Your Baby’s ABZzz

Baby- und Kleinkindschlafberatung

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following information explains how we handle your personal data when you use our website. Personal data means all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sara Maradey Your Baby's ABZzz - Baby- und Kleinkindschlafberatung c/o POSTFLEX PFX-610-407 Emsdettener Straße 10 48268 Greven Germany

Telephone: 017670342608 Email: info@yourbabysabzzz.com

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for information purposes only, meaning that you do not register or otherwise submit information to us, we collect only the data that your browser transmits to the website server, known as server log files.

When you access our website, we collect the following data, which is technically necessary to display the website:

the website visited;
date and time of access;
amount of data transmitted in bytes;
source or referring page from which you reached the website;
browser used;
operating system used;
IP address used, where applicable in anonymised form.

Processing is carried out pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content, for example orders or enquiries sent to the controller, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

3) Hosting and Content Delivery Network

3.1 For hosting our website and displaying its content, we use a provider that performs its services itself or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on those servers.

We have entered into a data processing agreement with the provider that ensures the protection of website visitors’ data and prohibits unauthorised disclosure to third parties.

3.2 Cloudflare

We use a content delivery network provided by Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

This service enables us to deliver large media files such as graphics, page content or scripts more quickly through a network of regionally distributed servers. The processing is based on our legitimate interest in improving the stability and functionality of our website pursuant to Article 6(1)(f) GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the United States, the provider participates in the EU–US Data Privacy Framework. On the basis of an adequacy decision by the European Commission, this ensures compliance with the European level of data protection.

4) Cookies

To make visiting our website attractive and to enable certain functions, we use cookies, which are small text files stored on your device. Some cookies are automatically deleted when you close your browser, known as session cookies. Other cookies remain on your device for a longer period and allow website settings to be stored, known as persistent cookies. In the latter case, the storage duration can be found in your browser’s cookie settings overview.

Where individual cookies process personal data, processing is carried out pursuant to Article 6(1)(b) GDPR for the performance of a contract, pursuant to Article 6(1)(a) GDPR where consent has been given, or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the website visit.

You can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them, or can exclude the acceptance of cookies in specific cases or generally.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contact

5.1 Google Calendar

We use the services of the following provider to offer online appointment booking:

Google Ireland Limited Gordon House 4 Barrow Street Dublin, D04 E5W5 Ireland

Data may also be transferred to Google LLC in the United States.

For the purpose of arranging appointments, first and last name and email address, and where applicable the telephone number if a telephone appointment is requested, are collected pursuant to Article 6(1)(b) GDPR and transmitted to the provider pursuant to Article 6(1)(f) GDPR on the basis of our legitimate interest in effective customer management and efficient appointment administration. The data is stored there for appointment organisation.

After the appointment has taken place or after the agreed appointment period has expired, your data will be deleted by the provider.

We have entered into a data processing agreement with the provider that ensures the protection of website visitors’ data and prohibits unauthorised disclosure to third parties.

For transfers of data to the United States, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.2 When you contact us, for example through a contact form or by email, personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary.

The legal basis for this processing is our legitimate interest in responding to your enquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Article 6(1)(b) GDPR provides an additional legal basis.

Your data will be deleted once the circumstances indicate that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Data Processing for Contract Performance

6.1 For contract performance, we work with the service providers listed below, who support us wholly or partly in carrying out concluded contracts. Certain personal data is transferred to those service providers in accordance with the following information.

6.2 Use of Payment Service Providers

#### Stripe

One or more online payment methods are provided on this website by:

Stripe Payments Europe Ltd. 1 Grand Canal Street Lower Grand Canal Dock Dublin Ireland

If you select a payment method under which you make payment in advance, such as a credit-card payment, the payment data provided during the ordering process, including name, address, bank and payment-card information, currency and transaction number, as well as information concerning the content of your order, is transmitted to the provider pursuant to Article 6(1)(b) GDPR.

The data is transmitted solely for payment processing and only to the extent necessary for that purpose.

If you select a payment method under which the provider makes an advance payment, such as purchase on account, instalment purchase or direct debit, you may also be asked during the ordering process to provide certain personal data, including first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, information about an alternative means of payment.

To safeguard our legitimate interest in determining our customers’ ability to pay, this data is transmitted to the provider for a creditworthiness check pursuant to Article 6(1)(f) GDPR.

On the basis of the personal data supplied by you and further data, such as shopping cart, invoice amount, order history and payment experience, the provider assesses whether the selected payment option can be granted in view of payment and default risks.

The creditworthiness information may contain probability values, known as score values. Where score values influence the result of the creditworthiness assessment, they are based on a scientifically recognised mathematical and statistical procedure. Address data may be included in the calculation, among other data.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary for contractual payment processing.

6.3 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option to declare their withdrawal through an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, information needed to identify the contract being withdrawn, as well as additional personal information such as the consumer’s first and last name and email address, must be provided or confirmed.

This information is collected and transmitted to us pursuant to Article 6(1)(b) GDPR and only to the extent necessary for proper handling of the withdrawal.

Also on the basis of Article 6(1)(b) GDPR, the personal data provided is used to confirm receipt of the withdrawal declaration by email.

A further legal basis is Article 6(1)(c) GDPR. We are legally required to provide an electronic withdrawal function for paid consumer distance contracts.

7) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by:

Google Ireland Limited Gordon House 4 Barrow Street Dublin, D04 E5W5 Ireland

Google Analytics 4 enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information.

This information includes your IP address, although Google shortens the last digits in order to prevent direct identification.

The information is transmitted to Google servers and processed there. Transfers to Google LLC in the United States are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide further services relating to website use and internet use.

The shortened IP address transmitted by your browser in connection with Google Analytics is not combined with other Google data.

Data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on your device, takes place only if you have given us your express consent pursuant to Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 is not used during your visit.

You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, disable this service through the cookie-consent tool provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of website visitors’ data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 can be found at:

Demographic Characteristics

Google Analytics 4 uses the special “demographic characteristics” function and may generate statistics concerning the age, gender and interests of website visitors.

This is done by analysing advertising and third-party information. The information may be used to identify target groups for marketing activities.

However, the collected data cannot be attributed to a specific individual and is deleted after being stored for two months.

Google Signals

As an extension of Google Analytics 4, Google Signals may be used on this website to enable cross-device reporting.

If you have activated personalised advertising and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models for cross-device conversions.

We do not receive personal data from Google, but only statistics.

To stop cross-device analysis, you can disable “Personalised advertising” in your Google Account settings by following the instructions at:

https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information about Google Signals is available at:

https://support.google.com/analytics/answer/7532985?hl=de

User IDs

As an extension of Google Analytics 4, the “User IDs” function may be used on this website.

If you have consented to Google Analytics 4 pursuant to Article 6(1)(a) GDPR, created an account on this website and logged in on different devices using that account, your activities, including conversions, may be analysed across devices.

8) Website Functions

Google Meet

We use the following provider to conduct online meetings, video conferences and webinars:

Google Ireland Limited Gordon House 4 Barrow Street Dublin, D04 E5W5 Ireland

Data may also be transferred to servers of Google LLC in the United States.

The provider processes different types of data, and the scope depends on the information you provide before or during participation in an online meeting, video conference or webinar.

Your data is processed as a communication participant and stored on the provider’s servers.

This may include, in particular:

registration data, including name, email address, optional telephone number and password;
session data, including subject, participant IP address, device information and optional description;
image and audio contributions;
text entered in chats.

Where processing of personal data is necessary for the performance of a contract with you, including steps taken at your request prior to entering into a contract, Article 6(1)(b) GDPR is the legal basis.

Where you have given consent, processing is based on Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Otherwise, processing in connection with online meetings, webinars or video conferences is based on our legitimate interest pursuant to Article 6(1)(f) GDPR in conducting them effectively.

We have entered into a data processing agreement with the provider that ensures the protection of website visitors’ data and prohibits unauthorised disclosure to third parties.

Further information about Google’s data protection provisions is available at:

https://business.safety.google/intl/de/privacy/

9) Rights of the Data Subject

9.1 Applicable data protection law grants you the following rights against the controller with respect to the processing of your personal data:

right of access pursuant to Article 15 GDPR;
right to rectification pursuant to Article 16 GDPR;
right to erasure pursuant to Article 17 GDPR;
right to restriction of processing pursuant to Article 18 GDPR;
right to notification pursuant to Article 19 GDPR;
right to data portability pursuant to Article 20 GDPR;
right to withdraw consent pursuant to Article 7(3) GDPR;
right to lodge a complaint pursuant to Article 77 GDPR.

9.2 Right to Object

WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED.

HOWEVER, FURTHER PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WHERE WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES.

YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the applicable legal basis, the purpose of processing and, where relevant, statutory retention periods such as commercial and tax-law retention periods.

Where personal data is processed on the basis of express consent pursuant to Article 6(1)(a) GDPR, the data is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or quasi-contractual obligations pursuant to Article 6(1)(b) GDPR, such data is routinely deleted after expiry of those retention periods, provided it is no longer required for performance or initiation of a contract and we have no continuing legitimate interest in storage.

Where personal data is processed pursuant to Article 6(1)(f) GDPR, the data is stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes pursuant to Article 6(1)(f) GDPR, the data is stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated in the information above concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This Privacy Policy was prepared by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

Version: 30 July 2026, 10:26:55

← Home