PRIVACY POLICY

Datenschutzerklärung — The Open Corner

Stand: April 2026

1. Verantwortliche / Controller

Anna Morgado
Heckscherstraße 50a
20253 Hamburg, Germany
E-Mail: hello@theopencorner.co
Phone: +49 40 23 80 37 71

2. Grundsätze der Datenverarbeitung

We only collect and process personal data where we have a legal basis to do so. The applicable legal bases under the GDPR are:

Art. 6(1)(b) GDPR — processing necessary for the performance of a contract
Art. 6(1)(a) GDPR — your explicit consent
Art. 6(1)(c) GDPR — compliance with a legal obligation
Art. 6(1)(f) GDPR — our legitimate interests, where not overridden by your rights

3. Hosting — Squarespace

This website is hosted by Squarespace, Inc., 225 Varick Street, New York, NY 10014, USA. When you visit this site, Squarespace automatically collects server log data including your IP address, browser type, referring URL, and pages visited. This data is processed to ensure technical operation of the website and is not used to identify you personally. Legal basis: Art. 6(1)(f) GDPR.

Data may be transferred to the USA. Squarespace is certified under the EU-U.S. Data Privacy Framework. For further details, see Squarespace's privacy policy: squarespace.com/privacy

4. Analytics

We use Squarespace's built-in analytics to understand how visitors interact with our site. This data is anonymised and does not allow us to identify individual visitors. No cookies are set for analytics purposes. Legal basis: Art. 6(1)(f) GDPR.

We do not currently use Google Analytics, Meta Pixel, or any other third-party tracking tools. If this changes, this policy will be updated and a cookie consent mechanism will be implemented accordingly.

5. Purchase and account data

When you purchase a product or create a membership account, we collect your name, email address, billing information, and purchase history. This data is required to process your order, deliver access to digital products, and manage your account. Legal basis: Art. 6(1)(b) GDPR.

Billing data is processed via the payment providers listed in Section 7 below. We do not store complete payment card details on our systems.

We retain order and billing data for the duration required under German commercial and tax law (typically 10 years, § 147 AO).

6. Email communications — Mailchimp

We use Mailchimp (The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA) to send transactional emails (order confirmations, access links) and, where you have consented, marketing communications and newsletters.

For transactional emails, the legal basis is Art. 6(1)(b) GDPR. For newsletters and marketing communications, the legal basis is Art. 6(1)(a) GDPR (your consent). You may withdraw your consent at any time by clicking "Unsubscribe" in any email, or by contacting us at hello@theopencorner.co.

Data may be transferred to the USA. Mailchimp is certified under the EU-U.S. Data Privacy Framework. For details: mailchimp.com/legal/privacy

7. Payment processing

Squarespace Payments

Payments made via Squarespace Payments are processed by Squarespace, Inc. and its payment partners. Payment data is transmitted directly to the processor via encrypted connection. Legal basis: Art. 6(1)(b) GDPR.

PayPal

If you choose to pay via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal may process data in the USA. For details: paypal.com/privacy. Legal basis: Art. 6(1)(b) GDPR.

Klarna

If you choose to pay via Klarna, your data (name, email, address, order details) is transmitted to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may perform a creditworthiness check based on this data. For details: klarna.com/datenschutz. Legal basis: Art. 6(1)(b) GDPR.

8. Cookies

This website uses technically necessary cookies required for the operation of the site (e.g. shopping cart, login session). These cookies do not require your consent under § 25 TDDDG (formerly TTDSG), as they are strictly necessary for the service you have requested.

We do not currently use cookies for tracking, advertising, or analytics purposes. If we introduce non-essential cookies in the future, we will implement a consent management solution and update this policy.

9. Your rights under GDPR

You have the right to:

Access the personal data we hold about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data, where no legal retention obligation applies (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing based on legitimate interests (Art. 21 GDPR)

Withdraw any consent given at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at hello@theopencorner.co. You also have the right to lodge a complaint with the competent supervisory authority. In Hamburg, this is the Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI): datenschutz.hamburg.de

10. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted via SSL/TLS encryption.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available on this page. Please check back periodically.