Privacy policy

Last updated: October 2026

1. Data Controller

The controller responsible for the processing of personal data on this website is:

Pia Bretschneider

Tea tasting “Teaworkx”
Weidhausstraße 5c, 85092 Kösching, Germany
Email: contact@teaworx.eu

2. General Information on Data Processing

Protecting your personal data is important to me. I process personal data in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data means any information relating to an identified or identifiable individual, such as your name, email address or IP address.

This Privacy Policy explains what personal data is processed when you visit this website, contact me or enquire about booking a tea tasting or workshop, why the data is processed and what rights you have.

3. Legal Bases for Processing

Unless a more specific legal basis is stated in this Privacy Policy, personal data is processed on the following legal bases:

  • Article 6(1)(b) GDPR: Processing necessary for taking steps at your request prior to entering into a contract or for performing a contract, for example when you enquire about a tea tasting or workshop.
  • Article 6(1)(c) GDPR: Processing necessary to comply with legal obligations, such as statutory record-retention requirements.
  • Article 6(1)(f) GDPR: Processing based on legitimate interests, for example to ensure the secure and technically reliable operation of this website.
  • Article 6(1)(a) GDPR: Processing based on your consent, where consent is required.

4. Website Hosting and Website Provision

This website is powered by WordPress and hosted by Hostinger International Ltd., which is based in Cyprus, a member state of the European Union.

As part of hosting and delivering the website, technical data may be processed, including IP addresses, dates and times of access, pages visited, browser and operating system information, and technical status information.

This processing is necessary to provide the website securely and reliably, identify technical problems and prevent misuse.

Legal basis: Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable operation of this website.

Hostinger may also use a Content Delivery Network (CDN) to deliver website content. Technical connection data may be processed through the infrastructure used for this purpose.

Where Hostinger processes personal data on my behalf, the processing is governed by a data processing agreement in accordance with Article 28 GDPR.

Further information about Hostinger’s privacy practices is available at: https://www.hostinger.com/privacy-policy

5. Server Log Files

When you visit this website, technical information may be recorded in server log files by the hosting provider. This may include:

  • IP address of the device making the request
  • Date and time of access
  • Page or file requested
  • Browser and operating system information
  • Amount of data transferred and technical status messages
  • Referrer URL, where available

These data are processed to maintain the technical operation and security of the website, diagnose errors, detect attacks and prevent misuse.

Legal basis: Article 6(1)(f) GDPR.

Server log files are retained only for as long as necessary for these purposes and are then deleted or anonymised, unless legal obligations or other legitimate grounds require longer retention. The specific retention period depends on the hosting provider’s configuration.

6. Contact by Email

If you contact me by email, I process the personal data you provide, including your email address, name, message content and any additional information you voluntarily include.

I use this information solely to respond to your enquiry, answer your questions and, where applicable, discuss or arrange a tea tasting or workshop.

Legal basis: Article 6(1)(b) GDPR where your enquiry concerns steps prior to entering into a contract. In other cases, Article 6(1)(f) GDPR may apply where responding to your enquiry serves my legitimate interest in maintaining appropriate communication.

My email account is provided by Hostinger. Where Hostinger processes personal data on my behalf, this processing is covered by a data processing agreement in accordance with Article 28 GDPR.

Emails are deleted when they are no longer required to handle the enquiry, unless statutory retention obligations or other legitimate grounds require continued storage.

7. Contact and Booking Enquiry Form for Tea Tastings and Workshops

This website provides a contact and booking enquiry form powered by the WordPress plugin Contact Form 7.

You may be asked to provide the following information:

  • Type of workshop or tea tasting requested
  • Name
  • Email address
  • Preferred date
  • Number of participants
  • Preferred time of day (morning or afternoon)
  • Preferred language
  • Address of the event venue
  • Message and any additional information you choose to provide

I process this information to respond to your enquiry, assess the availability and feasibility of the requested workshop, clarify any details and, where applicable, prepare or enter into a contract.

Legal basis: Article 6(1)(b) GDPR, insofar as processing is necessary to take steps at your request prior to entering into a contract or to perform a contract.

Providing the necessary information is voluntary. However, without certain details, I may be unable to process your enquiry fully.

Storage of Enquiries Using Flamingo

Information submitted through the contact form is also stored in the website’s WordPress database using the Flamingo plugin. This enables me to keep track of and respond to enquiries.

The information is stored for the same purposes and on the same legal basis as the original enquiry.

Enquiries that do not result in a booking are deleted once they have been fully dealt with, provided that further retention is not necessary to respond to follow-up questions or to establish, exercise or defend legal claims.

If a contract is concluded, the relevant data are deleted once they are no longer needed for the performance of the contract and no statutory retention obligations apply. Business and accounting records subject to legal retention requirements are retained for the applicable statutory periods.

8. Email Delivery of Contact Form Messages

After you submit the contact form, the information provided is transmitted via SMTP to my Hostinger email account.

Data necessary to transmit and deliver the message are processed for this purpose. Email delivery is handled by the same provider that hosts this website.

Where Hostinger processes personal data on my behalf, the processing is covered by the applicable data processing agreement in accordance with Article 28 GDPR.

The purpose of this processing is to receive and respond to your enquiry and communicate with you about the requested workshop.

Legal basis: Article 6(1)(b) GDPR where the enquiry concerns pre-contractual steps or contract performance.

The transmitted data are retained and deleted in accordance with the principles described in Section 7.

9. Cookies and Consent Management Using Complianz

This website uses the WordPress plugin Complianz to manage cookie notices and, where applicable, consent.

According to the current configuration, the website uses only technically necessary cookies and similar technologies required for its operation or for functions explicitly requested by you. No analytics or tracking cookies are used for advertising or marketing purposes.

Technically necessary cookies may, for example, support essential website functions or remember your privacy preferences.

Where information is stored on or accessed from your device, this takes place in accordance with applicable law, including Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent is not required for technically necessary operations where the applicable statutory exemption is satisfied.

Complianz may store information about your privacy preferences and, where consent-management functions are enabled and used, record consent decisions. The information processed may include your consent status and the time of your decision.

Legal basis: Article 6(1)(c) GDPR where documentation is required by law, or Article 6(1)(f) GDPR for managing and documenting privacy preferences where the relevant conditions are met.

Further information about Complianz is available at: https://complianz.io/

10. Multilingual Website Using TranslatePress

This website uses the WordPress plugin TranslatePress to provide content in German and English.

Language switching and the delivery of translated content take place on the website’s own server. According to the current configuration, TranslatePress does not transfer personal data to external translation services or other third parties.

Any technical information processed for the purpose of providing the selected language is handled as part of operating the website.

Legal basis: Article 6(1)(f) GDPR. My legitimate interest is to make the website available in multiple languages.

11. Search Engine Optimisation Using Rank Math

This website uses the WordPress plugin Rank Math for search engine optimisation.

The plugin runs on the website’s own server. According to the current configuration, neither Google Analytics nor Google Search Console is connected to the website. No website usage data are therefore transmitted to Google through these integrations.

Any technical information processed by Rank Math that is necessary to operate and manage the website is handled as part of the website’s operation.

12. Locally Hosted Fonts

The fonts used on this website are hosted locally on the website’s own server.

Google Fonts are not loaded from Google’s servers. Consequently, visiting this website does not establish a connection to Google servers solely for the purpose of loading these fonts.

13. External Links

This website may contain links to external websites, for example a design credit in the footer such as “Design by Enky”.

These are ordinary hyperlinks. External content is not automatically embedded in this website.

Simply visiting this website does not therefore result in data being transmitted to those external providers because of these links. Data may be transmitted to the relevant provider when you click an external link and visit its website. The provider’s own privacy policy then applies.

14. Recipients of Personal Data

Personal data are disclosed to third parties only where necessary for the purposes described in this Privacy Policy, where required by law or where another lawful basis permits the disclosure.

The following service providers may process personal data in connection with the operation of this website and communication with me:

  • Hostinger International Ltd.: Website hosting, CDN infrastructure and email services
  • Contact Form 7: Technical provision of the contact form
  • Flamingo: Storage of contact form enquiries in the WordPress database
  • Complianz: Management of cookie notices and, where applicable, consent
  • TranslatePress: Provision of multilingual content
  • Rank Math: Search engine optimisation

According to the current configuration, these WordPress plugins run on the website’s own server. Listing a plugin does not mean that personal data are automatically transmitted to its developer.

Where external service providers process personal data on my behalf, the necessary data protection agreements are put in place.

15. Transfers to Third Countries

According to the current configuration, transfers of personal data to countries outside the European Union or European Economic Area are not intended.

However, depending on the technical configuration and the subcontractors used, hosting and CDN services may involve processing or access from countries outside the EU or EEA. Such processing cannot be ruled out without verifying the actual service configuration.

Where a transfer to a third country takes place, it will be carried out in accordance with Articles 44 et seq. GDPR, including on the basis of an adequacy decision or appropriate safeguards where required.

16. Data Retention

Personal data are stored only for as long as necessary for the relevant processing purpose.

Once the purpose has been fulfilled, the data are deleted unless statutory retention obligations or other lawful grounds require further storage.

In particular:

  • Contact enquiries are deleted after they have been dealt with, once further retention is no longer necessary.
  • Contract and booking data are retained for the duration of the contractual relationship and thereafter only to the extent necessary.
  • Business and accounting records are retained in accordance with the applicable statutory retention periods.
  • Server log files are deleted or anonymised in accordance with the hosting provider’s technical configuration.
  • Records of consent are retained for as long as necessary to demonstrate that consent was obtained.

17. Your Rights as a Data Subject

Subject to the applicable legal requirements, you have the following rights:

  • Right of access (Article 15 GDPR): You may request information about whether and which personal data concerning you are being processed.
  • Right to rectification (Article 16 GDPR): You may request the correction of inaccurate data or completion of incomplete data.
  • Right to erasure (Article 17 GDPR): You may request the deletion of your personal data where the legal conditions are met.
  • Right to restriction of processing (Article 18 GDPR): You may request that the processing of your data be restricted where the legal conditions are met.
  • Right to data portability (Article 20 GDPR): Where applicable, you may request the personal data you have provided in a structured, commonly used and machine-readable format.
  • Right to object (Article 21 GDPR): You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR, subject to the applicable legal requirements.
  • Right to withdraw consent (Article 7(3) GDPR): Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, please contact me at the email address stated in the Legal Notice (Impressum).

18. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

For my business based in Bavaria, Germany, the relevant supervisory authority is in particular:

Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht – BayLDA)
Promenade 18
91522 Ansbach
Germany

Website: https://www.lda.bayern.de/

19. Whether You Are Required to Provide Data

You can generally visit this website without actively providing personal data. However, technical connection data are processed when you access the website.

If you submit an enquiry about a tea tasting or workshop, certain information is necessary for me to respond and, where applicable, prepare a contract. Without the necessary information, I may be unable to process your enquiry or may only be able to do so to a limited extent.

There is no general legal obligation to provide personal data merely to browse this website.

20. Automated Decision-Making

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place in connection with the processing activities described in this Privacy Policy.

21. Updates to This Privacy Policy

I reserve the right to amend this Privacy Policy if the website, the services used or the applicable legal requirements change.

The version published on this website at any given time shall apply.