Privacy Policy

1. Introduction

Welcome to tatjanapavicic.com (the „Website“). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

This Policy is provided for your information. It does not require your agreement, and using the Website is not treated as consent to any processing. Where we rely on your consent for a specific purpose, we will ask for it separately and clearly, and you may withdraw it at any time.

2. Data Controller

The data controller for this Website is:

Dr. Tatjana Pavicic Maximilianstr. 36 80539 München Germany Email: info(at)tatjanapavicic(dot)com

If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.

3. Data We Collect

3.1 Personal data you provide voluntarily

We collect personal data that you voluntarily provide when you:

• Contact us via email or the contact form on our Website
• Subscribe to receive updates, newsletters, or event information
• Submit an inquiry regarding speaking engagements, interviews, scientific collaboration, or consultation

This may include:

• Name
• Email address
• Phone number
• Your professional role or area of interest, where you choose to indicate it
• Any other information you choose to provide in messages or contact forms

3.2 Server log files

When you access the Website, our hosting provider’s servers automatically record technical information necessary to deliver the pages to you and to keep the Website secure and stable. This typically includes:

• IP address
• Date and time of the request
• The page or file requested
• Browser type and version, and operating system
• Referring website, where transmitted by your browser

This data is held in server log files. We do not use it to analyse individual visitor behaviour, we do not combine it with other data, and we do not use it to build profiles. We do not currently operate any web analytics service on this Website.

3.3 Data generated when you receive our emails

If you subscribe to our updates, our email service provider records whether messages are delivered and opened, and whether links within them are clicked, and associates this with your subscriber profile. See Section 5.

4. Purposes and Legal Bases for Processing

We process personal data only where a legal basis under the GDPR applies.

Where processing is based on your consent, you may withdraw that consent at any time — by using the unsubscribe link in any email, or by contacting us at info(at)tatjanapavicic(dot)com. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Email Communications and Measurement

If you subscribe to our updates, we transmit your email address and any details you provided to our email service provider, Klaviyo, Inc., which sends the messages on our behalf under a data processing agreement.

Our emails contain a small tracking pixel and links with tracking parameters. These allow us to see whether a message was opened and which links were clicked, and to record this against your subscriber profile. We use this to understand which topics are of interest and to avoid sending to people who are no longer engaged. This measurement takes place on the basis of your consent, which you give when you subscribe.

You may object to this measurement, or withdraw your consent to receive emails entirely, at any time — by using the unsubscribe link in any message, or by writing to info(at)tatjanapavicic(dot)com. If you would prefer to receive emails without measurement, contact us and we will arrange this.

Subscribing to updates is always separate from, and never a condition of, submitting an inquiry.

6. Data Sharing and Disclosure

We do not sell or rent your personal data.

We share personal data with the following categories of recipient:

• Hosting provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, for the technical operation of the Website
• Email service provider: Klaviyo, Inc., for sending and measuring our email communications
• Authorities or regulators, where required by law or to establish, exercise, or defend legal claims

All processors act on our instructions under a data processing agreement pursuant to Art. 28 GDPR.

7. Cookies and Similar Technologies

We use only cookies that are technically necessary for the Website to function and to remain secure. These are set without consent, as permitted under §25(2) no. 2 TDDDG, because the Website cannot be provided without them.

We do not currently use analytics, advertising, tracking, or profiling cookies, and we do not embed third-party services on the Website that set such cookies. For that reason no cookie consent banner is displayed.

If we introduce analytics or any other non-essential cookies or third-party services in future, we will obtain your consent beforehand through a consent mechanism and update this Policy accordingly.

You can block or delete cookies through your browser settings. Doing so may limit some Website features.

8. Data Retention

We retain personal data only as long as necessary for the purpose it was collected for:

• Inquiry correspondence: retained for the duration of the exchange and for a reasonable period afterwards, then deleted, unless a statutory retention obligation applies
• Newsletter and update subscriptions: retained until you unsubscribe or withdraw consent, after which your data is deleted, apart from the minimal record needed to ensure we do not contact you again
• Email engagement data: retained for as long as you remain subscribed
• Server log files: retained by our hosting provider for 58 days, then deleted
• Records subject to statutory retention: retained for the period the law requires

9. Your Rights Under the GDPR

You have the right to:

• Access: request a copy of the personal data we hold about you (Art. 15)
• Rectification: request correction of inaccurate or incomplete data (Art. 16)
• Erasure: request deletion of your personal data (Art. 17)
• Restriction: request that we restrict processing (Art. 18)
• Data portability: receive your data in a structured, commonly used, machine-readable format (Art. 20)
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time (Art. 21)
• Withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand (Art. 7(3))

To exercise any of these rights, contact us at info(at)tatjanapavicic(dot)com. We will respond within one month, as required by Art. 12(3) GDPR.

Right to lodge a complaint. Independently of the above, you have the right to lodge a complaint with a data protection supervisory authority — in particular in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR).

10. Data Security

We implement and maintain appropriate administrative, technical, and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. No system is entirely secure, and we cannot guarantee absolute security.

11. Third-Party Links

Our Website may contain links to external websites we do not operate. We are not responsible for their content or privacy practices, and we encourage you to review their policies.

12. International Data Transfers

Our email service provider, Klaviyo, Inc., is based in the United States, which means personal data of subscribers is transferred outside the European Economic Area. Where such a transfer occurs, we ensure an appropriate safeguard under Chapter V GDPR applies — such as certification under the EU–US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission, together with supplementary measures where necessary.

You may request further information about the safeguards applying to a specific transfer by contacting us at info(at)tatjanapavicic(dot)com.

13. Updates to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised. Where changes are material, we will take reasonable steps to notify you.

14. Contact

Questions, comments, or requests relating to this Privacy Policy:

Dr. Tatjana Pavicic Maximilianstr. 36, 80539 München, Germany Email: info(at)tatjanapavicic(dot)com