Privacy Policy
Last updated: 28 October 2026
1. Data controller and contact
The person responsible for processing personal data on this website is:
Alizia Schiefele
Laurentiusweg 47b
45276 Essen, Germany
Email: hallo@alizia-schief.com
2. Website provision and hosting
This website presents my artwork and allows you to contact me. When you visit, the web server processes, in particular, your IP address, the date and time of access, the requested URL, the amount of data transferred, the previously visited page (referrer), where applicable, browser information and operating system. These data are necessary to deliver the website, detect errors and protect its operation against misuse.
The hosting and email service provider is dogado GmbH, Antonio-Segni-Straße 11, 44263 Dortmund. As a technical service provider, it receives the data necessary for these purposes. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to provide this portfolio securely, reliably and in working order.
According to dogado, IP addresses in standard web server access logs are anonymised by truncation after 24 hours; these logs are deleted after no more than seven days. These are separate from the website security logs described below. Information about hosting is available from dogado.
3. Email and contact form
If you contact me by email or through the contact form, I process your email address, the name you provide, the content of your message and the associated communication data to handle your enquiry. The name, email address and message fields are required so that the form can be submitted and your enquiry answered. Alternatively, you can send an email directly. Providing information is voluntary; without a contact address where you can be reached, I cannot reply.
The form transmits your details to the web server, which sends them by email. The theme does not create a separate message database for this purpose. Messages sent to hallo@alizia-schief.com are forwarded to my additional email inbox. The hosting, email and, where applicable, spam filtering service providers involved therefore also receive the data technically required. Your message is not published on the website.
For enquiries about a commission or entering into a contract, the legal basis is Article 6(1)(b) GDPR. I handle other enquiries on the basis of Article 6(1)(f) GDPR; my legitimate interest is to respond to communications addressed to me.
I delete enquiries once they have been dealt with and no further retention is necessary. Where statutory retention obligations apply, or a message is required to establish, exercise or defend legal claims, it is retained for the relevant period and processed further only for that purpose.
4. Protection against misuse and security logs
All-In-One Security (AIOS) is used to protect this website. Security-related events such as login attempts and triggered firewall rules are logged on the website’s own hosting space. These records may include the IP address, time, username used and details of the event. The currently configured retention period for audit logs is 30 days; older entries are deleted automatically. Blocking information may be stored for as long as a block is necessary to prevent an attack.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to prevent unauthorised access, automated misuse and disruptions. The contact form also uses a field invisible to human visitors (a honeypot) and a time-limited security token to check form submissions. No external CAPTCHA service is integrated for this purpose.
5. Browser storage and WordPress login
If you explicitly switch between light and dark mode, your choice is saved under “skn-theme” in your browser’s local storage. This preserves your preferred appearance for future visits. The value contains only “light” or “dark” and is not used for advertising or analytics. It remains stored until you overwrite it or delete the website data in your browser.
These storage operations provide the display function you explicitly requested (Section 25(2), no. 2 TDDDG). To the extent that personal data are processed, processing is based on Article 6(1)(f) GDPR and the interest in providing a usable website. If no colour preference is stored, the appearance follows your system settings.
When you visit the WordPress login page, WordPress may set a temporary test cookie. When you log in, technically necessary login and preference cookies are also used. These relate to the protected administration area. Visitors do not need to register to use the portfolio. Necessary cookies for an explicitly requested login fall under Section 25(2), no. 2 TDDDG; processing serves secure website administration under Article 6(1)(f) GDPR.
6. Fonts, content and external links
The font files used are loaded from the website’s own hosting space. No connection to Google Fonts or other external font providers is established to display them. The website does not use visitor analytics or advertising trackers and does not embed external video, map or social media widgets. With ordinary links to other websites, a connection to the relevant provider is established only when you open the link. That provider’s privacy notice applies to its processing.
7. Data security and backups
Data are transmitted between your browser and this website via HTTPS. To allow recovery after technical failures, backups of the website and its database are created with WPvivid on the hosting space. These may also include security and administration data held in the database. Backups are intended solely for administration. Automatic backups are replaced as part of the backup rotation. Manually retained backups are deleted when they are no longer needed to restore the relevant version of the website. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is to ensure that the website can be restored and kept secure. Email messages may also be subject to the backup and retention procedures of the email providers involved.
8. Your rights
Subject to the applicable legal requirements, you have the right to access your personal data (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).
Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). I will then stop processing the data concerned unless overriding grounds or legal claims recognised by law justify further processing.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing before withdrawal. To exercise your rights, you can contact me using the details above.
You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly in your place of residence, place of work or the place of the alleged infringement. In North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia.
I do not carry out automated decision-making, including profiling, on this website that has legal or similarly significant effects.