PRIVACY POLICY

I, Laura-Lucia Wehner, Her Lead Communications ("Her Lead") - would like to inform you about Her Lead’s processing of your personal data in accordance with the General Data Protection Regulation ("GDPR").

Her Lead’s privacy policy is modular in structure. It consists of a general part which applies for all processing of personal data and processing situations (I. General) and special parts, which cover additional information regarding specific processing situations (II. Website, III. Communication). 

I. General

1. Controller

The controller within the meaning of the General Data Protection Regulation ("GDPR") and other national data protection laws and other provisions of data protection law for the processing of data is:

Laura-Lucia, Wehner, Her Lead Communications

Zittelstraße 7

80796 Munich, Germany 

Website: www.her-lead.com

Mail: hello@her-lead.com

2. Legal basis for the processing of personal data

Her Lead processes your personal data mostly based on the following legal bases:

a) Consent of the data subject

Insofar as Her Lead obtains the consent of the data subject for processing personal data, Art. 6 para. 1 s. 1 lit. a GDPR serves as the legal basis for the processing of personal data.

b) Performance of contractual obligations

If Her Lead processes personal data that is necessary for the performance of a contract to which the data subject is a party of, Art. 6 para. 1 s. 1 lit. b GDPR serves as the legal basis. This also applies to processing which is necessary to carry out pre-contractual measures.

c) Legal requirements and obligations

Insofar as the processing of personal data is necessary for the fulfilment of a legal obligation to which Her Lead is subject to, Art. 6 para. 1 s. 1 lit. c GDPR serves as the legal basis.

d) Safeguarding legitimate interests

If the processing is necessary to safeguard a legitimate interest of Her Lead or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 s. 1 lit. f GDPR serves as the legal basis.

3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of the processing no longer applies.

4. Recipients of your data

Internally, only those entities process personal data that require it for the fulfilment of their processing purposes. This also applies to the processors, service providers and vicarious agents Her Lead uses. All bodies and persons who work with personal data are obliged to maintain data secrecy and have been made aware of the sensitive nature of handling such data.

Personal data will only be passed on to third parties if this is in accordance with data protection regulations. In particular, persons assigned to carry out Her Lead’s business operations (e.g., banks, tax consultants, service providers for IT services) as well as government agencies/authorities may receive your personal data insofar as this is necessary to fulfil a statutory obligation.

5. Data processing in third countries

In some cases, Her Lead’s services require the processing of personal data in countries outside the EU/EEA ("third countries") by Her Lead’s processors. Insofar as personal data is processed and there is no level of data protection in the country that corresponds to the European standard, which has been confirmed by an adequacy decision pursuant to Article 45 para. 3 of the GDPR by the EU Commission, Her Lead has concluded EU standard contractual clauses with the processors concerned in order to establish suitable guarantees within the meaning of Article 46 of the GDPR. A copy of the EU standard contractual clauses can be found here: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D0914&from=DE.

Insofar as third country processing takes place, Her Lead points this out in the following.

6. Data subject rights

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights against the controller:

a) Right of access

In accordance with Art. 15 DSGVO, you have the right to request information about the personal data Her Lead processes. In particular, you can request to be informed regarding:

  • the purposes of the processing;

  • the categories of personal data concerned;

  • the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations (in this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR),

  • the planned storage period;

  • the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing;

  • the right to lodge a complaint with a supervisory authority;

  • if the personal data are not collected from you, to about the source of the personal data;

  • the existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.


b) Right to rectification

In accordance with Art. 16 DSGVO, you have the right to have your personal data corrected and/or completed if it is incorrect or incomplete. Her Lead must carry out the correction without delay.


c) Right to restriction of processing

In accordance with Art. 18 DSGVO, you have the right to request the restriction of the processing of your data, insofar as the accuracy of the data is disputed by you or the processing is unlawful.

If the processing has been restricted, you will be informed by Her Lead before the restriction is lifted.

d) Right to erasure (‘right to be forgotten’)

You have the right to obtain from Her Lead the erasure of personal information concerning without undue delay and Her Lead has the obligation to erase personal information without undue delay, especially if no legal basis applies for the processing, the personal information has been unlawfully processed; the personal information has to be erased for compliance with a legal obligation in the European Union.

The right to erasure shall not apply to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation which requires processing by the European Union or for the performance of a task carried out in the public interest; for reasons of public interest relating to public health pursuant to Art. 9 para. 2 lit. h and lit. i and Art. 9 para. 3 GDPR; for archiving, scientific or historical research purposes in the public interest or for statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to make it impossible or seriously impede the attainment of the objectives of such processing, or for the establishment, exercise or defence of legal claims.

e) Notification regarding rectification or erasure of personal data or restriction of processing

Her Lead shall communicate any rectification or erasure of personal data or restriction of processing carried to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. Her Lead will inform you about those recipients if you request it. You have the right to be informed about these recipients by the data controller.


f) Right to data portability

You have the right within the limits of Art 20 GDPR to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided.


g) Right to object

You have the right within the limits of Art. 21 GDPR to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 para. 1 lit. e or f GDPR. 


h) Right to withdraw the consent

You have the right to withdraw your consent at any time according to Art. 7 para. 3 GDPR. The withdraw does not affect the lawfulness of prior processing carried out on the basis of the consent.


i) Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right according to Art. 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR. 


II. Additional information for the use of the website

Her Lead is the controller of the website www.her-lead.com (“Website”). To run the Website it is necessary to process certain personal data. In the following Her Lead informs you about the specific processes.

For the running of the Website we use the processor Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, Ireland (“Squarespace”) and therefore signed a data processing agreement with Squarespace. Squarespace and its sub processors may process personal data outside of the EU / EEA, especially in the USA. In this cases Squarespace and its sub processors process the data on the basis of EU Standard Contractual Clauses and thus offer sufficient guarantees within the meaning of Art. 46 para. 1, para. 2 lit. c GDPR.

1. Provision of the Website and creation of log files

If you open the Website so called Log Files will automatically be processed which includes data of the user device and therefore also personal data as mentioned below. 

Processed personal data & period of the processing

The following personal data will be processed:

  • Information about the browser type and version used and language

  • The operating system of the user

  • The IP address of the user

  • Date and time of access

  • The amount of data transferred

  • Websites from which the user's system accesses Her Lead’s website

  • Websites that are accessed by the user's system via Her Lead’s website

This personal data will be stored in the log files of Her Lead’s system for the duration of the user session. If the personal data is needed to repair any malfunction of the Website the data will be stored until the malfunction is removed and will be deleted after 14 days.

Purpose of processing & legal basis

This personal data is required to deliver the Website to the users end-device and to analyze any malfunctions. The legal basis for the temporary storage of the personal data is Art. 6 para. 1 s. 1 lit. f GDPR. The collection of data for the provision of the website and the storage of the data in log files is necessary for the operation of the website. Consequently, there is no possibility to object to this processing.

2. Use of technical necessary cookies

Her Lead uses so-called session on the Website. Cookies are text files that are stored in or by the Internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified the next time the website is accessed. Some functions of the Website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The personal data collected with technically necessary cookies are not used to determine the identity of the user or to create user profiles. 

Processed personal data & period of processing

The technical necessary cookie includes a specific cookie-ID which enables Her Lead to recognize the end-user-device (“crumb”-cookie). On behalf of Her Lead Squarespace links to this cookie-ID specific technical information. Her Lead deletes technical necessary cookies after each session. 

Purpose of processing & legal basis

The legal basis for the processing of personal data by means of technical necessary cookies is sec. 25 para. 2 TTDSG and Art. 6 para. 1 lit. f) GDPR. Due to the technical necessity, there is no revocation option. 

3. Link to Instagram

On the Website Her Lead uses a link to Her Lead’s Instagram profile. However, as Her Lead is only the Controller of the Website but not of the profile which can be found in Instagram, Her Lead are not responsible for the data processing which happens on Instagram.

For this Instagram profile, Her Lead uses the technical platform and services of Meta Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Instagram") for the information services offered there. When you visit Her Lead’s Instagram profile, Instagram collects, among other things, your IP address and other personal data. What information Instagram receives and how it is used is described in general terms by Instagram in its data usage guidelines. There you will also find information on how to contact Instagram as well as on the settings options for advertisements and how you can manage or delete existing information. The data usage guidelines are available at the following link: https://privacycenter.instagram.com/policy. 


4. Link to LinkedIn

On the Website Her Lead uses a link to Her Lead’s LinkedIn profile. However, as Her Lead is only the Controller of the Website but not of the profile which can be found in LinkedIn, Her Lead is not responsible for the data processing which happens on LinkedIn.

For this LinkedIn profile, Her Lead uses the technical platform and services of of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, ("LinkedIn") for the information services offered there. When you visit Her Lead’s LinkedIn profile, LinkedIn collects, among other things, your IP address and other personal data. What information LinkedIn receives and how it is used is described in general terms by LinkedIn in its privacy policy. There you will also find information on how to contact LinkedIn as well as on the settings options for advertisements and how you can manage or delete existing information. The privacy policy is available at the following link: https://www.linkedin.com/legal/privacy-policy. 

III. Additional information for communication with Her Lead

If you communicate with Her Lead, Her Lead has to process your personal data. This includes all data you are providing to Her Lead and additional all data which is provided to Her Lead by the way you decided to contact Her Lead (e.g. e-mail-address, telephone number).

Her Lead uses this personal data to answer your inquiry. Therefore, the data processing is based on Art. 6 para. 1 s. 1 lit. f GDPR as it is in Her Lead’s and your legitimate interest to provide you with a sufficient answer. Her Lead will delete such personal data after the inquiry was answered sufficiently.

If you contact Her Lead for the purpose of a contractual relationship, Her Lead processes your data based on art. 6 para. 1 s. 1 lit. b GDPR. Her Lead will remain such personal data as long as the potential of a rising contractual relationship exists or, if such a relationship develops, for the period of this relationship.