Privacy Policy (Datenschutzerklärung)
1. An Overview of Data Protection
General Information
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below this text.
Data Recording on This Website
Who is responsible for the data recording on this website?
The data processing on this website is carried out by the website operator. The operator's contact details can be found in the Legal Notice (Impressum) section of this website.
How do we record your data?
On one hand, your data is collected when you share it with us — for example, when you contact us by email. Other data is collected automatically by our hosting provider's IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access). This data is recorded automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure the error-free, secure functioning of the website. This website does not use analytics or tracking, so no data is used to analyze user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to demand the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time for the future. You also have the right to request that the processing of your personal data be restricted under certain circumstances. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority — for this website, that is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI) (see Section 3 for full contact details).
2. Hosting and Content Delivery Networks (CDN)
We host the content of our website with the following provider:
External Hosting
This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA ("Netlify"). The personal data collected on this website is stored on the servers of the hoster. This may include IP addresses, metadata, web page access, and other data generated via a website.
External hosting is carried out for the purpose of fulfilling contracts with our potential and existing clients (Art. 6 Sect. 1 lit. b GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6 Sect. 1 lit. f GDPR).
A data processing agreement (Auftragsverarbeitungsvertrag, AVV) in accordance with Art. 28 GDPR (DSGVO) has been concluded with Netlify, obligating Netlify to protect the data of our website visitors and to process it only on our instructions and in compliance with the GDPR.
International Data Transfer
As Netlify, Inc. is based in the United States, the hosting of this website involves a transfer of personal data (such as IP addresses and technical access data) to a third country. This transfer is safeguarded through Netlify's certification under the EU-U.S. Data Privacy Framework (DPF), as well as through Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR and Commission Implementing Decision (EU) 2021/914, both of which are incorporated into Netlify's Data Processing Agreement. Further information is available in Netlify's Privacy Statement and on Netlify's GDPR/CCPA page.
No Analytics, Tracking, or Third-Party Embeds
This website is built to avoid third-party data processing wherever possible. Specifically, this website does not use:
- Google Analytics or any other web analytics/tracking service
- Meta Pixel (Facebook/Instagram) or any other advertising/retargeting pixel
- Embedded YouTube videos or Google Maps (both of which would otherwise transfer data to Google upon page load)
- Netlify Forms or any other third-party form-processing service — contact happens exclusively via a plain
mailto:email link (see Section 4) - Tracking or marketing cookies of any kind
Because none of the above are used, this website does not require a cookie consent banner. Only strictly necessary technical data automatically transmitted by your browser (see below) is processed by our hosting provider.
Self-Hosted Web Fonts
This website uses web fonts (Inter, Playfair Display) for uniform text display. All font files are stored locally on our own server and are not loaded from Google Fonts or any other external font provider. No connection to Google's servers is established when you visit this website, and no data about you is transmitted to or stored by Google for this purpose.
3. General Information and Mandatory Information
Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and according to the legal data protection regulations and this privacy policy.
When you use this website, various personal data are collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.
We point out that data transmission over the Internet (e.g. communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.
Information on the Responsible Party (Controller)
The responsible party for data processing on this website is:
Pei Lan Lee Cho
Landhausstr. 5
69115 Heidelberg
Germany
E-Mail: contact@peggy-lee-insight.com
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Right to Object to Data Collection in Special Cases (Art. 21 GDPR)
Where personal data is processed on the basis of Art. 6 Sect. 1 lit. e or f GDPR, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.
Right to Data Portability (Art. 20 GDPR)
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you require the direct transfer of the data to another controller, this will only be carried out to the extent that it is technically feasible.
Right to Lodge a Complaint with a Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The supervisory authority responsible for us is:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI)
Heilbronner Straße 35
70191 Stuttgart
Germany
Phone: +49 (0)711 615541-0
E-Mail: poststelle@lfdi.bwl.de
4. Data Recording on This Website
Inquiries by Email
This website does not use a contact form. If you would like to get in touch, please use the email link provided (contact@peggy-lee-insight.com), which opens your own email program. When you send us an inquiry by email, your details from that email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 Sect. 1 lit. b GDPR if your request is related to the execution of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 Sect. 1 lit. f GDPR) or on your consent (Art. 6 Sect. 1 lit. a GDPR) if this was requested.
The data you send will remain with us until you request us to delete it, revoke your consent to storage, or the purpose for data storage no longer applies (e.g. after completed processing of your inquiry). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.