Imprint

Information according to Section 5 DDG (German Digital Services Act)

Jana Breitmar
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany

Email: hallo@janabreitmar.de
Phone: +49 157 9234 1658

(Note: The address for service of documents and the telephone number are managed by the imprint service Dein-Impressum. All enquiries are forwarded to me. No parcels can be accepted.)

Responsible for the content according to Section 18(2) German Interstate Media Treaty (MStV)

I am responsible: Jana Breitmar (address as above).

VAT

I am a small business as defined in Section 19 of the German VAT Act (UStG) and therefore do not charge VAT.

Consumer dispute resolution

I am neither obliged nor willing to participate in dispute resolution proceedings before a consumer arbitration board.

Privacy Policy

Basics

Controller

The controller within the meaning of the GDPR is me, Jana Breitmar (address see Imprint).

Hosting

My website is hosted on a server in Germany. A data processing agreement under Article 28 GDPR is in place with the server's host. When you visit the website, the server briefly holds your IP address in memory so that the connection can be established (Article 6(1)(f) GDPR). Otherwise, no personal data is stored permanently on the server itself. Your account, feedback, purchase data and payments all run via the data processors listed in the following sections.

Data processors

Some features of my website run on external service providers that process data on my behalf (so-called data processors).

Cloudflare (Cloudflare, Inc., USA) operates my domain's name servers (DNS), translating the address janabreitmar.de into my server's IP address. Visitor traffic does not pass through Cloudflare but goes directly to my server; Cloudflare only processes DNS queries. A data processing agreement under Article 28 GDPR is in place; any transfer to the USA is safeguarded by Cloudflare's certification under the EU-US Data Privacy Framework and, additionally, by EU Standard Contractual Clauses (Article 46(2)(c) GDPR). Privacy notice: cloudflare.com/privacypolicy.

Supabase (Supabase Inc., USA, with an EU branch; servers in Germany) is my database and authentication provider. A data processing agreement under Article 28 GDPR is in place; any transfer to the USA is safeguarded by EU Standard Contractual Clauses (Article 46(2)(c) GDPR). Privacy notice: supabase.com/privacy.

Stripe (Stripe Payments Europe Ltd., Ireland) handles payments. A data processing agreement under Article 28 GDPR is in place; transfers to third countries are safeguarded by EU Standard Contractual Clauses. Privacy notice: stripe.com/privacy.

Printful (Printful, Inc., USA, with its EU subsidiary Printful Latvia AS in Riga) handles embroidery and shipping of the „Statement Pieces" to order. A data processing agreement under Article 28 GDPR is in place; any transfer to the USA is safeguarded by EU Standard Contractual Clauses (Article 46(2)(c) GDPR). Privacy notice: printful.com/policies/privacy.

Cookies and browser storage

I only use strictly necessary cookies and browser storage (session and local storage) on this website, nothing for tracking, analytics or advertising. The session storage, which is cleared when you close the browser tab, holds for example your shopping cart, the audio player's function, your consent to the download terms for the duration of a session, and the songs you mark as favourites while logged out. In the persistent local storage, the fact that you stay logged in is kept, as well as your reading position and bookmarks in the article reader. No personal data is stored in the process, and everything stays on your device. When you are logged in, your favourites are additionally stored in your account so you can use them across devices. Fonts and scripts are loaded directly from my server; only during the payment process is additional code loaded directly from Stripe. The legal basis is Section 25(2)(2) TDDDG.

Website features

User account

You can voluntarily create a user account, either with email and password or via Google login. This processes your email address and your password (encrypted) or your Google identifier. Optionally you can add profile information such as a username, profile picture or a short text about yourself. The account and profile are managed via Supabase (see "Data processors" section). The legal basis is Article 6(1)(b) GDPR for your account and Article 6(1)(a) GDPR for the optional profile information. Your data is stored until you delete your account. An informal email to me is enough.

Feedback form

Via the feedback icon you can send me short messages. This processes your message text, optionally your email address (in case I should reply), the page you opened the form from and the timestamp. The data is stored at Supabase (see "Data processors" section) and additionally emailed to me. Your IP address is not collected. The legal basis is Article 6(1)(a) GDPR (consent by submitting) and Article 6(1)(f) GDPR (handling your request). Storage duration: until your request is handled, at most twelve months.

Play statistics

When you play or download a song or kids' tale, I count this in aggregate so that I can show popular titles. No personal data is stored, no IP address is processed and no profiles are created. The legal basis is Article 6(1)(f) GDPR.

Digital article "Wholesome Relationships"

Purchase and access

When you purchase the article, I process your purchase data (time of purchase, payment status and transaction ID) and link access to the article to your user account. This data is stored at Supabase (see "Data processors" section). The legal basis is Article 6(1)(b) GDPR (contract performance). The data remains stored as long as you have access to the article; it can be deleted on request.

Payment

Payment runs via Stripe (see "Data processors" section). For this, the checkout page loads Stripe code directly from Stripe (js.stripe.com, for fraud prevention); for the actual payment you are then redirected to a secure Stripe page. Stripe processes your payment data (e.g. card number and name) directly; I do not see this data myself. From Stripe I only receive the payment status, a transaction ID and your email address. The legal basis is Article 6(1)(b) GDPR (contract performance). I retain invoice and payment records for 10 years in accordance with German tax and commercial law requirements.

Physical products

Impulse cards „Perspective Shift"

When you order the impulse cards, I process your order details (name, delivery address, email address and, if provided, phone number), the payment status and the transaction ID. The cards are shipped by me; for delivery I use a shipping service provider (for example DHL), to whom the data necessary for shipping is passed on. The legal basis is Article 6(1)(b) GDPR (contract performance). I retain invoice and payment records for 10 years in accordance with German tax and commercial law requirements.

Statement Pieces (Printful)

The embroidered apparel of the „Statement Pieces" is produced and shipped to order by Printful on my behalf (see "Data processors" section). For this purpose I transmit your order details (name, delivery address, email address, phone number if provided, and order specifics such as product, size and colour) to Printful. Printful uses this data exclusively for production, shipping and the handling of returns or complaints. The legal basis is Article 6(1)(b) GDPR (contract performance). As Printful belongs to the Printful Inc. group in the USA, a transfer to the USA may occur; such transfer is safeguarded by EU Standard Contractual Clauses. I retain invoice and payment records for 10 years in accordance with German tax and commercial law requirements.

General

External links

This website contains links to external providers (e.g. Instagram). When you click on them, you leave my website; from then on the privacy policies of the respective providers apply.

Contact via email or social media

If you contact me directly via email or social media, I will use your data only to handle your request and will delete it afterwards, unless statutory retention obligations require otherwise.

Your rights

You have the right at any time to access the data I hold about you (Article 15 GDPR), to rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection (Article 21). You can revoke any consent given at any time with effect for the future (Article 7(3) GDPR). An informal email to hallo@janabreitmar.de is sufficient for all of these. You also have the right to lodge a complaint with a data protection supervisory authority.

Last updated

May 2026