Privacy Policy

for The Hold Space
Last updated: 11.12.2025

1. Controller

The party responsible for processing data on this website (“Controller”) is:

Katharina Mayer
Recovery Studio
tba
80538 Munich
Germany

Email: info@thehold.space
Phone: tba

2. General Information on Data Processing

We process personal data only as necessary to provide this website, our services, and to ensure a secure and user-friendly experience.
Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Your Rights under the GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object to processing (Art. 21 GDPR)

  • Right to withdraw consent at any time (Art. 7(3) GDPR)

  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

    • e.g. Bavarian Data Protection Authority (BayLDA)

4. Collection of Data on This Website

4.1 Server Log Files

When you access our website, we automatically collect data transmitted by your browser:

  • IP address (anonymized if possible)

  • Date and time of access

  • Browser type and version

  • Operating system

  • Referring website

  • Pages viewed

  • Amount of data transferred

Purpose: technical security, website stability, misuse detection
Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4.2 Contact by Email

If you contact us via email, we process:

  • Your email address

  • Name (if provided)

  • Content of your message

Purpose: respond to inquiries
Legal basis: Art. 6(1)(b) GDPR (pre-contractual communication)
Data is deleted once your request is resolved unless legal obligations require retention.

5. Cookies

Our website may use cookies to ensure basic functionality (e.g. security, language settings).

If additional cookies (analytics, marketing) are added later, a cookie banner and consent management tool will be required.

Legal basis for essential cookies: Art. 6(1)(f) GDPR
Legal basis for non-essential cookies: Art. 6(1)(a) GDPR (consent)

6. Analytics & Third-Party Tools

Google Analytics

Meta Pixel

Newsletter tool Squarspace

7. Hosting and Content Management: Squarespace

This website is hosted and operated through:

Squarespace, Inc.
225 Varick Street, 12th Floor
New York, NY 10014
USA

Squarespace provides:

  • Hosting

  • Content management system (CMS)

  • Security and technical infrastructure

  • Data processing required to operate the site

Squarespace may process data in the United States.
Data transfer outside the EU is based on:

  • Standard Contractual Clauses (SCCs)

  • Additional safeguards provided by Squarespace

More information:
https://www.squarespace.com/privacy/

Legal basis for using Squarespace: Art. 6(1)(f) GDPR (legitimate interest in professional website hosting and operation).

8. Data Retention

Personal data is retained only as long as necessary for the purposes stated or as required by law.

9. Data Security

We and Squarespace implement technical and organizational measures to protect your data from loss, misuse, or unauthorized access.


10. International Data Transfers

Because Squarespace is based in the United States, personal data may be transferred outside the EU. Transfers are safeguarded through:

  • Standard Contractual Clauses (SCCs)

  • Organisational and technical safeguards required under GDPR

11. External Links

Our website may include links to third-party sites. We are not responsible for their content or data practices.

12. Changes to This Privacy Policy

We may update this policy to reflect legal, technical, or operational changes.
The current version is always available on this page.