PRIVACY POLICY
1. CONTROLLER
The controller responsible for data processing on this website within the meaning of the GDPR is:
Valeria Kromm
Freelance Illustrator & Animator
Nuremberg, Germany
Email: mail@valeriakromm.com
Website: valeriakromm.com
2. General Information on Data Processing
The protection of your personal data is important to me. I process personal data only to the extent
necessary and on the basis of the legal grounds provided by the GDPR. This statement informs you
about which data is collected, how it is used, and what rights you have.
3. Hosting and Server Log Files
This website is operated by a hosting provider. When you visit the website, your browser
automatically transmits technical data (IP address, browser type, operating system, date/time of
access, URL accessed). This data is stored in server log files and serves technical security
purposes. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after a
maximum of 30 days.
4. Contact Form
If you use the contact form, the data you enter (e.g. name, email address, message) will be
processed to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures)
or Art. 6(1)(f) GDPR (legitimate interest). The data will not be passed on to third parties and will be
deleted after the communication is concluded, unless a statutory retention obligation exists.
5. Embedded YouTube Videos
This website may contain embedded YouTube videos. YouTube is operated by Google Ireland
Limited, Gordon House, Barrow Street, Dublin 4, Ireland. I use YouTube in enhanced privacy mode:
videos are only loaded when you actively click play or after your consent via the cookie banner.
Only then does your browser establish a connection to YouTube servers; in doing so, data
including your IP address may be transmitted to Google. I have no influence over this data processing.
The legal basis is Art. 6(1)(a) GDPR (consent). Further information: policies.google.com/privacy
6. Embedded Vimeo Videos
This website may contain embedded videos from Vimeo. The provider is Vimeo Inc., 555 West 18th
Street, New York, NY 10011, USA. Videos are only loaded after your explicit consent via the cookie
banner. Only then does your browser establish a connection to Vimeo servers; in doing so, personal
data (in particular your IP address) may be transmitted to Vimeo. As Vimeo is based in the USA, data
may be transferred to a third country. Vimeo has committed to compliance with EU Standard
Contractual Clauses (SCCspursuant to Art. 46(2)(c) GDPR).
I embed videos using the ?dnt=1 (Do Not Track) parameter to reduce tracking by Vimeo as far as
possible. I have no influence over any further data processing by Vimeo.
The legal basis is Art. 6(1)(a) GDPR (consent). Further information: vimeo.com/privacy
7. Social Media Links
The website contains links to my profiles on external platforms (e.g. Instagram, LinkedIn, Behance).
These links lead to the respective platforms; by clicking on them you leave this website. These are
simple hyperlinks without embedded tracking pixels or share buttons that transmit data when the
page is loaded. Data processing on these platforms is governed by their respective privacy policies.
8. Cookies
a) Technically necessary cookies
Technically necessary cookies are required for the operation of the website (e.g. session cookies,
storage of cookie consent). These do not require consent pursuant to Section 25(2) TTDSG; the
legal basis is Art. 6(1)(f) GDPR.
b) Optional cookies / third-party cookies
If third-party content (e.g. YouTube, Vimeo) is used, these may set cookies. These are only loaded
after your explicit consent via the cookie consent banner. You can revoke your consent at any time
with effect for the future by accessing the cookie settings via the link in the footer.
9. Newsletter (planned)
Should a newsletter service be set up in the future, registration will be carried out using a double
opt-in procedure. The legal basis will then be Art. 6(1)(a) GDPR (consent). This privacy policy will be
updated accordingly.
10. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of
processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21 GDPR). You may
also withdraw any consent given at any time (Art. 7(3) GDPR).
To exercise your rights, please contact:
You have the right to lodge a complaint with a data protection supervisory authority. The competent
authority for Bavaria is the Bavarian State Office for Data Protection Supervision (BayLDA),
Promenade 27, 91522 Ansbach, www.lda.bayern.de.
11. Currency and Changes
This privacy policy is currently valid (as of: April 2026). Further development of the website or
changes in legal requirements may make it necessary to update this statement. The current version
is always available on the website.