privacy policy
Last updated: September 20261. DATA CONTROLLER
The person responsible for the processing of personal data on this website is:
Johanna Oberst
Am Hammer 26
83022 Rosenheim
Germany
2. GENERAL INFORMATION
I take the protection of your personal data seriously.
This Privacy Policy explains what personal data may be processed when you visit oberst.graphics, why it is processed, and what rights you have under applicable data protection law.
I only process personal data where there is a legal basis for doing so and only to the extent necessary for the respective purpose.
3. HOSTING AND WEBSITE OPERATION
This website is built and hosted using Squarespace.
When you visit the website, technically necessary information may be processed to ensure that the website can be securely and reliably provided. This may include your IP address, date and time of access, browser type and version, operating system, referring URL, requested pages and transmitted data volumes.
Squarespace provides the technical infrastructure for this website and may process visitor data on my behalf.
For more information about how Squarespace processes personal data, please refer to Squarespace's own privacy documentation.
4. COOKIES
This website uses cookies and similar technologies.
Some cookies are technically necessary for the website to function properly. These cookies may be used without consent where they are strictly necessary to provide the website or a function explicitly requested by you.
Analytics and performance cookies are treated separately from necessary cookies. These cookies are only used where you have given your consent through the cookie banner.
You can change or withdraw your cookie preferences at any time through the cookie settings on this website.
Squarespace distinguishes between necessary cookies and non-essential analytics and performance cookies. Its cookie settings allow website owners to restrict non-essential cookies until visitors have given their consent.
5. SQUARESPACE ANALYTICS
I use Squarespace Analytics to understand how visitors use this website and to improve its content, structure and overall experience.
Depending on your consent and the settings of the website, Squarespace Analytics may process information such as:
browser, network and device information
the website you visited before arriving here
IP address
pages visited
clicks and interactions
internal links
scrolling behaviour
timestamps
Analytics and performance cookies are only used after you have given the required consent through the cookie banner.
You can withdraw your consent at any time by changing your cookie preferences.
Squarespace explains that its Analytics service can process this type of visitor information for traffic and activity analysis.
6. CONTACT
If you contact me by email, I process the information you provide in order to respond to your enquiry.
This may include your name, email address and any other information you choose to include in your message.
I only retain this information for as long as necessary to handle your enquiry or where legal retention obligations apply.
7. STICKER WALL
This website includes an interactive Sticker Wall that allows visitors to upload images and contribute them to the publicly visible wall.
The Sticker Wall uses Supabase for database and file storage.
When you upload an image, the image file is stored in the Supabase Storage bucket used for the Sticker Wall. In addition, technical information relating to the display of the sticker is stored, including its position, size, rotation and creation timestamp.
The Supabase project is hosted in the Central EU (Frankfurt) region. According to Supabase, the selected project region determines where the primary project data is stored.
The Sticker Wall uses a public storage bucket because uploaded images are intended to be displayed publicly on the website. Images stored in a public Supabase bucket can be accessed through their public file URL.
Please only upload images that you are entitled to publish.
Do not upload images containing other people or other personal information unless you have the necessary rights or permissions to publish them.
8. EXTERNAL LINKS
This website contains links to external websites and social media platforms.
These links are clearly identifiable as external links. When you follow one of these links, you leave this website.
The processing of personal data on the external website is governed by the privacy policy of the respective provider. I have no control over how external providers process your data.
9. YOUR RIGHTS
Under applicable data protection law, you may have the following rights:
the right to access your personal data
the right to correct inaccurate or incomplete data
the right to request deletion of your personal data
the right to request restriction of processing
the right to data portability
the right to object to certain processing activities
the right to withdraw consent at any time, where processing is based on consent
You also have the right to lodge a complaint with a competent data protection supervisory authority.
10. DATA PROTECTION SUPERVISORY AUTHORITY
If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with a data protection supervisory authority.
As the website operator is based in Bavaria, the competent supervisory authority may be:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach
Germany
Website: https://www.lda.bayern.de/
11. UPDATES TO THIS PRIVACY POLICY
I may update this Privacy Policy if the technical setup of this website, the services used or applicable legal requirements change.
The current version will always be published on this page.
Last updated: September 2026