Privacy

PRIVACY POLICY 
Last updated: 17 Jan 2026

​

1. Data protection at a glance
General information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Contact details can be found in the section “Controller”.

How do we collect your data?
Some data is collected when you provide it to us (e.g., via a contact form).
Other data is collected automatically or based on your consent when you visit the website (e.g., browser type, operating system, time of page access).

What do we use your data for?
Some data is required to provide the website securely and correctly. Other data may be used—if you consent—to analyze your user behavior and improve the website.

What rights do you have?
You have the right to access, rectification, erasure, restriction of processing, data portability, and to lodge a complaint with a supervisory authority. You can withdraw any consent at any time with effect for the future.

Important: Consent may be required
Certain services (especially analytics and third-party tools) generally require consent under data protection law. This includes in particular: Google Analytics, Google Maps, embedded/plug-in content from Instagram, LinkedIn, ProvenExpert and, depending on implementation, YouTube. You can withdraw your consent at any time via the cookie/consent settings.

​

2. Hosting
WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“WIX”).
WIX is used to create and host our website. When you visit our website, WIX may process technical data (e.g., log data) and store necessary cookies required for displaying the website and ensuring security.
Data may be processed on servers worldwide (including the USA). Transfers to third countries are carried out using appropriate safeguards (e.g., EU Standard Contractual Clauses) pursuant to Art. 46 GDPR or equivalent mechanisms.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable presentation). If consent is requested, processing is based on Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG. Consent can be withdrawn at any time.

​

3. General information
Controller
Eden Kosman
Christburger Str. 9
10405 Berlin, Germany
Phone: +49 178-1970771
Email: kontakt@eden-kosman.de

Retention period
We store personal data only as long as necessary for the respective purpose or as required by law.

Legal bases
Depending on the context, we process data based on:
- Art. 6(1)(a) GDPR (consent)
- Art. 6(1)(b) GDPR (contract / pre-contractual measures)
- Art. 6(1)(c) GDPR (legal obligation)
- Art. 6(1)(f) GDPR (legitimate interest)
Where cookies/similar technologies are used, Sec. 25 TDDDG also applies.

Processors / recipients
We may use service providers as processors (Art. 28 GDPR). Data is shared only if required for contract performance, required by law, justified by legitimate interests, or based on consent.

​

4. Data collection on this website
Cookies
This website uses cookies and similar technologies. Strictly necessary cookies are stored based on Art. 6(1)(f) GDPR (and, where applicable, Sec. 25(2) TDDDG). All other cookies/technologies are used only with your consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG).

Consent management (ConsentManager)
We use a consent management tool (“ConsentManager”) to obtain, manage and document your consent regarding cookies/technologies and external services. This may include your consent status, timestamp and certain technical information (e.g., browser/device data).
Legal basis: Art. 6(1)(c) GDPR (compliance with legal obligations to manage consents) and, where technically required, Sec. 25(2) TDDDG. Where consent is obtained, Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG apply.
You can change your settings at any time via the cookie/consent settings.

Contact form
If you send us inquiries via the contact form, we process the information provided (including contact details) to handle your request.
Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) or Art. 6(1)(f) GDPR (legitimate interest in efficient handling), and/or Art. 6(1)(a) GDPR if consent is requested.

Inquiries by email/phone
If you contact us by email or phone, we process your data to handle your request. Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

5. Analytics
Google Analytics
We use Google Analytics (Google Analytics 4) to analyze the use of our website and improve it. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to third countries (e.g., the USA). Appropriate safeguards (e.g., EU Standard Contractual Clauses) are used.
Google Analytics uses cookies/similar technologies and processes usage data, technical data and potentially a truncated IP address.
Use is based solely on your consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG). You can withdraw your consent at any time via the cookie/consent settings.

​

6. Social media
Social media elements (two-click / Shariff solution)
This website may include elements of social networks (e.g., Instagram, LinkedIn). Where possible, we use a two-click/Shariff solution: a connection to the provider is established only after you activate the element.

Instagram
Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
When activated, a connection to Instagram servers is established and personal data (e.g., IP address, device information) may be processed.
Legal basis: your consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG).

LinkedIn
Provider for users in the EU/EEA/Switzerland: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
If LinkedIn elements are activated (e.g., share/embed), LinkedIn may process data such as IP address, device/browser data and page views. Transfers to third countries (e.g., USA) cannot be ruled out; appropriate safeguards (e.g., Standard Contractual Clauses) are used.
Legal basis: your consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG).

​

7. Review tools
ProvenExpert
We may use widgets/plugins by ProvenExpert (operator: Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin, Germany) to display reviews. When you access pages with ProvenExpert content, a connection to ProvenExpert servers may be established and technical data (e.g., IP address, browser data) may be processed.
Legal basis: your consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG), especially if external content is loaded and/or cookies are used.

 

8. Video conferencing
Zoom
We may use Zoom for online meetings. Provider: Zoom Video Communications, Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA.
Depending on usage, this may involve processing your name, email address, meeting metadata and communication content (audio/video/chat). Transfers to the USA may occur; appropriate safeguards are used.
Legal basis: Art. 6(1)(b) GDPR (contract/pre-contract) and/or Art. 6(1)(f) GDPR (efficient communication). Recordings are made only with an appropriate legal basis, typically consent (Art. 6(1)(a) GDPR).

Microsoft Teams
We may use Microsoft Teams for online meetings. Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (processing may also involve affiliated companies, including in the USA).
Depending on usage, we process name, contact details, meeting metadata and communication content (audio/video/chat). Transfers to third countries may occur; appropriate safeguards are used.
Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR. Recordings are made only with an appropriate legal basis, typically consent.

 

9. Plugins and tools
YouTube (enhanced privacy mode)
We may embed YouTube videos using the enhanced privacy mode. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When playing a video, a connection to YouTube may be established and data may be processed. Transfers to third countries may occur.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and/or, where requested, consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG).

Google Maps
We embed Google Maps (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Use requires processing your IP address. Data may be transferred to the USA; appropriate safeguards are used.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) and/or, where requested, consent (Art. 6(1)(a) GDPR and Sec. 25(1) TDDDG).

 

10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). You also have the right to lodge a complaint with a supervisory authority.
For privacy-related inquiries, please contact: kontakt@eden-kosman.de