Privacy

1. Controller

The controller responsible for data processing on this website is: Lux Ulonska, Am Treptower Park 50, 12435 Berlin, Germany, email: connect@stefiliciouslux.art.

2. In short

This is a portfolio website. It uses no cookies, no analytics or tracking tools and no advertising. Fonts, images and our own videos are served directly from our server – no data is passed on to third parties in the process.

The connection to this website is encrypted via TLS/SSL (shown by “https://” in the address bar).

3. Hosting and server log files

This website is hosted by: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit, the server automatically stores information your browser transmits in so-called log files: IP address, date and time of access, page requested, referrer URL, browser type and operating system.

This data is technically necessary to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation). Log files are deleted after a short period unless they are needed to investigate a security incident. A data processing agreement under Art. 28 GDPR is in place with the hosting provider.

4. Contact form and email

If you use the contact form or send an email, the data you provide (name, email address, topic, message) is processed solely to answer your enquiry. Form data is sent by email to connect@stefiliciouslux.art and is not stored in a database.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract (e.g. a booking or costume commission), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). The data is deleted once it is no longer needed and no statutory retention obligations apply.

5. YouTube videos

Some project pages include videos from YouTube (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Videos are only loaded once you actively click “Play video” – before that, no connection to YouTube is made. We use the privacy-enhanced mode (youtube-nocookie.com).

As soon as you start a video, data such as your IP address is transmitted to YouTube/Google, possibly also to the USA. Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR). More information: https://policies.google.com/privacy

6. Links to Instagram and other sites

This website contains plain links to Instagram and to partners’ websites. These are not embedded content: data is only transmitted when you click a link and open the other site, where that provider’s privacy policy applies.

7. Your rights

You have the right to access your stored data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. An informal message to connect@stefiliciouslux.art is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, Germany.

Last updated

November 2026