Privacy policy

This is an English translation for convenience; the German version (Datenschutzerklärung) is legally binding.

1. Controller

The controller responsible for the processing of personal data on this website under the General Data Protection Regulation (GDPR) is:

Polina Shvedko
Max-Born-Ring 59
37077 Göttingen
Germany
E-mail: polina.shvedko.artist@gmail.com

2. Hosting and server log files

This website is hosted by checkdomain GmbH, Große Burgstraße 27/28, 23552 Lübeck, Germany (a Plesk server in Germany). Whenever a page is requested, the server automatically processes data that your browser sends and stores it in server log files: IP address, date and time of the request, the address requested, the amount of data transferred, the HTTP status code, the referrer URL, and your browser and operating system (user agent). These data are needed to deliver the website and to keep it secure and stable, for example to detect attacks. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is the secure and error-free operation of the website. The host deletes the log files after the retention period set by the host. A data processing agreement under Art. 28 GDPR is in place with the host.

3. Your cookie choice (localStorage)

On your first visit, a notice at the bottom of the screen asks whether you allow Google Analytics. Your choice ("Accept" or "Decline") is stored in your browser's local storage (localStorage, entry cookie_consent_v2) so that the notice does not appear on every page. This information does not leave your device. Storing it is strictly necessary to manage your consent (§ 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). You can delete the entry at any time in your browser settings.

4. Google Analytics 4 (only with your consent)

If you consent, this website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Before you consent, no script is loaded from Google and no analytics cookie is set. The website uses Google's Consent Mode v2: all types of storage are denied by default; after "Accept", only analytics_storage is granted; advertising features are not enabled.

Google Analytics sets cookies (_ga, _ga_*, stored for up to 2 years) and collects pseudonymous usage data, for example the pages visited, time on the site, approximate location (country, city), device type, browser, referrer, clicks on the e-mail links (event contact_click) and starts of the video (hero_video_play). Google Analytics 4 does not log or store IP addresses; within the EU, Google uses them only briefly to derive the approximate location. The data are deleted after 2 months.

The purpose is to understand how visitors use the website in order to improve it. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. A data processing agreement is in place with Google. It cannot be ruled out that data are transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Google has also concluded standard contractual clauses.

Withdrawal: You can withdraw your consent at any time with effect for the future: click "Cookie settings" at the bottom of any page and choose "Decline". Google Analytics is then disabled and the _ga cookies are deleted. More information: Google's privacy policy.

5. YouTube video on the home page

The header of the home page shows a muted background video from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The video is embedded in privacy-enhanced mode from www.youtube-nocookie.com and starts automatically when the home page loads (not when your device is set to "reduce motion"). A connection to Google's servers is therefore made as soon as the page loads, and Google receives in particular your IP address, the page visited and technical details of your browser and device. According to YouTube, privacy-enhanced mode sets no cookies before you interact with the video; the video may, however, store data in your browser's storage. A transfer to Google LLC in the USA is possible (see the Data Privacy Framework above).

The purpose is an appealing presentation of the home page. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is presenting my work. Where information is stored on or read from your device, this is based on § 25(2) no. 2 TDDDG. You can pause the video at any time with the button on the video. More information: Google's privacy policy.

6. Contact by e-mail

If you write me an e-mail, I process your e-mail address, your name (if given) and the content of your message in order to answer your request. The legal basis is Art. 6(1)(b) GDPR if your request aims at a contract (for example acquiring a work), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering requests). E-mails are received through Gmail (Google Ireland Limited). I delete your data as soon as they are no longer needed to handle your request, unless statutory retention periods apply.

7. Links to social networks

The icons for Instagram, Facebook, LinkedIn and Etsy are plain links. Only when you click one does the page of that provider open, which then processes data under its own responsibility.

8. Your rights

You have the right at any time to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where I process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the German state where you live or where the alleged infringement took place. The authority responsible for me is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

To exercise your rights, an e-mail to polina.shvedko.artist@gmail.com is enough.

9. No obligation to provide data

You are not obliged by law or by contract to provide personal data to me. Without the technically necessary connection data (section 2), however, the website cannot be displayed, and without your e-mail address I cannot reply to you. There is no automated decision-making, including profiling (Art. 22 GDPR).

Last updated: October 2026