Privacy Policy

1. Controller

Email: info@goddesskara.com

WhatsApp: +49 174 584 9273
WhatsApp messages only, no calls.

2. Website Provision and Hosting

This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Deutschland.

The hosting provider processes the data technically required to deliver the website and enable secure and stable operation. ALL-INKL.COM is used as a processor. The processing is based on Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and functional provision of the website.

3. Server Log Files

When the website is accessed, the web server may process the following data in particular:

• IP address of the accessing device,
• date and time of access,
• page or file accessed,
• access status and amount of data transferred,
• previously visited page or referrer, if transmitted,
• browser type, browser version, operating system and language settings.

The processing is necessary to provide the website, detect technical errors and defend against attacks or abusive access. The data is not evaluated for advertising or tracking purposes.

Log data is deleted when it is no longer required for these purposes. ALL-INKL.COM states that regular web server log files are deleted after no more than seven days. Longer storage may be necessary in individual cases if a specific security incident or abuse must be investigated.

4. SSL/TLS Encryption

The website is provided via an encrypted HTTPS connection. This protects data against unauthorised interception while it is being transmitted between the browser and the web server. It does not cover further processing by external services that a user opens themselves.

5. Cookies, Tracking and External Embeds

The website does not set its own cookies and does not use analytics, visitor or advertising tracking, or tracking pixels. No external fonts, JavaScript libraries or images are loaded. Social media feeds, videos and comparable content from external platforms are not embedded.

The images and scripts used on the website are provided locally. The only on-demand external data connection made while reading the website is the retrieval of tour and studio data described in Section 7.

6. Age Confirmation in Session Storage

When the age prompt is confirmed, the browser stores the entry gk-age-ok with the value 1 in sessionStorage. Its sole purpose is to prevent the age prompt from being displayed again during the same browser session.

The entry contains no name, contact details or unique user identifier. It is not transmitted to the web server or to third parties and is not used for analytics or advertising. Session storage is normally deleted when the browser session ends.

7. Tour and Studio Data via Google Sheets

Tour and studio data is not loaded when the website is first accessed. Only when the “Tours” page is opened for the first time within a page instance does the browser retrieve two CSV files from Google Sheets. When the Tours page is opened again within the same page instance, the data already loaded is reused.

For users in the European Economic Area, the provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

During retrieval, the IP address, time, browser and device information and technical information relating to the request may be transmitted to Google. Form entries and the contents of a session request are not transmitted to Google Sheets.

The processing serves to display current tour dates and studio information. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the current and low-maintenance provision of this information. Retrieval only takes place when the Tours page is actually opened.

8. Local Processing of the Session Request

Entries in the request form are initially processed exclusively locally in the browser. The website does not transmit the form to the web server, does not store the entries in a database, cookies, localStorage or sessionStorage, and does not send them to Google Sheets, analytics or advertising services.

Preferences and taboos are voluntary fields. If information is entered in these fields, separate, explicit consent is required before a WhatsApp or email request is prepared. The existing confirmation regarding legal age and booking information is separate from this consent.

A formatted request is generated locally from the entries. The content is transmitted only when the user personally sends the message through the selected communication service. The form is not automatically reset after preparation.

9. Contact via WhatsApp

After successful validation of the required fields and consent, the browser copies the formatted request locally to the clipboard. The website then opens only https://wa.me/491745849273. Form data is not passed to WhatsApp by the website as a URL parameter or in any other way.

The user must paste the copied text into WhatsApp themselves, may review or edit it there, and must send the message themselves. Only then are the message and associated communication data processed by WhatsApp and the communication providers involved. The use of WhatsApp is voluntary; contact by email is available as an alternative.

10. Contact via Email

For the email process, the website creates a mailto: link exclusively locally, containing the business email address, subject and prepared message text. If configured on the device, this opens the email application or configured email service.

The website does not send an email automatically. The user may review or change the prepared message and must send it themselves. During transmission, the data is processed by the email provider used and the mail servers involved. Depending on the selected service and transmission path, email communication is not necessarily protected by end-to-end encryption throughout.

11. Processing of Messages Received

If a message is actually sent by WhatsApp or email, the following data in particular may be processed: name or pseudonym, telephone number, WhatsApp identifier or email address, location, requested date and time, requested duration, level of experience, voluntary introduction and other message content provided voluntarily.

Regular Session Request

Information required to process and communicate about the request and to take steps prior to entering into, and where applicable perform, a session contract is processed on the basis of Art. 6(1)(b) GDPR.

Voluntary Information on Preferences and Taboos

Information on preferences and taboos may concern special categories of personal data. It is processed only when it is provided voluntarily and explicitly authorised using the separate checkbox. The legal basis is Art. 9(2)(a) GDPR.

Consent may be withdrawn at any time with effect for the future, for example by sending an email to info@goddesskara.com. The lawfulness of processing carried out before withdrawal remains unaffected. Withdrawal does not affect processing that is required independently of consent to handle the remainder of the session request or to comply with a legal obligation.

12. External Links and Wish Lists

The website contains standard external links, including links to WhatsApp, Amazon, Throne and external studios and profile pages. This content is not embedded. The relevant platform is opened only when an external link is clicked.

In this process, the IP address, time, browser information and a referrer may be processed. The privacy information of the respective platform operator applies to subsequent processing.

13. Recipients and Possible Third-Country Processing

Depending on the function used, personal data may be processed by ALL-INKL.COM as hosting processor, Google during the on-demand retrieval of tour data, the email provider used and mail servers involved, WhatsApp when a message is personally sent, or external platforms after a link is clicked.

For internationally active services, processing outside the European Union or European Economic Area cannot be ruled out. The respective providers’ current privacy information and transfer mechanisms apply to such processing. The website transmits form data neither to Google Sheets nor via the WhatsApp URL.

14. Deletion and Retention

Personal data is not retained for longer than required for the respective purpose. In particular, the following criteria apply:

• Requests that do not result in a business relationship are deleted once they have been conclusively processed and no legitimate grounds for further retention exist.
• Data relating to steps prior to entering into a contract or to a contractual relationship is deleted once it is no longer required for performance and evidence.
• Statutory retention obligations remain unaffected.
• Longer retention is possible where required for the establishment, exercise or defence of legal claims.
• Following an effective withdrawal, information processed on the basis of consent is deleted unless another legal basis or statutory obligation prevents deletion.

15. Rights of Data Subjects

Subject to the applicable statutory requirements, data subjects have the following rights in particular:

• right of access under Art. 15 GDPR,
• right to rectification under Art. 16 GDPR,
• right to erasure under Art. 17 GDPR,
• right to restriction of processing under Art. 18 GDPR,
• right to data portability under Art. 20 GDPR,
• right to object under Art. 21 GDPR,
• right to withdraw consent with effect for the future,
• right to lodge a complaint with a supervisory authority under Art. 77 GDPR.

To exercise these rights, it is sufficient to send a message to info@goddesskara.com.

16. Right to Lodge a Complaint

Data subjects may lodge a complaint with a data protection supervisory authority. For the controller’s registered address in Berlin, this may in particular be the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, email: mailbox@datenschutz-berlin.de.

A complaint may also be lodged with the data protection supervisory authority at the data subject’s habitual residence, place of work or the place of the alleged infringement.

17. Authoritative Version

This English version is provided for convenience. In the event of any discrepancy, the German version shall prevail.

Last updated: August 2026