Privacy policy
I treat your data as carefully as a hat entrusted to me. Here is what happens to it.
1 · Controller
Veronika Fumian — the hatfairy
Lindenstraße 59, 72810 Gomaringen
Telephone: +49 151 55928050
Email: info@hatfairy.de
2 · Visiting the website
When you open these pages, your browser transmits technically necessary data, which my hosting provider stores in what are known as server log files: the file requested, the date and time, the volume of data transferred, notice of a successful retrieval, the browser type and operating system, the referring page and the IP address.
The legal basis is Art. 6(1)(f) GDPR. My legitimate interest lies in the secure and trouble-free operation of the website. This data is not combined with any other source. The log files are deleted after seven days at the latest.
3 · Hosting
This website is hosted by ALL-INKL.COM — Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data named above on my behalf; a data processing agreement under Art. 28 GDPR is in place.
4 · The enquiry form
If you write to me using the form, I process the details you enter there: your name, your email address, the way you would prefer to be contacted together with the number or profile name, and what you tell me about the occasion, the preferred date, your head size, a home visit and your message.
The optional photograph. You may attach a photograph of your face to the form, because the shape of a face has a bearing on which hat will suit you. This is expressly optional — the enquiry works just as well without it. The picture is not stored on the web server; it is passed straight to my mailbox as an attachment to the enquiry email.
The legal basis for the processing is your consent under Art. 6(1)(a) GDPR, which you give when you send the form, and — where it concerns the initiation of a commission — Art. 6(1)(b) GDPR. You may withdraw your consent at any time; no particular form is required. The lawfulness of the processing carried out until then is unaffected.
I keep your enquiry for as long as it is needed to deal with it. If no commission comes of it, I delete it six months after the last contact at the latest — an attached photograph straight away if you ask me to. Where a commission is placed, the statutory retention periods apply.
5 · Contact by email or message
If you write to me directly by email or through a messenger service, I process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Please note that I have no influence over the data processing carried out by the operators of WhatsApp, Telegram or Instagram.
6 · Typefaces
The typefaces used on this website are stored locally on my own server. No connection is made to Google Fonts or to any other font provider when the pages load — no data flows to third parties in the process.
7 · Instagram
On this website you will find a plain link to my Instagram profile. No Instagram content is embedded; only when you follow the link does your data reach Meta Platforms Ireland Ltd. Their privacy policy then applies.
8 · No cookies, no tracking
This website sets no cookies, uses no analytics tools and includes no advertising networks. A consent banner is therefore not required.
9 · Your rights
You have the right at any time to information about the data held about you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to the processing (Art. 21). An informal message to me is enough.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
10 · Encryption
This website uses encrypted transmission only (TLS/HTTPS). You can recognise this by the padlock symbol in your browser’s address bar.
This policy is dated 18 August 2026.