This Privacy Policy is provided in English for the convenience of our visitors. The original version is available in German. In the event of any inconsistencies, the German version shall prevail.
Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
This Privacy Policy explains what personal data we collect, how we use it, and what happens to it when you visit or interact with this website.
Personal data means any information that can be used to identify you, either directly or indirectly.
Who we are
The owner and operator of this website,
https://hookedonhakelmaschen.com
is
Edith Horn
Aschaffenburger Weg 2
64832 Babenhausen
Germany
Email: hookedonhakelmaschen@gmail.com
Edith Horn is the data controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR).
Hosting
Our website is hosted on WordPress.com. The hosting service is provided by Automattic. Automattic Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin D02 AY86, Ireland, is responsible for the European region.
Where personal data is transferred to the United States, this is done using appropriate safeguards in accordance with Article 46 of the GDPR, in particular the EU Standard Contractual Clauses (SCCs). Automattic is also certified under the EU–U.S. Data Privacy Framework (DPF).
As part of its hosting services and the technical infrastructure used to operate this website, Automattic processes certain information about visitors.
This processing is necessary to ensure the secure and reliable operation of the website. Automattic also uses certain information to generate anonymised visitor statistics.
This processing is based on Article 6(1)(f) GDPR, which permits processing where it is necessary for the purposes of legitimate interests, such as ensuring the secure and reliable operation of the website and preventing misuse.
Services used on this website
Our website uses the following services provided by Automattic:
- WordPress.com — to create, maintain, operate and host this website
- Jetpack — provides security features, visitor statistics and data management tools
- Akismet — an anti-spam service used to detect spam comments
We also use the following services on our website:
- Google Analytics (GA4) — a web analytics service used to generate statistics
- CookieYes — a consent management platform used to manage and document consent
Our website uses SSL/TLS encryption for data transmission.
Statistics
We use the visitor statistics provided by Jetpack Site Stats to better understand how our website is used. These anonymised statistics show, for example, how often individual pages are visited and from which countries visitors access our website.
We use this information solely to analyse and improve our website.
Further information about how these services process personal data is available here:
Information we collect
When you visit our website, we collect different types of information.
Some of this information is provided directly by you, for example when you:
- subscribe to our blog
- leave a comment
- contact us by email
Other information, mainly technical data (such as your browser type, operating system or the date and time of your visit), is collected automatically when you access our website.
Information you provide
Depending on how you use our website, your personal data is processed on the basis of Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Article 6(1)(f) GDPR (legitimate interests).
Subscribe to our blog
You can subscribe to our blog to receive email notifications whenever we publish a new blog post.
To subscribe, you must provide a valid email address. Your email address is not publicly visible but is displayed in the administration area of our website so that we can manage your subscription.
You can unsubscribe at any time by using the unsubscribe link included in every notification email.
Comments
You can leave comments on posts and pages on our website. When you do, we collect your comment as well as your name and email address.
You may also choose to:
- add a link to your own website (your comment will then be linked to that website),
- receive email notifications about new blog posts (your email address, name and, where applicable, your Gravatar profile information will be available to us in the administration area of our website to manage your subscription),
- receive email notifications about new comments, or
- save your details (name, email address and website) in your browser for future comments. If you choose this option, cookies will also be stored (see Cookies and other technologies below).
An anonymised string (also known as a hash) may be created from your email address and sent to the Gravatar service to determine whether you have a Gravatar profile. If you do, your Gravatar name and profile picture may be displayed publicly once your comment has been approved.
Comments are checked for spam using Akismet. A notice below the comment form contains a link to the Akismet Privacy Policy for further information.
Comments and their associated metadata are stored indefinitely. This allows follow-up comments to be recognised and approved automatically without being held in a moderation queue.
Contacting us
You can contact us at any time using the email address provided on our Contact page.
To process your enquiry, we use the information you provide, in particular your email address, your name (if provided) and the content of your message.
Your data will be used solely for the purpose of responding to your enquiry. It will be deleted once it is no longer required for this purpose, unless we are required by law to retain it.
Information collected automatically
Depending on how you use our website, this data is processed on the basis of Article 6(1)(f) GDPR (legitimate interests) and Article 6(1)(a) GDPR (consent).
Technical data
This includes information provided automatically by web browsers, mobile devices and servers, such as your IP address, browser type, device identifier, and the date and time of your visit.
Interactions
Interactions include actions you take on our website, such as leaving a “Like” or a “Rating”.
Location information
The approximate location of your device may be determined from your IP address. This information is used to compile anonymised visitor statistics (Jetpack Site Stats), for example to show how many visitors access our website from different countries.
Spam protection with Akismet
The Akismet anti-spam service processes information about visitors who leave comments on our website. This includes the commenter’s IP address, user agent, referrer and website URL.
Cookies and other technologies
A cookie is a small piece of information that a website stores on your computer or device and that your browser sends back to the website each time you return.
Pixel tags (also known as web beacons) are small pieces of code that can be placed on websites.
Web server logs are retained for approximately 30 days. They may include information such as your IP address, browser type, operating system and approximate location. This information is used to investigate technical issues affecting the website.
Google Analytics
The legal basis for the use of Google Analytics 4 is your explicit consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.
To analyse the use of our website and optimise our online services, we use Google Analytics (GA4) on our website.
Google Analytics 4 is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google).
To analyse the use of our website, for example the pages visited, the duration of visits, the operating system used and the approximate location of visitors, Google Analytics uses cookies and similar technologies.
You give us your consent to this voluntarily via the cookie consent banner integrated into our website.
You can withdraw your consent at any time with effect for the future by accessing the cookie settings via the consent banner on our website and withdrawing your consent to the “Analytics” category.
For users in the European Union, the European Economic Area, Switzerland and the United Kingdom, IP addresses are not logged or stored by Google. The IP address is used solely to determine approximate location information when the data is collected and is then discarded.
The user- and event-level data stored in Google Analytics is automatically deleted by Google after a retention period of 14 months.
The processing of data is carried out on the basis of a data processing agreement (DPA) concluded with Google pursuant to Article 28 GDPR.
Further information about data protection and the terms of use of our service provider can be found at:
CookieYes
The collection and storage of data is based on Article 6(1)(c) GDPR (compliance with a legal obligation).
We use the CookieYes consent management tool on our website.
The consent management tool helps us to obtain, manage and document the legally required consent for the use of cookies and tracking technologies on our website. In addition, CookieYes controls that technically non-essential cookies are only loaded after you have given your consent.
The service provider is CookieYes Limited, 3rd Floor, 120 Baker Street, London, W1U 6ED, United Kingdom.
When you interact with our cookie banner, the following information is transmitted to and processed by CookieYes:
- your masked IP address
- your consent status (e.g. which cookie categories you have accepted)
- the date and time of consent / refusal
- the country from which the website was accessed
- a unique, randomly generated consent ID
The consent ID, together with the consent status, country, and date and time of the action, is stored in the consent management tool accessible to us.
The processing and storage of data is carried out on the basis of the data processing agreement (DPA) concluded with CookieYes pursuant to Article 28 GDPR. As the service provider is based in the United Kingdom, the transfer of data is based on the EU Commission’s existing adequacy decision for the United Kingdom.
The consent data collected as part of consent management is processed and stored by CookieYes for the duration of the contractual relationship in accordance with the applicable contractual and plan-specific provisions. After termination of the service, the data is deleted in accordance with the provisions of the data processing agreement with CookieYes.
Further information about the processing of personal data as part of the data processing relationship can be found in the CookieYes Data Processing Agreement (DPA).
Data Processing Agreement (DPA)
Sharing of data
Automattic
Automattic may share personal data with affiliated companies and service providers where this is necessary to provide its services. Such sharing takes place only on the basis of appropriate data protection agreements.
In addition, visitor information may be disclosed in response to a court order or other lawful request from a public authority. Further information about how Automattic responds to requests for information can be found in its Legal Guidelines.
Google Ireland Limited uses Google LLC in the United States (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
Where personal data is transferred to the United States as part of the use of Google Analytics, the transfer of data is carried out using the applicable data protection mechanisms provided for this purpose. Google LLC is certified under the EU–U.S. Data Privacy Framework (DPF). Where necessary, the Standard Contractual Clauses approved by the European Commission are also used.
Hooked on Häkelmaschen
Where personal data becomes available to us through the operation of our website or through our communication with you, we use it solely for the purpose for which it was collected. We do not share such data with third parties unless we are legally required to do so or unless this is necessary to process your request.
Data retention
Unless a different retention period is specified elsewhere in this Privacy Policy, personal data will generally be deleted once it is no longer needed for the purpose for which it was collected and processed.
Any mandatory statutory retention obligations remain unaffected.
Your rights as a data subject
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data processed by us:
- Right of access (Article 15 GDPR) to the personal data we process about you.
- Right to rectification (Article 16 GDPR) of inaccurate or incomplete personal data.
- Right to erasure (Article 17 GDPR), provided that no statutory retention obligations prevent deletion.
- Right to restriction of processing (Article 18 GDPR).
- Right to data portability (Article 20 GDPR), allowing you to receive your personal data in a structured, commonly used and machine-readable format.
- Right to withdraw your consent (Article 7(3) GDPR) at any time with effect for the future.
Right to object
in accordance with Article 21 GDPR
Where your personal data is processed on the basis of our legitimate interests (Article 6(1)(f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation.
Right to lodge a complaint with a supervisory authority
in accordance with Article 77 GDPR
If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
In particular, you may exercise this right before the supervisory authority in the Member State or, where applicable, the federal state of your habitual residence, your place of work or the place of the alleged infringement.
The Federal Commissioner for Data Protection and Freedom of Information (BfDI) provides a list of contact details at https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
Legal basis for processing
The processing of personal data is based on different legal grounds under the General Data Protection Regulation (GDPR), depending on how you use our website. These include, in particular:
- Your consent (Article 6(1)(a) GDPR), for example where you consent to the use of certain cookies.
- The fulfilment of a legal obligation (Article 6(1)(c) GDPR), for example for documenting and providing evidence of consent given.
- The performance of a contract or the processing of your request (Article 6(1)(b) GDPR), for example when you contact us by email.
- Our legitimate interests (Article 6(1)(f) GDPR), for example in ensuring the secure and reliable operation of our website, preventing spam and maintaining technical security.
Where additional legal bases apply in individual cases, these are explained in the relevant sections of this Privacy Policy.
September 2026
The information about the individual services is based on the official privacy notices of Automattic, Google Analytics and CookieYes. It has been adapted accordingly for this website.
