Privacy Policy (Datenschutzerklärung)
Last updated: 28 October 2026
1. Introduction
I take the protection of your personal data seriously. This Privacy Policy explains how personal information is collected, used, stored and protected when you visit this website, contact me or enquire about my consulting and professional services.
Personal data means information relating to an identified or identifiable individual.
I process personal data in accordance with the European Union General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection laws.
2. Data Controller
The person responsible for processing personal data through this website is:
Chantelle Maree
Trading as: Chantelle Maree
Gingsterstrasse 10A
18573 Samtens
Germany
Email: chantelle@chantellemaree.com
Website: https://chantellemaree.com
For questions about this Privacy Policy or requests concerning your personal data, please contact me using the email address above.
3. Personal Data Collected
Depending on how you interact with this website, the following categories of personal data may be processed:
Name and email address submitted through the contact form.
Information voluntarily included in enquiries or correspondence.
Technical information such as IP address, browser type, device information, access dates and website usage data.
Information associated with booking a consultation through Calendly.
Cookie preferences and information processed through website technologies, where applicable.
I collect and process personal data only where necessary for the relevant purpose.
Please avoid submitting sensitive personal information through the general contact form unless necessary.
4. Contact Form and Email Enquiries
When you submit an enquiry through the website contact form or contact me by email, I process the information you provide to respond to your request, discuss potential services and, where appropriate, prepare or manage a professional engagement.
The legal basis for this processing is:
Article 6(1)(b) GDPR, where processing is necessary to take steps at your request before entering into a contract or to perform a contract.
Article 6(1)(f) GDPR, where processing is necessary for my legitimate interest in responding to professional enquiries and maintaining business communications.
Your enquiry information is not automatically used to subscribe you to marketing emails.
Information is retained for as long as reasonably necessary to respond to the enquiry, manage relevant follow-up and comply with applicable legal obligations. Where an enquiry results in a business relationship, relevant records may be retained for longer.
Providing your name, email address and enquiry details is voluntary. However, without sufficient contact information, I may be unable to respond.
5. Website Hosting and Squarespace
This website is created and hosted using Squarespace.
Squarespace provides the technical infrastructure required to display the website, maintain its functionality and security, and process information submitted through website forms.
When you access the website, technical information may be processed, including:
IP address.
Browser and device information.
Date and time of access.
Pages requested.
Technical information necessary for website operation and security.
This processing is based on Article 6(1)(f) GDPR, reflecting my legitimate interest in operating a secure and functional website.
Where Squarespace processes personal data on my behalf, the applicable contractual data protection terms govern that processing.
Squarespace may also process certain information for its own purposes, as described in its privacy documentation.
Further information:
https://www.squarespace.com/privacy
6. Cookies and Similar Technologies
This website uses cookies and similar technologies provided by Squarespace to support website functionality, security and visitor preferences.
Essential cookies may be used where necessary for the operation of the website.
Squarespace also offers analytics cookies and other technologies that can be used to understand website traffic and visitor interactions. Depending on the website configuration, these may include cookies such as ss_cid, ss_cpvisit, ss_cvisit, ss_cvr and ss_cvt.
Where cookies or comparable technologies are not strictly necessary and consent is legally required, their use is subject to the visitor's prior consent.
The applicable legal framework includes Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and, where personal data is processed on the basis of consent, Article 6(1)(a) GDPR.
Visitors can manage or withdraw their consent through the website's cookie preference controls, where those controls are available.
Further information about Squarespace cookies:
https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses
7. Website Analytics
This website uses Squarespace Analytics to understand website traffic, visitor interactions and the performance of website content.
Depending on the website configuration and visitor consent, the information processed may include:
Page views and pages visited.
Website traffic sources.
Device and browser information.
Approximate geographic location.
Visitor interactions.
Technical identifiers and cookie information, where applicable.
The purpose of this processing is to evaluate website performance, improve usability and understand which content and services are of interest to visitors.
Where analytics involve non-essential cookies or comparable tracking technologies requiring consent, the legal basis is Article 6(1)(a) GDPR, together with the applicable provisions of the TDDDG.
Squarespace analytics cookies have different storage periods. Some session-related cookies expire after a short period, while certain visitor identification cookies may remain for longer periods. Cookie lifetimes are distinct from the retention periods for analytics reports and technical records.
Where Squarespace's individual visitor Activity Log is enabled, additional visit information may be processed in accordance with Squarespace's applicable retention settings.
Further information:
Squarespace Privacy Policy:
https://www.squarespace.com/privacy
Squarespace Data Processing Addendum:
https://www.squarespace.com/dpa
Squarespace Cookies:
https://support.squarespace.com/hc/en-us/articles/360001264507-The-cookies-Squarespace-uses
8. Online Appointment Booking (Calendly)
This website provides an external link to Calendly, an online appointment scheduling service operated by Calendly LLC, United States.
When you click the booking link, you are redirected to Calendly's website. No Calendly booking calendar is embedded directly into this website.
When you schedule an appointment, the following personal data may be collected and processed:
Name and email address.
Selected appointment date and time.
Time zone.
Additional information voluntarily provided during booking.
Technical information necessary to operate the scheduling service.
This information is processed to schedule, organise and manage appointments, communicate with you about bookings and prepare for consultations.
The legal basis is Article 6(1)(b) GDPR where the appointment relates to a potential or existing contractual relationship. In other cases, Article 6(1)(f) GDPR may apply, reflecting my legitimate interest in organising professional appointments efficiently.
Calendly processes relevant booking information on my behalf under its applicable data processing terms. Calendly may also process information for its own purposes, as explained in its privacy documentation.
Personal data submitted through Calendly may be processed in the United States and other countries where Calendly or its service providers operate.
Booking information is retained for as long as necessary to organise appointments, maintain relevant business correspondence and meet applicable legal obligations. Calendly may retain certain information under its own retention policies.
When visiting Calendly's website, its privacy and cookie information applies.
Further information:
Calendly Privacy Notice:
https://calendly.com/legal/privacy-notice
Calendly Data Processing Addendum:
https://calendly.com/legal/data-processing-addendum
9. External Links and Social Media
This website may contain links to external platforms, including LinkedIn, Calendly and other professional websites.
When you follow an external link, you leave this website. The relevant third party may process personal data in accordance with its own privacy policy.
I do not control the data processing practices of external websites.
If third-party content or social media features are embedded directly into this website, additional personal data processing may occur and may require further privacy disclosures.
10. Recipients of Personal Data
Personal data may be disclosed to service providers where necessary to operate this website, manage communications, arrange appointments, provide professional services or comply with legal obligations.
The principal service providers used in connection with this website are:
Squarespace: Website hosting, contact form functionality and website analytics.
Google Workspace: Business email and communication management.
Calendly: Online appointment scheduling and booking management.
Personal data may also be disclosed to professional advisers or competent public authorities where necessary and legally permitted or required.
Where service providers act as processors on my behalf, the applicable contractual data protection arrangements govern their processing.
I do not sell personal data.
11. International Data Transfers
Some service providers used in connection with this website and my business communications may process or access personal data outside the European Union (EU) and European Economic Area (EEA), including in the United States.
Squarespace — Website Hosting and Analytics
Squarespace provides website hosting, contact form functionality and website analytics.
Personal data may be processed in the United States and other countries where Squarespace or its authorised subprocessors operate.
Squarespace's international data transfer arrangements include reliance on the EU–US Data Privacy Framework where applicable and contractual safeguards, including Standard Contractual Clauses, where required.
Further information:
https://www.squarespace.com/privacy
https://www.squarespace.com/dpa
Calendly — Appointment Scheduling
Calendly provides appointment scheduling through an external booking link.
When you book an appointment, personal information may be processed in the United States.
Calendly's international transfer arrangements include the EU–US Data Privacy Framework where applicable and Standard Contractual Clauses where required.
Further information:
https://calendly.com/legal/privacy-notice
https://calendly.com/legal/data-processing-addendum
Google Workspace — Business Email
I use Google Workspace to manage business email communications, including enquiries received through this website.
Personal data processed through Google Workspace may include names, email addresses, message contents, attachments and related communication information.
Google Workspace data may be processed in the United States and other countries where Google or its authorised subprocessors operate.
Google's applicable data transfer arrangements include the EU–US Data Privacy Framework where applicable and contractual safeguards, including Standard Contractual Clauses.
Further information:
https://policies.google.com/privacy/frameworks
https://cloud.google.com/terms/data-processing-addendum
Legal Safeguards
Where personal data is transferred outside the EU/EEA, applicable legal mechanisms may include:
Adequacy decisions under Article 45 GDPR, including the EU–US Data Privacy Framework for eligible certified organisations.
Appropriate safeguards under Article 46 GDPR, including European Commission-approved Standard Contractual Clauses.
For further information about applicable international transfer safeguards, including how to obtain information about relevant contractual protections, please consult the provider documentation linked above or contact me at chantelle@chantellemaree.com.
12. Data Retention
I retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
The applicable retention periods or criteria depend on the nature and purpose of the processing:
Contact enquiries: Retained for the period reasonably necessary to respond to the enquiry, manage follow-up and address related business correspondence.
Business and contractual records: Retained for the duration of the relevant business relationship and, where applicable, statutory retention periods under German commercial or tax law.
Appointment information: Retained as necessary to organise appointments and manage related communications, subject to any applicable legal obligations.
Website technical and analytics information: Retained according to the relevant service provider's settings and applicable retention arrangements.
Consent information: Where recorded, retained for the period necessary to manage preferences and demonstrate compliance with applicable data protection requirements.
When personal data is no longer necessary and no legal obligation or other lawful basis requires continued retention, it will be deleted or anonymised.
13. Your Rights Under the GDPR
Subject to applicable legal requirements, you have the following rights concerning your personal data:
Right of access (Article 15 GDPR): Request information about the personal data processed about you.
Right to rectification (Article 16 GDPR): Request correction of inaccurate or incomplete personal data.
Right to erasure (Article 17 GDPR): Request deletion of personal data where the legal requirements are met.
Right to restriction of processing (Article 18 GDPR): Request restriction of processing in certain circumstances.
Right to data portability (Article 20 GDPR): Receive or transfer certain personal data in a structured, commonly used and machine-readable format, where applicable.
Right to object (Article 21 GDPR): Object to processing based on legitimate interests on grounds relating to your particular situation. Where personal data is processed for direct marketing, you have the right to object to that processing at any time.
Right to withdraw consent (Article 7(3) GDPR): Withdraw consent at any time where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, please contact:
You also have the right to lodge a complaint with a competent data protection supervisory authority.
The supervisory authority for Mecklenburg-Vorpommern is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit Mecklenburg-Vorpommern
Website: https://www.datenschutz-mv.de/
You may also contact another competent supervisory authority where permitted under the GDPR.
14. Data Security
I take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or unlawful processing.
These measures include secure website connections, appropriate access controls and reasonable safeguards for business communications and stored information.
No method of electronic transmission or storage can be guaranteed to be completely secure.
15. Automated Decision-Making
I do not use personal data collected through the website contact form to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
16. Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in legal requirements, website functionality, service providers or data processing practices.
The latest version will be published on this page with an updated revision date.
For questions about this Privacy Policy, please contact: