Privacy policy
1) Introduction and Contact Information for the Data Controller
In the following, I provide information about how your personal data is handled when you use our website. Personal data refers to any information that can be used to personally identify you.
The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is
Vuilleumier Communication Office
Marie Vuilleumier
Aiantos 87
17563 Athens
Greece
Email: hello@vuilleumier-co.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting the Website
When using our website for informational purposes only—that is, if you do not register or otherwise provide us with information—I collect only the data that your browser transmits to the website server (so-called “server log files”). When you visit my website, I collect the following data, which is technically necessary to display the website to you:
- The website visited
- Date and time of access
- Amount of data transmitted in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Article 6(1)(f) of the GDPR based on my legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, I reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use.
For security reasons and to protect the transmission of personal data and other confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser’s address bar.
3) Hosting & Content Delivery Network
For hosting my website and displaying its content, I use a provider that delivers its services—either directly or through selected subcontractors—exclusively on servers located within the European Union. All data collected on the website is processed on these servers. I have entered into a data processing agreement with the provider that ensures the protection of my website visitors’ data and prohibits unauthorized disclosure to third parties.
Hostinger
I use a content delivery network provided by the following provider: HOSTINGER operations, UAB, Švitrigailos str. 34, Vilnius 03230 Lithuania
This service enables the faster delivery of large media files such as graphics, page content, or scripts via a network of regionally distributed servers. Processing is carried out to safeguard my legitimate interest in improving the stability and functionality of my website in accordance with Art. 6(1)(f) of the GDPR. I have entered into a data processing agreement with the provider that ensures the protection of my website visitors’ data and prohibits unauthorized disclosure to third parties.
4) Cookies
To make your visit to my website more enjoyable and to enable the use of certain features, I use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
If personal data is also processed by individual cookies I use, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the event of consent, or pursuant to Art. 6(1)(f) GDPR to safeguard my legitimate interests in the best possible functionality of the website as well as a user-friendly and effective design of the site visit.
You can configure your browser to be notified when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in specific cases or generally. Please note that if you do not accept cookies, the functionality of my website may be limited.
5) Contacting Me
When you contact me, personal data will be processed—exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose.
The legal basis for processing this data is my legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations preclude this.
6) Site Features
FontAwesome
This site uses web fonts from the following provider to ensure consistent font display: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA
When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
The processing of personal data in connection with establishing a connection with the font provider is only carried out if you have given us your explicit consent to do so in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For the transfer of data to the United States, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.
Google Web Fonts
This site uses so-called web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the required web fonts into its cache to display text and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in connection with establishing a connection with the font provider is only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the U.S., the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/
7) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users when they visit the site in the form of an interactive user interface, where they can grant consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. When using the tool, all cookies/services requiring consent are loaded only if the respective user grants the corresponding consent by checking the boxes. This ensures that such cookies are set on the user’s respective device only if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this process.
If, in individual cases, the storage, assigning, or logging cookie settings, this is done in accordance with Article 6(1)(f) of the GDPR on the basis of my legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of my website.
Another legal basis for the processing is Art. 6(1)(c) GDPR. As the controller, I am subject to the legal obligation to make the use of technically non-essential cookies contingent upon the user’s consent.
Where necessary, I have entered into a data processing agreement with the provider that ensures the protection of my website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options for the cookie consent tool can be found directly in the corresponding user interface on my website.
8) Rights of the Data Subject
Under applicable data protection law, you have the following rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
RIGHT TO OBJECT
IF I PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON MY OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, I WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING REMAINS POSSIBLE IF I CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF I PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, I WILL CEASE PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
9) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and—where applicable—the relevant statutory retention period (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data in question will be stored until you withdraw your consent.
If statutory retention periods exist for data processed within the scope of contractual or quasi-contractual obligations based on Article 6(1)(b) of the GDPR, this data is routinely deleted upon expiration of the retention periods, provided that it is no longer necessary for the performance of the contract or for entering into a contract and/or we no longer have a legitimate interest in further storage.
When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
As of: March 23, 2026

