Privacy,
made clear.

1. Controller

The controller responsible for processing personal data on this website is:

2. Website hosting and server logs

This website is hosted on servers located in Germany by [hosting provider name and address]. When you visit the website, the hosting provider may process technical connection data such as your IP address, date and time of access, requested file, referrer, browser, operating system and HTTP status code.

This processing is necessary to securely and reliably deliver the website. The legal basis is our legitimate interest in operating a stable and secure website under Article 6(1)(f) GDPR. Log data is deleted or anonymised after [retention period], unless it must be retained longer to investigate a security incident or meet a legal obligation.

3. Cookieless analytics with Umami Cloud

We use Umami Cloud, provided by Umami Software, Inc., 28 Geary Street, Suite 650 #243, San Francisco, CA 94108, USA, to understand general website usage and improve our content.

Umami operates without cookies and does not track visitors across different websites. It records aggregated and anonymised usage information such as page views, referrer URLs, browser, operating system, device type and approximate country of origin. We do not use Umami to identify individual visitors and do not send names, email addresses or other account identifiers.

The legal basis is our legitimate interest in privacy-friendly audience measurement and website optimisation under Article 6(1)(f) GDPR. Umami Cloud operates servers in the EU and the United States. Our account is configured to use [EU/US region — confirm]. Where data is transferred outside the European Economic Area, appropriate safeguards under Chapter V GDPR must apply, including the European Commission's Standard Contractual Clauses where required. Analytics data is retained for 2 years.

You can object to this processing at any time by emailing info@rich-ugly.com. We will then consider your objection in accordance with Article 21 GDPR.

4. Cookies and local storage

This website does not set cookies and does not use browser storage for advertising, profiling or analytics. Therefore, no cookie consent banner is displayed.

5. Contact by email

If you contact us by email, we process the information you provide to answer your request. Depending on the subject, the legal basis is Article 6(1)(b) GDPR for steps connected with a contract, or Article 6(1)(f) GDPR for general enquiries. We delete correspondence when it is no longer needed, unless statutory retention obligations apply.

6. External links

This website links to external services such as Etsy, Instagram and Pinterest. No content from these services is embedded on this website. Data is transferred to the relevant provider only when you choose to follow an external link. The provider's own privacy policy then applies.

7. Your rights

Subject to the legal requirements, you have the right to request access, correction, deletion or restriction of your personal data, receive portable data, and object to processing based on legitimate interests. You may also withdraw consent at any time where processing is based on consent.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the alleged infringement.

8. Updates to this policy

We may update this privacy policy when our website, service providers or legal requirements change. The current version is always available on this page.