PRIVACY POLICY
Last updated: June 2026
Who I am
This privacy policy applies to the website www.sashatulen.com, operated by Sasha Tulen / Alexandra Bekorevich, Dubliner Str. 8, 13349 Berlin, Germany. Email: mail@sashatulen.com
I am the sole controller of personal data collected through this website.
What data I collect and why
Contact inquiries When you contact me via the contact form or by email, I collect your name and email address. This data is used solely to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR — processing is necessary to take steps at your request.
Bookings and payments When you book a service, I collect your name, email address, and payment information. Payment data is processed exclusively by Squarespace Payments and is never stored by me directly. The legal basis is Art. 6(1)(b) GDPR — processing is necessary to fulfill a contract.
Website usage and cookies This website is hosted by Squarespace, which may collect technical data such as IP addresses, browser type, and pages visited for security and analytics purposes. Cookies are used as part of standard Squarespace functionality. The legal basis is Art. 6(1)(f) GDPR — legitimate interest in operating a functional and secure website. You can disable cookies in your browser settings, though some features may not work correctly as a result.
How long I keep your data
Contact and booking data is kept for as long as necessary to fulfill the purpose it was collected for, or as required by German tax and commercial law (generally up to 10 years for financial records).
Third-party services
This website uses Squarespace (Squarespace Inc., 225 Varick Street, New York, NY 10014, USA) as its hosting and payment provider. Squarespace processes data on my behalf as a data processor. For details on how Squarespace handles data, visit squarespace.com/privacy.
I do not share your personal data with any other third parties.
Your rights
Under GDPR you have the right to:
access the personal data I hold about you
request correction or deletion of your data
withdraw consent at any time
object to or request restriction of processing
lodge a complaint with the supervisory authority
The supervisory authority for Berlin is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, www.datenschutz-berlin.de.
To exercise any of these rights, contact me at mail@sashatulen.com.
Changes to this policy
I may update this policy if my data practices change. I recommend checking this page periodically. The date at the top indicates when it was last revised.
this is solid and GDPR-compliant for your situation. copy it straight into your squarespace privacy policy page and replace what's there.