1. Controller
The controller responsible for the processing of personal data on this website is:
KONEKT media GmbH
Hausener Str. 8 · 87665 Mauerstetten · Germany
E-Mail: hey@sonnyaendhart.com
2. General Information on Data Processing
We only process personal data to the extent necessary to provide a functional website and our content and services. Processing is carried out on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
Personal data is only collected when you voluntarily provide it to us — for example via the contact form or by booking an appointment.
3. Contact Form
What data is collected?
When you use the contact form on this website, the following data is collected:
- First and last name
- E-mail address
- Subject of your enquiry (optional)
- Free-text message (optional)
Purpose and legal basis
The data is used exclusively to process your enquiry and for any subsequent correspondence. Processing is based on Art. 6(1)(b) GDPR (initiation of a contractual relationship) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Technical processing – FormSubmit
The contact form is technically handled by the service FormSubmit (FormSubmit.co). Your form data is transmitted to FormSubmit's servers in encrypted form and forwarded to us by e-mail. No form data is stored permanently on FormSubmit's servers. Further information is available at formsubmit.co/privacy.
Retention period
Data submitted via the contact form will be deleted after your enquiry has been fully processed, and no later than 6 months, unless statutory retention obligations apply.
4. Appointment Booking via Calendly
What is Calendly?
We use the service Calendly (Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA) for booking introductory calls. When you click "Book a call", you will be directed to a Calendly booking page.
What data is collected there?
In the course of booking an appointment, Calendly typically processes:
- Name and e-mail address
- Preferred appointment and time zone
- Any additional information you voluntarily provide
Legal basis
Processing is based on Art. 6(1)(b) GDPR (initiation of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient appointment coordination).
Data transfer to the USA
Calendly is a US-based provider. Your data is transferred to the USA on the basis of the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). Calendly is also certified under the EU–US Data Privacy Framework.
calendly.com/privacy
5. Hosting & Server Log Files
This website is hosted on a web server. When you access the site, technical access data (so-called server log files) is automatically recorded, including: IP address (anonymised), browser type, operating system, date and time of access, and pages accessed. This data is used solely for technical security purposes and is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.
6. Third-Party Integrations
Google Fonts
This website loads fonts via Google Fonts (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Your IP address may be transmitted to Google in the process. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a consistent visual appearance).
Spotify Podcast Player
This website embeds a podcast player from Spotify (Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden). When the player loads, a connection to Spotify's servers may be established and technical data (e.g. IP address) may be processed. Further information: spotify.com/legal/privacy-policy
7. Your Rights
You have the following rights regarding your personal data:
- Access – you may request information about the data stored about you at any time (Art. 15 GDPR)
- Rectification – inaccurate data can be corrected (Art. 16 GDPR)
- Erasure – you may request the deletion of your data (Art. 17 GDPR)
- Restriction – you may request restriction of processing (Art. 18 GDPR)
- Objection – you may object to processing (Art. 21 GDPR)
- Data portability – you may receive your data in a common format (Art. 20 GDPR)
To exercise your rights, please contact: hey@sonnyaendhart.com
You also have the right to lodge a complaint with the competent data protection supervisory authority. In Bavaria, this is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
8. Currency of this Policy
This privacy policy is currently valid and was last updated in March 2026. As our website evolves or legal requirements change, it may be necessary to update this policy.