Privacy Policy
Last updated: March 30, 2026
We take the protection of your personal data very seriously. This privacy policy informs you about the nature, scope and purpose of personal data processing on this website in accordance with the General Data Protection Regulation (GDPR/DSGVO), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Controller
The controller responsible for data processing on this website within the meaning of Art. 4(7) GDPR is:
Sara-Lynn Bruhns
Curtiusstrasse 34
12205 Berlin, Germany
Email: selflovelikeflow@gmail.com
Website: www.shadowmadonna.com
If you have questions about the collection, processing, or use of your personal data, or if you wish to exercise your data subject rights, please contact us at the email address above.
2. Hosting and Content Delivery
This website is hosted by Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA.
When you visit this website, Squarespace automatically collects and stores information in server log files that your browser transmits. This may include:
- Your IP address
- Date and time of the request
- Browser type and version
- Operating system
- Referring URL
- Pages visited
Squarespace processes this data on servers located in the United States. The transfer of data to the United States is based on the European Commission's Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, as documented in Squarespace's Data Processing Agreement (DPA). By using Squarespace, we have agreed to their Terms of Service and DPA, which govern data processing on our behalf.
The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest in the stable and secure provision of this website).
For more information, please refer to the [Squarespace Privacy Policy](https://www.squarespace.com/privacy).
3. Cookies
3.1 General Information
This website uses cookies. Cookies are small text files that are stored on your device by your web browser. They serve to make our website more user-friendly, effective, and secure.
In accordance with Section 25 TDDDG, we require your consent before placing any cookies on your device that are not strictly necessary for the operation of the website.
3.2 Strictly Necessary Cookies
The following cookies are technically necessary for the website to function properly. They are placed without your consent in accordance with Section 25(2) TDDDG, as they are essential for the provision of the service you have requested.
| Cookie | Purpose | Duration |
|---|---|---|
| crumb | Prevents cross-site request forgery (CSRF) for website security | Session |
| ss_cookieAllowed | Records whether you have accepted or declined cookies via the cookie banner | 30 days |
| ss_performancecookiesAllowed | Stores your consent choice for performance cookies | 30 days |
| ss_marketingcookiesAllowed | Stores your consent choice for marketing cookies | 30 days |
| CART / hasCart | Indicates whether items are in your shopping cart | 2 weeks |
| squarespace-announcement-bar | Prevents the announcement bar from reappearing after dismissal | Persistent |
| squarespace-popup-overlay | Prevents promotional pop-ups from reappearing after dismissal | Persistent |
| Test | Checks whether your browser supports cookies | Session |
### 3.3 Analytics and Performance Cookies
With your consent, Squarespace places the following analytics cookies to collect anonymized usage data and improve the website experience:
| Cookie | Purpose | Duration |
|---|---|---|
| ss_cid | Identifies unique visitors and tracks sessions for website analytics | 2 years |
| ss_cpvisit | Identifies unique visitors and calculates campaign data | 2 years |
| ss_cvisit | Tracks the current visit session | 30 minutes |
| ss_cvr | Identifies unique visitors and tracks conversion data | 2 years |
| ss_cvt | Tracks the current visit for analytics purposes | 30 minutes |
These cookies are only placed after you have given your consent through the cookie banner. The legal basis for processing is Art. 6(1)(a) GDPR (consent).
3.4 Managing Your Cookie Preferences
You can change your cookie preferences at any time through the cookie banner on our website or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of the website.
You can also delete cookies that have already been stored on your device through your browser settings. For instructions, please refer to your browser's help documentation.
4. Squarespace Analytics
This website uses Squarespace Analytics, a web analytics service provided by Squarespace, Inc. Squarespace Analytics collects data about how visitors interact with the website, including:
- Pages viewed
- Referring websites
- Geographic location (derived from IP address)
- Device and browser information
- Visit duration and navigation paths
This data is processed to understand how visitors use the website and to improve its content and performance. With your consent, this data is collected using the analytics cookies described in Section 3.3.
The legal basis for processing is Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time by adjusting your cookie preferences.
For more information, see the [Squarespace Privacy Policy](https://www.squarespace.com/privacy)
5. Contact Form
This website provides a contact form ("Application of Interest") through which you can submit inquiries. When you use the contact form, the following personal data is collected:
- Name (required)
- Email address (required)
- Phone number (optional)
- Message content (optional)
Your data is transmitted securely via HTTPS encryption. The information you provide will be stored and used exclusively for the purpose of responding to your inquiry and for any follow-up communication related to it.
The legal basis for processing is Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) if your inquiry relates to our services, or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) for general questions.
Your data will be deleted once your inquiry has been fully resolved and no further communication is required, unless we are legally obligated to retain it for a longer period.
6. Instagram and Social Media Links
This website contains links to our Instagram profile and a direct messaging link (ig.me/m/shadow.madonna) that allows you to contact us via Instagram Direct Messages.
These are standard hyperlinks. No data is transferred to Meta Platforms, Inc. (Instagram's parent company) simply by viewing our website. A connection to Meta's servers is only established when you actively click on one of these links.
When you click on the Instagram link, you will be redirected to the Instagram platform, where Meta's own privacy policy applies. Meta may collect the following data upon your visit:
- Your IP address
- Browser and device information
- Referrer URL (indicating that you came from our website)
- Cookies and tracking data set by Meta
If you send us a message via Instagram Direct Messages, Meta processes the content and metadata of that message in accordance with the [Meta Privacy Policy](https://privacycenter.instagram.com/policy). Please note that Instagram Direct Messages are not end-to-end encrypted by default.
We have no influence over the scope and further use of data collected by Meta through the Instagram platform.
The legal basis for providing these links is Art. 6(1)(f) GDPR (legitimate interest in maintaining an online presence and enabling communication with interested persons).
7. Data Transfer to Third Countries
As described in the sections above, personal data may be transferred to recipients in the United States, specifically:
- Squarespace, Inc. (website hosting and analytics)
- Google LLC / Google Ireland Limited (reCAPTCHA Enterprise)
- Meta Platforms, Inc. (when you click Instagram links)
These transfers are safeguarded by appropriate measures in accordance with Art. 46 GDPR, primarily through the European Commission's Standard Contractual Clauses (SCCs). Where applicable, additional technical and organizational measures are implemented to ensure an adequate level of data protection.
8. Your Rights as a Data Subject
Under the GDPR, you have the following rights with respect to your personal data:
- Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed and, if so, to receive a copy of that data along with additional information about the processing.
- Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate personal data concerning you without undue delay.
- Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data where one of the grounds set out in Art. 17 GDPR applies, for example if the data is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data under certain conditions.
- Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
- Right to Object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.
- Right to Withdraw Consent (Art. 7(3) GDPR): If processing is based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. You may contact the supervisory authority in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement.
To exercise any of these rights, please contact us at the email address provided in Section 1.
9. Data Retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Specifically:
- Server log files: Retained by Squarespace in accordance with their data retention policies.
- Contact form submissions: Retained until the inquiry is fully resolved, unless longer retention is required by law.
- Analytics data: Retained for up to 2 years, in accordance with the cookie durations described in Section 3.3.
- Cookie consent records: Retained for 30 days from the date of consent.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. All data transmitted through this website is encrypted using SSL/TLS technology (HTTPS).
12. No Automated Decision-Making
We do not use automated decision-making or profiling as defined in Art. 22 GDPR.
12. Changes to This Privacy Policy
We reserve the right to update this privacy policy to reflect changes in our data processing practices or legal requirements. The current version is always available on this website. We encourage you to review this privacy policy periodically.
13. Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Germany, you may contact:
The data protection supervisory authority responsible for your federal state. A list of all German data protection authorities can be found at: [www.bfdi.bund.de](https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html)