Privacy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to the full privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator. Their contact details can be found in the „Responsible Party“ section of this privacy policy.

How do we collect your data? Your data is collected in two ways: first, through information you provide directly (e.g. via a contact form). Second, certain data is collected automatically by our IT systems when you visit the website — primarily technical data such as your browser, operating system, and time of access.

How do we use your data? Some data is collected to ensure the website functions correctly. Other data may be used to analyse your browsing behaviour. Where contracts can be initiated or concluded through the website, submitted data is also processed for contract offers, orders, or other enquiries.

What rights do you have regarding your data? You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data, and to request its correction or deletion. If you have given consent to data processing, you may withdraw that consent at any time. You also have the right, under certain circumstances, to request the restriction of processing. You may also lodge a complaint with the relevant supervisory authority. For these and any other questions about data protection, you are welcome to contact us at any time.

Analytics and Third-Party Tools

When visiting this website, your browsing behaviour may be statistically analysed using analytics tools. Detailed information about these tools is provided in the full privacy policy below.

2. Hosting

We host our website with the following provider:

External Hosting This website is hosted externally. Personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access data, and other data generated via the website.

External hosting is used for the purpose of fulfilling contracts with potential and existing customers (Art. 6(1) (b) GDPR) and in the interest of a secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where consent has been requested, processing takes place exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as consent covers the storage of cookies or access to information on the user's device. Consent can be withdrawn at any time.

Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

We use the following host:

OVH
RCS Lille Métropole 424 761 419 00045
APE Code 2620Z

3. General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

Please note that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data from access by third parties is not possible.

Responsible Party

The party responsible for data processing on this website is:

Jana Dorfner
Pladehals Alle 33
2450 Copenhagen

Phone: 9111 94 36
Email: hello@workshopwithjana.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

Retention Period

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you make a legitimate request for deletion or withdraw consent to data processing, your data will be deleted unless we have other legally permissible reasons for retaining it (e.g. tax or commercial law retention periods); in the latter case, deletion will occur once those reasons no longer apply.

Legal Basis for Data Processing

Where you have given consent, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2) (a) GDPR (for special categories of data). In the case of express consent to the transfer of personal data to third countries, processing also takes place on the basis of Art. 49(1)(a) GDPR. Where data is necessary for the performance of a contract or pre-contractual measures, we process it on the basis of Art. 6(1)(b) GDPR. For legal obligations, Art. 6(1)(c) GDPR applies. Processing may also be based on our legitimate interest under Art. 6(1)(f) GDPR.

Recipients of Personal Data

We work with various external parties in the course of our business activities. This sometimes requires the transfer of personal data to those parties. We only share personal data where this is necessary for contract performance, legally required, covered by a legitimate interest under Art. 6(1)(f) GDPR, or otherwise legally permitted.

Withdrawal of Consent

Many data processing operations require your explicit consent. You may withdraw consent already given at any time. The lawfulness of processing carried out before withdrawal is not affected.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE OBJECT, WE WILL NO LONGER PROCESS YOUR DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR). WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE USED FOR DIRECT MARKETING (OBJECTION UNDER ART. 21(2) GDPR).

Right to Lodge a Complaint

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, workplace, or place of the alleged infringement.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or for contract performance, in a common machine-readable format — for yourself or for transfer to a third party, where technically feasible.

Access, Rectification, and Erasure

Within the limits of applicable law, you have the right to free information about your stored personal data, its origin, recipients, and purpose, as well as the right to rectification or erasure.

Right to Restriction of Processing

You have the right to request restriction of processing of your personal data in the following cases: where you contest the accuracy of data; where processing is unlawful but you prefer restriction over erasure; where we no longer need the data but you require it for legal claims; or where you have objected under Art. 21(1) GDPR and a balancing of interests is pending.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security and to protect the transmission of confidential content. You can identify an encrypted connection by the „https://“ prefix and the padlock icon in your browser bar. When encryption is active, data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

Use of contact details published as part of the legal notice obligation to send unsolicited advertising is hereby objected to. The site operators reserve the right to take legal action in the event of unsolicited promotional communications such as spam emails.

4. Data Collection on This Website

Contact via Email, Phone, or Fax

If you contact us by email, phone, or fax, your enquiry including all personal data arising from it (name, enquiry) will be stored and processed by us for the purpose of handling your request. We do not pass this data on without your consent.

Processing takes place on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract, or on the basis of our legitimate interest (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR) in all other cases. Data submitted via contact enquiries will remain with us until you request deletion, withdraw your consent, or the purpose of storage no longer applies.

Appointment Scheduling Tool: Proton Calendar

To allow visitors to book appointments directly, we use the appointment scheduling feature of Proton Calendar on our website. This service is provided by Proton AG, Route de la Galère 32, 1228 Plan-les- Ouates, Geneva, Switzerland.

The data you submit when booking (such as your name, email address, and selected time slot) is used solely for the purpose of scheduling, conducting, and following up on the appointment. All booking details are protected with zero-access encryption and stored on Proton's servers in Switzerland — meaning the content of bookings cannot be accessed by Proton or any third party. Switzerland provides an adequate level of data protection as recognised by the European Commission, so no additional transfer mechanisms are required.

The legal basis for processing is Art. 6(1)(a) GDPR where you have given consent, and Art. 6(1)(f) GDPR on the basis of our legitimate interest in communicating directly with clients, prospective clients, and other interested parties and in handling enquiries promptly.

Data will be retained until you request deletion, withdraw your consent to storage, or the purpose of storage no longer applies. Mandatory statutory retention periods remain unaffected.

For more information, see: Proton Privacy Policy

Audio and Video Conferencing

a) Proton Meet
For communication with clients we use Proton Meet, an encrypted online conferencing tool provided by Proton AG, Route de la Galère 32, 1228 Plan-les-Ouates, Geneva, Switzerland.
When communicating via video or audio conference using this tool, personal data is processed by us and by the tool provider. The data collected includes all information you provide while using the tool, as well as technical information required for the online communication to function. Proton Meet uses end-to-end encryption, meaning the content of communications cannot be accessed by Proton or any third party. Switzerland provides an adequate level of data protection as recognised by the European Commission, so no additional data transfer mechanisms are required.
The legal basis for data processing through Proton Meet is Art. 6(1)(b) GDPR, as communication is connected to the performance of a contract or is necessary for pre-contractual measures. Additionally, this tool is used to facilitate communication with our business, which constitutes a legitimate interest under Art. 6(1)(f) GDPR.
Data is retained until you request deletion, withdraw your consent to storage, or the purpose for storage no longer applies. Mandatory statutory retention periods remain unaffected.
Further details: Proton Privacy Policy

b) Google Meet
For communication with clients we use Google Meet, an online conferencing tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When communicating via video or audio conference using this tool, personal data is processed by us and by the tool provider. The data collected includes all information you provide while using the tool, as well as conference metadata and technical information required for the online communication to function. Files shared within the tool are stored on the provider's servers. Google Meet may also set cookies, which are only placed with your consent. You may withdraw that consent at any time.
The legal basis for cookie placement is Art. 6(1)(a) GDPR. The legal basis for data processing through Google Meet is otherwise Art. 6(1)(b) GDPR, as communication is connected to the performance of a contract or is necessary for pre-contractual measures. Additionally, this tool is used to facilitate communication with our business, which constitutes a legitimate interest under Art. 6(1)(f) GDPR.
Data is retained until you request deletion, withdraw your consent to storage, or the purpose for storage no longer applies. Cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.
Further details: Google Privacy Policy

5. Newsletter

Newsletter Data

To subscribe to the newsletter offered on our website, we require your email address and confirmation that you are the holder of the address and agree to receive the newsletter. No additional data is collected unless provided voluntarily. This data is used solely to send the requested information and is not passed on to third parties.

Processing of newsletter registration data is based exclusively on your consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time, e.g. via the unsubscribe link in the newsletter.

Your email address will be stored until you unsubscribe, after which it will be deleted from the mailing list. Where necessary to prevent future mailings, your address may be added to a blocklist. Blocklist data is used solely for this purpose and is not combined with other data.

Newsletter to Existing Customers

Where you provide your email address when purchasing goods or services, we may use it to send newsletters about similar products or services, provided you have been informed in advance. You may unsubscribe at any time via the link in every newsletter. The legal basis in this case is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG.