Privacy Policy
Controller: Marie Möhrlein, hello@marie-moehrlein.com
1. Data processing when visiting the website
Hosting (Vercel Inc., US + EU edge)
This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Server logs are created on access and may contain: IP address, user-agent, timestamp, requested URL, referrer.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest: technical security).
Retention: Server logs are automatically deleted by Vercel after at most 30 days.
US transfer: Vercel is certified under the EU-US Data Privacy Framework.
Image hosting (Sanity.io, Ireland)
Images and content are served via Sanity.io’s CDN (Sanity, Storgata 3, 0155 Oslo, Norway / EU servers in Ireland).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest: fast image delivery).
2. Contact form
When you use the contact form, your data (name, email, phone, inquiry type, preferred date, location, number of guests, budget, source, message) is transmitted via Resend Inc. (USA, with EU Standard Contractual Clauses) to Marie’s mailbox. You will receive a confirmation email.
Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (a) GDPR (consent).
Retention: The inquiry is kept in Marie’s mailbox for as long as it is relevant for the initiation and execution of a possible engagement (max. 3 years, then deleted).
3. Cookies
This site uses only technically necessary cookies:
mm_cookie_ok(LocalStorage): remembers that you have seen the cookie notice. Lifetime: until you clear your browser storage.
There is no tracking. No analytics cookies, no advertising cookies, no third-party cookies are set.
4. Your rights
You have the right to:
- Access (Art. 15 GDPR) — which data we store about you
- Rectification (Art. 16 GDPR) — correction of incorrect data
- Erasure (Art. 17 GDPR) — “right to be forgotten”
- Restriction of processing (Art. 18 GDPR)
- Objection (Art. 21 GDPR)
- Data portability (Art. 20 GDPR)
You can exercise these rights by email to hello@marie-moehrlein.com.
You also have the right to lodge a complaint with a supervisory authority.
5. Changes to this policy
This privacy policy will be updated if data processing changes. The current version is always available on this page.
Last updated: 2026-04-28