relies on services provided by companies based outside the European Economic Area (EEA) — such as Google — your data may be processed in a country that does not offer the same level of data protection as the EU. Where this occurs, such transfers are carried out on the basis of appropriate safeguards recognized under GDPR (e.g., the EU Standard Contractual Clauses), where applicable.

 

7. Hosting

This website is hosted by an external service provider:

Spaceship, Inc. are [4600 E Washington Street, Suite 300, Phoenix, AZ 85034, USA

The hosting provider processes data such as server log files and other information generated through use of this website on my behalf. Where required by law, this processing is governed by a Data Processing Agreement (DPA) concluded with the provider under Art. 28 GDPR.

 

8. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Erase your data (“right to be forgotten”) (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing based on legitimate interest (Art. 21)
  • Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal

You also have the right to lodge a complaint with a supervisory authority. In Portugal, this is the:

Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt)

To exercise any of these rights, please contact me using the details in Section 2.

 

9. SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content — such as inquiries you send to me — this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” prefix in your browser’s address bar and the padlock icon.

 

10. Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes to the website, legal requirements, or the services used. The current version, as published on this page, always applies.

Last updated: 16 July 2026