Legal

Privacy policy.

Last updated: July 19, 2026

1. Controller

Sarbast Miho, Heidestr 12, 48155 Münster, Germany
Email: [email protected]

2. Hosting and server logs

This website is self-hosted. When you visit it, the server processes technical data such as your IP address, date and time of the request, the requested URL, browser type and referrer in server log files. This data is required to deliver the site reliably and securely (legal basis: Art. 6 (1) (f) GDPR) and is deleted automatically after a short rotation period.

The site is delivered through Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) as a content delivery and security service. Cloudflare processes connection data (including IP addresses) as a processor. Transfers to the USA are safeguarded by the EU standard contractual clauses and Cloudflare's certification under the EU-US Data Privacy Framework.

3. Contact form

If you use the contact form, the data you enter (name, email address, message) is transmitted to me by email so I can handle your request (legal basis: Art. 6 (1) (b) and (f) GDPR). Delivery is handled by the email service Resend (Resend, Inc., USA) as a processor; transfers are safeguarded by the EU standard contractual clauses. Your data is kept only as long as needed to process your request and is not used for advertising.

4. Cookies

This site uses only technically required cookies: a CSRF token that protects forms against cross-site request forgery, and — only within the private, invitation-based booking area — a device cookie that keeps invited customers signed in. No tracking, analytics or advertising cookies are used. Legal basis: § 25 (2) TDDDG and Art. 6 (1) (f) GDPR.

5. Fonts and external content

All fonts are hosted locally on this server. No fonts, scripts or other resources are loaded from third-party servers when you visit this website.

6. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection regarding your personal data (Art. 15–21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

7. No profiling

No automated decision-making or profiling takes place on this website.