Privacy notice

Controller

Eva-Maria Haas
Wilhelminenstraße 26
64283 Darmstadt
Germany

Contact

Hosting and access data

This website is delivered through Cloudflare Pages, a service of Cloudflare, Inc. Requests may involve processing your IP address, requested URL, access time, browser/device information and technical log data to deliver the site and protect it against misuse. Our legitimate interests in reliable, secure operation are the basis for this processing (Article 6(1)(f) GDPR). Fonts, images and videos are served through this hosting service. We do not use an advertising pixel or analytics tool in the website code.

Workation applications and enquiries

When you select weeks and answer the two application questions, the answers initially remain in the current browser page. They are not saved in localStorage and are not automatically sent. The optional copy button uses your clipboard. Selecting the email link opens your mail application with the prepared enquiry. When you send an enquiry, we process the information you provide to respond and prepare a possible contractual relationship (Article 6(1)(b) GDPR). Please do not include sensitive personal information in project descriptions.

Introductory calls through Calendly

If you choose the Calendly booking link, the selected weeks and both answers are passed as a URL parameter to prefill the existing preparation field. These details can therefore appear in your browser history and in requests to Calendly. Calendly also receives browser and request information. You can review the details before submitting your booking. The website does not load an embedded Calendly calendar. Booking requires your name, email address and a selected appointment. We use this information to arrange your requested introductory call (Article 6(1)(b) GDPR). Google Meet is configured as the meeting location. A call booking is not a room reservation or confirmation of workation participation.

Email updates through MailerLite

The embedded signup form connects to MailerLite only after you choose “Load signup form”. This voluntary action transmits your IP address and browser/request information; MailerLite may use cookies or similar technologies. Loading alone does not subscribe you. This optional connection is based on your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG where applicable). The alternative signup link opens MailerLite directly. You can unload the embedded form with the adjacent control, which reloads the page. Your loading choice is not saved for future visits.

If you submit the form, your email address and any name you provide are processed through MailerLite for occasional workation, retreat and community updates. The existing double-opt-in confirmation verifies your signup. Newsletter consent is separate from loading consent and is the basis for sending these updates (Article 6(1)(a) GDPR). You can withdraw it at any time using the unsubscribe link in an email or by contacting us. Withdrawal does not affect processing performed before withdrawal.

Browser storage

Closing the waiting-list popup saves a timestamp locally to suppress the invitation for 30 days. It does not store email addresses or application answers. Session storage temporarily preserves your selected section when switching language; the value is removed when read on the next page. You can clear browser storage using your browser settings.

Recipients and international processing

The services used for the features above are Cloudflare, MailerLite, Calendly and Google. They may process data outside the EU/EEA, including in the United States. Provider-specific information about recipients, international transfers and safeguards is available in the linked privacy notices below. We do not sell your application details or automatically add applicants to the newsletter.

How long information is kept

Application details on this website are not kept in a website database. Enquiries and appointment information are kept for handling your request and any resulting contractual relationship, and longer where statutory retention duties or the establishment or defence of claims require it. Newsletter data is used until you unsubscribe; evidence of consent or withdrawal may be retained where necessary to meet legal obligations or establish or defend claims. Technical logs and provider-side storage follow the applicable service settings and processing purposes. You can contact us about deletion of your information.

Your rights and complaints

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you can withdraw it at any time with effect for the future. Contact us at the address above. You may lodge a complaint with a data-protection supervisory authority, including the Hessian Commissioner for Data Protection and Freedom of Information.

Provider information

Last updated: 14 November 2026.