Data protection

MESOLA Agency – Waleria Degtjar
Last updated: October 2025

1. Controller

MESOLA Agency – Waleria Degtjar
Torstraße 30
10119 Berlin
Germany

📧 Email: info@mesola-agency.com
📞 Phone: +49 177 4451713

The data controller pursuant to the EU General Data Protection Regulation (GDPR) is Waleria Degtjar.

2. General Information on Data Processing

We take the protection of your personal data very seriously.
We only process personal data to the extent necessary to provide our website, our real estate services, digital products, and customer communication.
Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

3. Access Data and Hosting

When you access our website, your browser automatically transmits certain data to our server (“server log files”), including:

IP address
Date and time of access
Referring website (referrer URL)
Browser type and version
Operating system

The processing of this data ensures a smooth and secure operation of the website (Art. 6 (1)(f) GDPR).
Server logs are usually deleted after 14 days.

4. Collection and Use of Personal Data

4.1 Contact Form and Email

When you contact us via contact form or email, we collect your name, email address, and message (optionally your phone number) to respond to your inquiry.
Legal basis: Art. 6 (1)(b) GDPR (performance of pre-contractual or contractual measures).

4.2 Newsletter / Mailchimp

We use Mailchimp (Intuit Inc., USA) to send our newsletter.
When you subscribe, your email address (and optionally your name) is stored.
Newsletter delivery is based on your consent (Art. 6 (1)(a) GDPR).
Mailchimp uses cookies and tracking pixels to measure open and click rates.
Data transfers to the USA are based on EU Standard Contractual Clauses (SCCs).
You may revoke your consent at any time via the “unsubscribe” link in each newsletter.

4.3 Orders and Payments

When you purchase digital products from our shop, we process your order and payment data to fulfill the contract.
Payments are handled by external payment providers:

Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland
PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

These providers receive only the data necessary to process the payment.
Legal basis: Art. 6 (1)(b) GDPR.

4.4 Customer Account (optional)

If you create a customer account, we process your login and order details (email, password, purchase history) to simplify future transactions.
Legal basis: Art. 6 (1)(b) GDPR.

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enable website functionality, analyze usage, and improve marketing.

5.1 Essential Cookies

These cookies are required for the basic functioning of the website and cannot be disabled.
Legal basis: Art. 6 (1)(f) GDPR.

5.2 Analytics and Marketing Cookies

With your consent (Art. 6 (1)(a) GDPR), we use analytics tools such as Google Analytics 4, operated by
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.
The tool helps us analyze user behavior (e.g., page views, IP address, device type).
You can revoke or change your consent at any time via the cookie consent banner.

5.3 Cookie Consent Management

We use a Consent Management Platform (CMP) to collect, store, and manage your cookie preferences in compliance with GDPR (Art. 6 (1)(c) GDPR).

6. Data Sharing

We only share your personal data with third parties where necessary to fulfill our contractual obligations (e.g., payment or hosting providers) or where you have given explicit consent.
We do not sell or disclose personal data for marketing purposes.
Disclosure to authorities occurs only if required by law.

7. Retention Period

Personal data is stored only as long as necessary to fulfill the purpose of processing or as required by legal retention periods (e.g., tax documentation for up to 10 years).

8. Your Rights under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to data processing (Art. 21 GDPR)
Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact us at:
📧 info@mesola-agency.com

9. Data Security

We use SSL/TLS encryption (https) to ensure secure data transmission.
Our servers and systems are continuously updated and protected through technical and organizational security measures.

10. External Links & Social Media

Our website may contain links to external websites or social media platforms (e.g., Instagram, LinkedIn).
We are not responsible for the content or privacy practices of these external sites.
When you interact with such platforms, their respective privacy policies apply.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services or legal requirements.
The current version will always be available on our website.

12. Supervisory Authority

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority.
The competent authority for MESOLA Agency is:

Berlin Commissioner for Data Protection and Freedom of Information
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de