Here you can find out what data we process on this website, what we use it for and what rights you have.
This is a translation for your convenience. Only the German version is legally binding. German version
The controller responsible for data processing on this website is:
Aslaug Marie Mjolhus und Victor Elias GbR (Vanua Media)
Kantstr. 127
10625 Berlin
Phone: +49 173 7264232
Email: info@vanua-media.de
For all questions about data protection and to exercise your rights, you can contact us at any time using these contact details. We have not appointed a data protection officer, as we are not legally required to do so.
Personal data is any data that can be used to identify you personally, for example name, email address or IP address. On this website we process such data in the following cases:
For simple visitor statistics we use Cloudflare Web Analytics, which works without cookies and doesn’t recognise individual visitors (see section 3). We don’t run ads and don’t sell data. We don’t use cookies for analytics or marketing purposes.
This website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare operates a worldwide network of servers (content delivery network) and protects the website against attacks and abusive access.
When you visit our website, your request is routed via Cloudflare servers. In doing so, Cloudflare processes in particular your IP address, date and time of access, the page requested, the browser type and operating system and the previously visited page (referrer). This data is technically necessary to deliver the website and ensure its security and stability. It is not merged with other data sources.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website securely, quickly and reliably.
We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR). This may involve a transfer of data to the USA.
Cloudflare is certified under the EU-US Data Privacy Framework (DPF). The transfer to the USA is based on this certification (adequacy decision of the EU Commission, Art. 45 GDPR) and additionally on the EU Commission’s standard contractual clauses.
More information: https://www.cloudflare.com/en-gb/privacypolicy/
To understand how our website is used, for example which pages are visited and how often, we use Cloudflare Web Analytics. The provider is Cloudflare (see above). The service sets no cookies, stores nothing in your browser and creates no user profiles; individual visitors are not recognised.
It processes technical information such as the page visited, the previous page (referrer), browser, operating system, device type, country and loading times. We only see aggregated statistics.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in statistically evaluating and improving the use of our website. For transfers to the USA, the information on Cloudflare above applies.
More information: https://www.cloudflare.com/web-analytics/
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar. Data you send us via the forms therefore cannot be read by third parties.
The fonts used on this website are hosted locally on our server. When you open the pages, no connection is made to third-party servers (such as Google) to load fonts.
If you send us a message via the contact form, we process the information you provide there: name, email address, phone number and the content of your message. The same applies if you contact us by email or phone.
Form data is transmitted in encrypted form and stored in our customer management system HubSpot (see section 6); we also receive a notification by email. We use the data to answer your enquiry and, where applicable, to prepare a quote. We don’t pass it on to third parties, apart from the service providers named in this policy who work on our behalf.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry is aimed at concluding a contract or relates to an existing contract. In all other cases, processing is based on our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).
We keep the data for as long as it is needed to handle your enquiry and any possible collaboration, and delete it no later than three years after our last contact. If an order is placed, the periods in section 5 apply. Statutory retention obligations (for example for business letters) remain unaffected.
To book the podcast studio, we process the information from the booking form: chosen service, date and time, name, company if applicable, billing address (street, postcode, city), email address, phone number as well as voluntary information about your podcast and your message to us.
We need this data to check and confirm the booking, send you the studio address and organisational information, issue the invoice and carry out the session. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract and pre-contractual measures). Without this information we cannot accept the booking.
We also store the details from the booking form in our customer management system HubSpot (see section 6).
We keep invoices and booking-related documents in accordance with tax and commercial law requirements (Section 147 AO, Section 257 HGB), usually for up to ten years. We delete all other data as soon as it is no longer required to process the booking, and no later than three years after our last contact.
If you already select a service or package on the “Podcast studio” page and then switch to booking, we briefly store this selection in your browser’s local storage so that it is pre-filled on the booking page. No personal details such as name or email address are stored. The entry is deleted as soon as the booking page has read it. This storage is strictly necessary for the function you requested (Section 25 (2) No. 2 TDDDG, Art. 6 (1) (b) GDPR).
We store enquiries from the contact form and studio booking requests in our customer relationship management system (CRM) HubSpot. This helps us keep track of enquiries, quotes and projects. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
We store the details from the respective form, the page and language the enquiry came from, your consents and our further correspondence with you. The data is stored in a HubSpot data centre in the EU.
The legal basis is Art. 6(1)(b) GDPR where it concerns handling your enquiry, a quote or an order, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in the orderly management of our customer and business contacts.
We have concluded a data processing agreement with HubSpot (Art. 28 GDPR). Access by the US parent company HubSpot, Inc. or its sub-processors cannot be ruled out. HubSpot, Inc. is certified under the EU-US Data Privacy Framework (DPF); the EU Commission’s standard contractual clauses also apply.
We delete the data no later than three years after our last contact, unless statutory retention obligations prevent this.
More information: https://legal.hubspot.com/privacy-policy
If you tick the optional email box in the contact or booking form, we will occasionally send you news, offers and project examples, at most once a month. Signing up is voluntary and not a condition for your enquiry or booking.
We use the double opt-in procedure: you first receive an email in which you confirm your sign-up. Only then do we send you such emails. To be able to prove your consent, we store the time of sign-up and confirmation as well as the wording of the consent.
We send the emails via HubSpot (see section 6). This records whether an email was opened and which links were clicked, so we can see which content interests you.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 7(2) of the German Unfair Competition Act, UWG). You can withdraw it at any time with effect for the future, using the unsubscribe link in every email or by writing to info@vanua-media.de. After you unsubscribe, you will no longer receive such emails; we keep proof of your earlier consent for as long as we need it to defend against possible claims.
Our forms contain a field that is invisible to people and is only filled in by automated programs. Enquiries in which this field is filled in are discarded automatically. No further data is processed for this.
To book an intro call, we embed the calendar of the Cal.com service. The provider is Cal.com, Inc., 2810 N. Church St., Wilmington, DE 19802, USA.
The calendar is loaded as soon as you scroll to the “Book an intro call” section. At that point Cal.com receives technical data such as your IP address and browser information. If you book an appointment, Cal.com also processes the details you enter there (for example name, email address, chosen appointment and, if applicable, a message) and passes them on to us. Cal.com may use technically necessary cookies or similar technologies.
The legal basis for embedding the calendar is our legitimate interest in offering simple online appointment booking (Art. 6 (1) (f) GDPR). Where information is stored on or read from your device, this is strictly necessary for the appointment booking you request (Section 25 (2) No. 2 TDDDG). Your booking data is processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Cal.com processes the booking data on our behalf (Art. 28 GDPR) on the basis of Cal.com’s data processing agreement (https://cal.com/dpa). The transfer of data to the USA is based on the EU Commission’s standard contractual clauses contained therein. Alternatively, you can always contact us by email or phone to arrange an appointment.
More information: https://cal.com/privacy
On our website we link to content and profiles on external platforms, for example videos on YouTube, our profiles on Instagram and LinkedIn and our business profile with reviews on Google. This content is not embedded directly in our pages. A connection to the respective provider is only established when you click a link. From then on, the privacy policy of the respective provider applies:
The customer reviews shown on our website come from our public Google business profile.
Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective purpose. It is then deleted, unless statutory retention obligations (for example under tax or commercial law) prevent this. In that case, processing is restricted and the data is deleted once the period has expired.
We only pass on personal data if this is necessary to fulfil a contract, if we are legally obliged to do so (for example to tax authorities or our tax adviser) or if a service provider acts on our behalf (processing on behalf according to Art. 28 GDPR).
You have the following rights towards us at any time regarding the personal data concerning you:
Just write to us at info@vanua-media.de.
If we process your data on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
If your data is processed for direct marketing purposes, you can object to this at any time. Your data will then no longer be used for this purpose.
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de
We hereby object to the use of the contact details published as part of the imprint obligation for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example by spam email.
Last updated: November 2026. We update this privacy policy when our website or the services we use change.
Here you can find out what data we process on this website, what we use it for and what rights you have.
This is a translation for your convenience. Only the German version is legally binding. German version
The controller responsible for data processing on this website is:
Aslaug Marie Mjolhus und Victor Elias GbR (Vanua Media)
Kantstr. 127
10625 Berlin
Phone: +49 173 7264232
Email: info@vanua-media.de
For all questions about data protection and to exercise your rights, you can contact us at any time using these contact details. We have not appointed a data protection officer, as we are not legally required to do so.
Personal data is any data that can be used to identify you personally, for example name, email address or IP address. On this website we process such data in the following cases:
For simple visitor statistics we use Cloudflare Web Analytics, which works without cookies and doesn’t recognise individual visitors (see section 3). We don’t run ads and don’t sell data. We don’t use cookies for analytics or marketing purposes.
This website is provided via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”). Cloudflare operates a worldwide network of servers (content delivery network) and protects the website against attacks and abusive access.
When you visit our website, your request is routed via Cloudflare servers. In doing so, Cloudflare processes in particular your IP address, date and time of access, the page requested, the browser type and operating system and the previously visited page (referrer). This data is technically necessary to deliver the website and ensure its security and stability. It is not merged with other data sources.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing the website securely, quickly and reliably.
We have concluded a data processing agreement with Cloudflare (Art. 28 GDPR). This may involve a transfer of data to the USA.
Cloudflare is certified under the EU-US Data Privacy Framework (DPF). The transfer to the USA is based on this certification (adequacy decision of the EU Commission, Art. 45 GDPR) and additionally on the EU Commission’s standard contractual clauses.
More information: https://www.cloudflare.com/en-gb/privacypolicy/
To understand how our website is used, for example which pages are visited and how often, we use Cloudflare Web Analytics. The provider is Cloudflare (see above). The service sets no cookies, stores nothing in your browser and creates no user profiles; individual visitors are not recognised.
It processes technical information such as the page visited, the previous page (referrer), browser, operating system, device type, country and loading times. We only see aggregated statistics.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in statistically evaluating and improving the use of our website. For transfers to the USA, the information on Cloudflare above applies.
More information: https://www.cloudflare.com/web-analytics/
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar. Data you send us via the forms therefore cannot be read by third parties.
The fonts used on this website are hosted locally on our server. When you open the pages, no connection is made to third-party servers (such as Google) to load fonts.
If you send us a message via the contact form, we process the information you provide there: name, email address, phone number and the content of your message. The same applies if you contact us by email or phone.
Form data is transmitted in encrypted form and stored in our customer management system HubSpot (see section 6); we also receive a notification by email. We use the data to answer your enquiry and, where applicable, to prepare a quote. We don’t pass it on to third parties, apart from the service providers named in this policy who work on our behalf.
The legal basis is Art. 6 (1) (b) GDPR if your enquiry is aimed at concluding a contract or relates to an existing contract. In all other cases, processing is based on our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).
We keep the data for as long as it is needed to handle your enquiry and any possible collaboration, and delete it no later than three years after our last contact. If an order is placed, the periods in section 5 apply. Statutory retention obligations (for example for business letters) remain unaffected.
To book the podcast studio, we process the information from the booking form: chosen service, date and time, name, company if applicable, billing address (street, postcode, city), email address, phone number as well as voluntary information about your podcast and your message to us.
We need this data to check and confirm the booking, send you the studio address and organisational information, issue the invoice and carry out the session. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract and pre-contractual measures). Without this information we cannot accept the booking.
We also store the details from the booking form in our customer management system HubSpot (see section 6).
We keep invoices and booking-related documents in accordance with tax and commercial law requirements (Section 147 AO, Section 257 HGB), usually for up to ten years. We delete all other data as soon as it is no longer required to process the booking, and no later than three years after our last contact.
If you already select a service or package on the “Podcast studio” page and then switch to booking, we briefly store this selection in your browser’s local storage so that it is pre-filled on the booking page. No personal details such as name or email address are stored. The entry is deleted as soon as the booking page has read it. This storage is strictly necessary for the function you requested (Section 25 (2) No. 2 TDDDG, Art. 6 (1) (b) GDPR).
We store enquiries from the contact form and studio booking requests in our customer relationship management system (CRM) HubSpot. This helps us keep track of enquiries, quotes and projects. The provider is HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.
We store the details from the respective form, the page and language the enquiry came from, your consents and our further correspondence with you. The data is stored in a HubSpot data centre in the EU.
The legal basis is Art. 6(1)(b) GDPR where it concerns handling your enquiry, a quote or an order, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in the orderly management of our customer and business contacts.
We have concluded a data processing agreement with HubSpot (Art. 28 GDPR). Access by the US parent company HubSpot, Inc. or its sub-processors cannot be ruled out. HubSpot, Inc. is certified under the EU-US Data Privacy Framework (DPF); the EU Commission’s standard contractual clauses also apply.
We delete the data no later than three years after our last contact, unless statutory retention obligations prevent this.
More information: https://legal.hubspot.com/privacy-policy
If you tick the optional email box in the contact or booking form, we will occasionally send you news, offers and project examples, at most once a month. Signing up is voluntary and not a condition for your enquiry or booking.
We use the double opt-in procedure: you first receive an email in which you confirm your sign-up. Only then do we send you such emails. To be able to prove your consent, we store the time of sign-up and confirmation as well as the wording of the consent.
We send the emails via HubSpot (see section 6). This records whether an email was opened and which links were clicked, so we can see which content interests you.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 7(2) of the German Unfair Competition Act, UWG). You can withdraw it at any time with effect for the future, using the unsubscribe link in every email or by writing to info@vanua-media.de. After you unsubscribe, you will no longer receive such emails; we keep proof of your earlier consent for as long as we need it to defend against possible claims.
Our forms contain a field that is invisible to people and is only filled in by automated programs. Enquiries in which this field is filled in are discarded automatically. No further data is processed for this.
To book an intro call, we embed the calendar of the Cal.com service. The provider is Cal.com, Inc., 2810 N. Church St., Wilmington, DE 19802, USA.
The calendar is loaded as soon as you scroll to the “Book an intro call” section. At that point Cal.com receives technical data such as your IP address and browser information. If you book an appointment, Cal.com also processes the details you enter there (for example name, email address, chosen appointment and, if applicable, a message) and passes them on to us. Cal.com may use technically necessary cookies or similar technologies.
The legal basis for embedding the calendar is our legitimate interest in offering simple online appointment booking (Art. 6 (1) (f) GDPR). Where information is stored on or read from your device, this is strictly necessary for the appointment booking you request (Section 25 (2) No. 2 TDDDG). Your booking data is processed to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).
Cal.com processes the booking data on our behalf (Art. 28 GDPR) on the basis of Cal.com’s data processing agreement (https://cal.com/dpa). The transfer of data to the USA is based on the EU Commission’s standard contractual clauses contained therein. Alternatively, you can always contact us by email or phone to arrange an appointment.
More information: https://cal.com/privacy
On our website we link to content and profiles on external platforms, for example videos on YouTube, our profiles on Instagram and LinkedIn and our business profile with reviews on Google. This content is not embedded directly in our pages. A connection to the respective provider is only established when you click a link. From then on, the privacy policy of the respective provider applies:
The customer reviews shown on our website come from our public Google business profile.
Unless a more specific storage period is stated in this privacy policy, we only store personal data for as long as is necessary for the respective purpose. It is then deleted, unless statutory retention obligations (for example under tax or commercial law) prevent this. In that case, processing is restricted and the data is deleted once the period has expired.
We only pass on personal data if this is necessary to fulfil a contract, if we are legally obliged to do so (for example to tax authorities or our tax adviser) or if a service provider acts on our behalf (processing on behalf according to Art. 28 GDPR).
You have the following rights towards us at any time regarding the personal data concerning you:
Just write to us at info@vanua-media.de.
If we process your data on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
If your data is processed for direct marketing purposes, you can object to this at any time. Your data will then no longer be used for this purpose.
If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is:
Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61
10555 Berlin
www.datenschutz-berlin.de
We hereby object to the use of the contact details published as part of the imprint obligation for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited advertising, for example by spam email.
Last updated: November 2026. We update this privacy policy when our website or the services we use change.