Privacy Policy

Controller

Xenia Beliayeva
Helenenstraße 16
22765 Hamburg, Germany
Email: xenia@beliayeva.com

Hosting and server log files

This website and our email account are hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, on servers in Germany. We have concluded a data processing agreement with the host under Art. 28 GDPR; it processes the data only on our instructions.

Each time this site is accessed, the hosting provider's server automatically records technical access data (IP address, date and time, pages requested, browser type and referring page) in server log files. This happens for technical and security reasons — to keep the website stable and secure — and is based on our legitimate interest under Art. 6(1)(f) GDPR. This data is not combined with other data sources and is deleted automatically after a short period.

Cookies

This website does not use cookies and does not use any third-party analytics service. Nothing about your visit is shared with other companies. The analytics software described below is configured to work entirely without cookies. The only exception is the objection described below: if you switch the counting off, a single cookie remembers that choice — otherwise your objection would be forgotten on the next page.

Payment processing through Stripe

Purchases made through this website are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Selecting the buy button takes you to a payment page operated by Stripe.

There you provide Stripe with the data required for the purchase: name, email address, delivery address and payment details.Your payment details — card number and comparable information — do not reach our server and are processed exclusively by Stripe. From Stripe we receive the work purchased, the amount, your name, your email address and the delivery address, so that we can ship the work and issue the invoice.

The legal basis is Art. 6(1)(b) GDPR — processing is necessary for the performance of the contract of sale. For the retention of invoice data, Art. 6(1)(c) GDPR together with the retention periods under tax and commercial law applies in addition.

Stripe processes part of the data as an independent controller, for example to prevent fraud, to meet legal obligations such as anti-money-laundering checks, and to improve its own services. Stripe's privacy policy applies to that processing.

Stripe may also transfer data to Stripe, Inc. in the United States. Stripe, Inc. is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, Stripe bases transfers on the European Commission's standard contractual clauses. Stripe's privacy policy is available at stripe.com/privacy.

Online withdrawal function

If you declare your withdrawal using the Cancel contract function, we process the details you enter there: your name, the order number or another reference to the contract, optionally the works concerned, and your email address. We need these details in order to process your withdrawal and to send you the acknowledgement of receipt required by law.

The legal basis is Art. 6(1)(b) and (c) GDPR. The declaration is stored on our server and sent to us by email; the storage folder cannot be retrieved from the web. No IP address is stored in plain text. We keep these details for as long as is necessary for processing and for the statutory retention periods.

Web analytics with Matomo

This website uses Matomo, an open-source analytics software, to understand how the site is used. Matomo runs on our own server at stats.beliayeva.com. No data is sent to any third party, and nothing is shared with advertising networks.

Matomo records the pages visited, the time of the visit, the website that linked here, the approximate region derived from a shortened IP address, and technical details such as browser, operating system and screen size. IP addresses are shortened before they are stored, so they cannot be traced back to you.

The legal basis is Art. 6(1)(f) GDPR — the legitimate interest in understanding, in aggregate, how the website is used. Records of individual visits are deleted automatically after 360 days.

If your browser sends a “Do Not Track” signal, Matomo does not record your visit.

You can switch the counting off for yourself at any time. The setting is stored in your browser only and applies to this device.

Visit counting

To see which pages are being read, this website also counts page views on its own server. For each view it records the page address, the date and time, the website that linked here (only the domain name, not the full address), and whether the device is a phone, tablet or computer.

Your IP address is not stored. To tell repeat views apart, a short check value is calculated from your IP address and browser identification together with a random value that changes every day. This check value cannot be turned back into your IP address, and it becomes meaningless the next day. No cookie is set and no profile is created.

The legal basis is Art. 6(1)(f) GDPR. The records are deleted automatically after 360 days.

Fonts

This website uses the typeface “Gothic A1”, which is hosted on our own server. No connection is made to Google or any other third-party font provider when you visit this page, and no data is transmitted to them.

Links to third-party platforms

Some pages link out to Spotify, SoundCloud, Bandcamp, YouTube and Instagram. These are plain links, not embedded players or widgets — nothing is loaded from these platforms until you actively click a link and leave this site. Once you do, the respective platform's own privacy policy applies.

Contact by email

This site does not use a contact form. The email links simply open your own email application; no data is sent to or stored on our server through this website. If you write to us by email, we process the information you provide (such as your name, email address and message) solely to answer your inquiry, based on Art. 6(1)(b) GDPR.

Your rights

Under the GDPR, you have the right to request access to, rectification, or erasure of your personal data, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with a supervisory authority — for us, the Hamburg Commissioner for Data Protection and Freedom of Information (Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit).

Last updated: 29 October 2026