Privacy
Datenschutzerklärung · Last updated 26 October 2026
The short version
- This policy applies to every visitor, wherever you are. I am based in Germany, so I follow the EU General Data Protection Regulation (GDPR) for everyone.
- No cookies, no tracking, no analytics, no advertising.
- Fonts and images are served from this website itself. No third-party fonts, trackers or plugins load when you visit; the only companies handling your connection are my hosting provider and its infrastructure partners (see Hosting).
- I only receive what you choose to send me (through the contact form, by email or by phone), plus the basic technical data every website visit creates.
- I use your details only to reply to you. I never sell or share them for marketing.
Who is responsible
Elizabeth Taylor, trading as Elizabeth Gray, Klein Glien 25, 14806 Bad Belzig, Germany.
Email: elizabeth@elizabethgrayspace.com · Phone: +49 1522 2135464
For any question about your data, or to use your rights below, just email me.
Hosting
This website and my email are hosted by Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus ("Hostinger"). The website runs on Hostinger servers in Düsseldorf, Germany, with backups kept in France. Hostinger processes data only on my behalf and under my instructions, under a data processing agreement (Art. 28 GDPR).
Hostinger uses infrastructure partners (sub-processors), which are listed in its data processing agreement. Where personal data is transferred outside the European Economic Area, it is protected by an EU adequacy decision, the European Commission’s Standard Contractual Clauses or another safeguard recognised by the GDPR, as set out in that agreement.
Visiting this website
Every time you open a page, the server automatically records basic technical information in log files:
- your IP address
- the date and time
- the page or file requested
- the website you came from (if your browser sends it)
- your browser and operating system
This is needed to deliver the website, keep it secure and fix errors. The legal basis is Art. 6(1)(f) GDPR: my legitimate interest in a secure, working website. The logs are kept only as long as needed for these purposes and then deleted. I do not combine them with any other data or use them to identify you.
The contact form
When you send the form, I receive your name, email address, company (if you add it), your message and the subject you picked. The form sends this to my mailbox as an email. I use it only to answer your enquiry.
The legal basis is Art. 6(1)(b) GDPR where your message is about working together, and otherwise Art. 6(1)(f) GDPR: my legitimate interest in replying to messages sent to me.
Spam protection: the form contains a hidden field that only automated spam programs fill in; nothing is stored about you because of it. To stop the form being misused, the server also limits how many messages can be sent from one connection. For this it keeps a pseudonymised code (a "hash") made from your IP address, together with the time you sent the form. The address itself is not stored, but the code still counts as personal data. Records older than an hour are deleted whenever the form is next used. Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in protecting the form from abuse.
Email to my addresses at this website, including messages from the form, is forwarded to my mailbox at Proton Mail, run by Proton AG in Switzerland, where it is stored encrypted. I may also keep copies in end-to-end encrypted cloud storage (Proton Drive), run by the same company. The European Commission recognises Switzerland as providing an adequate level of data protection, and Proton processes this data under a data processing agreement (Art. 28 GDPR).
I keep your message for as long as I need it to deal with your enquiry. If we go on to work together, business correspondence is kept for as long as German tax and commercial law require, then deleted.
Email and phone
If you email or call me, I use your details and what you tell me only to reply and to deal with your enquiry, on the same legal basis and with the same retention as the contact form. Emails pass through my mailbox at Hostinger and are forwarded to and kept at Proton, as described under the contact form.
Links to other websites
This website links to my LinkedIn profile. Nothing is sent to LinkedIn when you visit this website. Only if you click the link does your browser open LinkedIn, and from then on LinkedIn’s own privacy policy applies.
Your rights
You have the right to:
- find out what data I hold about you (Art. 15 GDPR)
- have it corrected (Art. 16)
- have it deleted (Art. 17)
- have its use restricted (Art. 18)
- receive it in a portable format (Art. 20)
- object to processing based on my legitimate interests (Art. 21, explained below)
To use any of these rights, email elizabeth@elizabethgrayspace.com.
You can also complain to a data protection supervisory authority. The one responsible for my business is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.
Your right to object
You can object at any time, on grounds relating to your particular situation, to processing that is based on my legitimate interests (Art. 6(1)(f) GDPR). If you object, I will stop that processing unless I can show compelling legitimate grounds that outweigh your interests, or I need it to establish, exercise or defend legal claims.
To object, email elizabeth@elizabethgrayspace.com.
Good to know
You are not required to give me any personal data, but without an email address or phone number I cannot reply to you. I do not use automated decision-making or profiling.