Privacy policy
Courtesy translation. Only the German version is legally binding. This page explains what data arises when you visit this website or send an enquiry, and what we do with it. As of October 2026.
1. Controller
The controller for data processing on this website is Miss Diffy, owner Maik Rinker, Leonhardistraße 6, 84089 Aiglsbach, Germany, e-mail: mail@miss-diffy.de.
2. Hosting and server logs
This website runs on the infrastructure of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Workers). Our database (Cloudflare D1) and file storage (Cloudflare R2) are located in the EU jurisdiction.
On every visit, Cloudflare processes technically necessary connection data: your IP address, date and time, the requested URL and your browser's user agent. This is needed to deliver the site and to protect it against abuse and attacks.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of the website. Cloudflare is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Cloudflare.
3. No tracking, no advertising
We use no analytics or tracking services and no advertising cookies. Fonts are served from our own server, so no request goes to Google Fonts. We do not embed content from social networks or YouTube.
4. Storage in your browser
The website remembers in your browser (localStorage) which side you chose: light (“Candybox”) or dark (“Darkline”). This way it looks the same on your next visit.
While you fill in the enquiry form, the website keeps a draft in your browser (sessionStorage) so that nothing is lost if you reload the page. It disappears when you close the tab. If you tick “Remember on this device”, the draft stays in your browser (localStorage) for 14 days at most.
This data stays on your device and is not sent to our server. The legal basis is § 25(2) no. 2 TDDDG: the storage is necessary for the service you requested. You can delete it at any time in your browser settings.
5. Enquiry form
When you write to us through the form, we process your name, your e-mail address, optionally your phone number, the chosen piece, the type of appointment, your preferred date and your message.
We store the enquiry in our database in the EU and send it by e-mail to you and to us. The e-mail is sent through the mail service of the web agency artware.studio, which acts on our behalf (data processing under Art. 28 GDPR).
The legal basis is Art. 6(1)(b) GDPR, because you are making a pre-contractual enquiry. We delete the enquiry after 12 months unless a contract is concluded. In that case the statutory retention periods apply, for example for accounting records.
6. Contact by e-mail, phone, WhatsApp and Instagram
The website links to e-mail, phone, WhatsApp and Instagram. No data is transmitted until you click a link. If you write to us via WhatsApp or Instagram, Meta's privacy policy applies in addition. We process your message to handle your enquiry under Art. 6(1)(b) or (f) GDPR.
7. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20).
You can object at any time to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation (Art. 21 GDPR).
To do so, write to mail@miss-diffy.de. You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA) in Ansbach.