Privacy Policy
Last updated: October 2026
The protection of your personal data is important to me. This Privacy Policy explains what personal data is processed when you visit this website, contact me, use my social media or communication channels, or purchase my digital products, and for what purposes such data is processed.
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Aria Mokan
Kantstrasse 44
22089 Hamburg
Germany
Email: ariamokan@gmail.com
2. Hosting and Use of Squarespace
This website is operated using Squarespace.
The service provider is:
Squarespace, Inc.
225 Varick Street, 12th Floor
New York, NY 10014
USA
When you visit this website, Squarespace may process technical data necessary to provide, secure and operate the website.
This may include, in particular:
IP address;
browser and device information;
operating system;
date and time of access;
pages and content accessed;
referrer URL;
network and connection information.
The processing takes place in particular for the technical provision and security of this website and, where applicable, on the basis of my legitimate interest in maintaining a secure and functional website pursuant to Art. 6(1)(f) GDPR.
Where Squarespace processes personal data on my behalf, such processing is carried out on the basis of a data processing agreement.
Squarespace may also process personal data outside the European Economic Area, in particular in the United States. According to Squarespace, appropriate safeguards are used for such transfers in accordance with applicable data protection laws, including the EU-U.S. Data Privacy Framework and, where required, the European Commission’s Standard Contractual Clauses.
3. Squarespace Analytics and Activity Log
This website uses Squarespace’s integrated analytics features to obtain information about the use and performance of the website.
The following information may be processed, among other things:
browser, network and device information;
IP address;
pages visited;
traffic source or referrer;
clicks and interactions;
time of visit;
information about how this website is used.
Squarespace Analytics allows me to obtain information including page views, visitor numbers, traffic sources, conversions and the use of different website content.
The Squarespace Activity Log may also be enabled on this website. It may display information about individual website visits from recent days, including URLs visited, time of visit, IP-based location information and browsing activity on the website.
Where consent is required for analytics or performance technologies, the processing is based on your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future through the cookie settings on this website.
4. Cookies and Similar Technologies
This website uses cookies and similar technologies.
Essential cookies are used to enable Squarespace to provide the website securely and to provide essential functions such as navigation, security and, where applicable, the ordering process.
Analytics and performance cookies may also be used to understand how visitors use this website.
Where consent is required, non-essential cookies and comparable technologies are only used after you have given your consent.
You can accept or reject non-essential cookies and manage your cookie preferences through the cookie banner. Consent that has already been given can be changed or withdrawn at any time with effect for the future through the cookie settings.
5. Orders and Digital Products
When you purchase a digital product through this website, personal data required to process and fulfil your order is processed.
This may include:
first and last name;
email address;
billing address;
order information;
information about the product purchased;
payment and transaction information;
technical information required to provide the digital product.
This information is processed in particular to perform the purchase agreement, process payment, provide the purchased digital product and respond to any questions relating to your order.
The legal basis for this processing is Art. 6(1)(b) GDPR.
Where data must be retained due to statutory commercial or tax-related retention obligations, the processing is based on Art. 6(1)(c) GDPR.
6. Payment Processing
For the purpose of processing payments, the necessary personal data is processed by Squarespace and the payment service providers available during checkout.
The payment data processed depends on the payment method you choose.
Payment information is processed or transferred to payment service providers only to the extent necessary to process the payment, prevent fraud, ensure security and perform the purchase agreement.
The processing is based in particular on Art. 6(1)(b) GDPR and, where applicable, Art. 6(1)(f) GDPR.
The respective payment service provider’s own privacy policy also applies to its processing of your data.
7. Order Confirmations and Delivery of Digital Products
When you purchase a product, the email address provided during checkout is used to send you messages necessary to process and fulfil your order.
These may include:
order confirmations;
information about the status of your order;
payment information;
links or information allowing you to access purchased digital products;
messages concerning refunds or technical issues.
These messages are transactional or service emails and are not marketing emails.
The processing is necessary for the performance of the contract pursuant to Art. 6(1)(b) GDPR.
8. Contact and Contact Forms
If you contact me by email or through a contact form on this website, the information you provide will be processed in order to respond to your enquiry.
This may include:
your name;
email address;
the content of your message;
any other information you voluntarily provide.
If your enquiry relates to an existing or potential contract, processing is based on Art. 6(1)(b) GDPR.
For other enquiries, processing is based on my legitimate interest in handling and responding to enquiries pursuant to Art. 6(1)(f) GDPR.
9. Communication via Instagram, TikTok, WhatsApp and Telegram
You may also contact me via Instagram Direct, TikTok, WhatsApp or Telegram. If you communicate with me through any of these services, I process the information you provide as part of that communication.
This may include:
your name, username and profile information;
your telephone number, where it is transmitted through the relevant service or provided by you;
your email address, where provided by you;
messages, images, documents and other files you send;
information concerning enquiries, bookings, consultations and existing client relationships;
any other information you voluntarily provide during our communication.
The data is processed in order to handle your enquiry and communicate with you. Where the communication concerns the initiation, performance or processing of a contract, processing is based on Art. 6(1)(b) GDPR.
Where the communication is not directly related to a contract, processing is based on my legitimate interest in efficient communication with prospective and existing clients pursuant to Art. 6(1)(f) GDPR.
When using these communication and social media services, personal data is also processed by the respective platform providers. I have only limited influence over the nature, scope and further use of such data by these providers.
Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
TikTok is provided in the European Economic Area by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
WhatsApp is provided in the European Economic Area by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Depending on the provider and your use of the relevant service, personal data may also be processed outside the European Union or European Economic Area. The respective provider’s privacy policy applies to its further processing of your data.
10. Marketing Emails and Newsletter
If you expressly subscribe to marketing emails or a newsletter, your email address will be used to send you the relevant communications.
Where consent is required, processing is based on your consent pursuant to Art. 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future, for example by using the unsubscribe link contained in the relevant email.
Transactional and service emails relating to an order are not affected by this withdrawal.
11. Social Media and External Links
This website may contain links to my social media profiles as well as third-party websites and online stores.
When you click an external link, you leave this website. Any subsequent processing of personal data is generally carried out by the respective provider in accordance with its own privacy policy.
Where this website merely contains a link to an external service and does not directly load content from that service, data is generally transferred to the relevant provider only when you open the link.
12. Business Profiles on Instagram and TikTok
I operate business profiles on Instagram and TikTok to present my business, services and content and to communicate with prospective clients, existing clients and other users.
When you visit my social media profiles, personal data is processed by the respective platform provider. This may include, in particular, your IP address, device and browser information, usage and interaction data, and information from your user profile.
If you interact with my posts or profiles — for example by liking, commenting on, sharing or saving a post, following my profile or sending me a message — the relevant information may be processed both by the platform provider and, where visible to me, by me.
As the operator of business accounts, I may also receive statistical and analytical information from the platform providers concerning the use of my profiles and content. This may include reach, views, interactions and aggregated information about audiences.
I use my social media presence in particular to present my business, services and content and to communicate with prospective and existing clients. Where processing takes place within my area of responsibility and no other legal basis applies, it is based on my legitimate interest in public relations, business communication and the marketing of my services pursuant to Art. 6(1)(f) GDPR.
My business presence on Instagram is operated through a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Meta processes personal data when Instagram is used in accordance with its own privacy terms. When certain business and analytics functions are used, Meta and I may be jointly responsible for certain processing activities where provided for under the applicable Meta agreements and privacy terms.
TikTok
My business presence on TikTok is operated in the European Economic Area through a service provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
TikTok processes personal data when the platform is used in accordance with its own privacy terms. As the operator of a business account, I may in particular receive statistical and analytical information concerning the use of my profile and published content.
When Instagram and TikTok are used, personal data may also be processed outside the European Union or European Economic Area. Such processing and international transfers are subject to the respective platform providers’ privacy terms and transfer mechanisms.
13. Recipients of Personal Data
Personal data is disclosed to third parties only where necessary for the purposes described in this Privacy Policy or where I am legally required to do so.
Recipients or service providers may include, in particular:
Squarespace as the website and commerce platform;
payment service providers;
email and communication service providers;
technical service providers;
tax and accounting service providers, where necessary;
providers of communication and social media services, including Meta Platforms Ireland Limited, TikTok Technology Limited, WhatsApp Ireland Limited and Telegram, where these services are used to communicate with prospective or existing clients.
Where service providers process personal data on my behalf, such processing is carried out — where legally required — on the basis of a data processing agreement pursuant to Art. 28 GDPR.
14. Transfers of Data to Third Countries
Some service providers used in connection with this website or my business may process personal data outside the European Union or European Economic Area.
Where personal data is transferred to a third country, such transfer takes place only in accordance with the requirements of Art. 44 et seq. GDPR.
Depending on the provider, transfers may in particular be based on an adequacy decision of the European Commission, the EU-U.S. Data Privacy Framework, or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
15. Data Retention
Personal data is generally retained only for as long as necessary for the respective purpose for which it is processed.
Data may be retained for a longer period where statutory retention obligations, in particular under tax or commercial law, require this.
Once the purpose of processing no longer applies and applicable statutory retention periods have expired, the relevant data will be deleted unless another legal basis permits or requires its continued retention.
16. Your Rights
Subject to the applicable legal requirements, you have in particular the following rights:
the right of access pursuant to Art. 15 GDPR;
the right to rectification pursuant to Art. 16 GDPR;
the right to erasure pursuant to Art. 17 GDPR;
the right to restriction of processing pursuant to Art. 18 GDPR;
the right to data portability pursuant to Art. 20 GDPR;
the right to object pursuant to Art. 21 GDPR.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future pursuant to Art. 7(3) GDPR.
To exercise your rights, please contact me at:
17. Right to Lodge a Complaint with a Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
For Hamburg, the competent supervisory authority is:
The Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
18. Changes to this Privacy Policy
I reserve the right to update this Privacy Policy if the services I use, the processing of personal data on this website, or applicable legal requirements change.
The version currently published on this website applies.