Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

Rising Yellow
Gözde Imamoglu
Dalbergstraße 1
65929 Frankfurt am Main
Germany

Email: gozde.imamoglu@risingyellow.com

2. General Information on Data Processing

We take the protection of your personal data seriously. Personal data is processed in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection laws.

Personal data refers to any information that can identify you personally.

3. Data Collection When Visiting This Website

When you visit this website, technical information is automatically collected by our hosting provider (Squarespace).

This may include:

  • IP address

  • browser type and version

  • operating system

  • date and time of access

  • referring URL

  • pages visited

This data ensures website functionality, stability, and security.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest)

4. Squarespace Analytics

This website is hosted on Squarespace, which provides built-in analytics to understand website performance and visitor behavior.

Squarespace may collect anonymized usage data such as:

  • page views

  • visit duration

  • traffic sources

  • device type

This data helps improve website performance and user experience.

Legal basis: Art. 6(1)(f) GDPR
(or Art. 6(1)(a) GDPR where consent is required)

More information: https://www.squarespace.com/privacy

5. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd.

Google Analytics uses cookies to analyze how visitors use the website. The information generated may include:

  • anonymized IP address

  • pages visited

  • session duration

  • interactions

IP anonymization is enabled where possible.

Google processes this information on our behalf to evaluate website usage and improve our services.

Google Analytics is only activated after your consent via the cookie banner.

Legal basis: Art. 6(1)(a) GDPR (consent)

You can prevent data collection by Google Analytics via browser settings or cookie preferences.

More information: https://policies.google.com/privacy

6. Newsletter & Email Communication (ConvertKit)

If you subscribe to our newsletter, your data is processed by ConvertKit, an email marketing service provided by ConvertKit LLC, USA.

Data collected may include:

  • email address

  • name (if provided)

  • subscription status

  • interaction with emails (e.g., open rates, clicks)

Subscription uses a double opt-in procedure to confirm consent.

Your data may be transferred to the United States. ConvertKit uses safeguards such as Standard Contractual Clauses to ensure GDPR compliance.

Legal basis: Art. 6(1)(a) GDPR (consent)

You can unsubscribe at any time via the link in any email.

More information: https://convertkit.com/privacy

7. Purchases & Payment Processing (Stripe)

Payments are processed via Stripe Payments Europe Ltd.

When making a purchase, payment data is transmitted directly to Stripe. We do not store full payment details.

Stripe may process:

  • name

  • billing address

  • payment details

  • transaction data

Legal basis: Art. 6(1)(b) GDPR (contract fulfillment)

More information: https://stripe.com/privacy

8. Contact & Email Communication

If you contact us via email, we store the information you provide to respond to your inquiry.

Legal basis: Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR

9. Cookies

This website uses cookies to ensure proper functionality and improve user experience.

Cookies may be necessary for:

  • website functionality

  • security

  • analytics

  • remembering preferences

Non-essential cookies (e.g., analytics) are only used with your consent.

You can manage your cookie preferences at any time.

Legal basis: Art. 6(1)(a) GDPR (consent)
Art. 6(1)(f) GDPR (necessary cookies)

10. Data Retention

Personal data is stored only as long as necessary to fulfill its purpose or comply with legal obligations.

11. Your Rights Under GDPR

You have the right to:

  • access your data (Art. 15 GDPR)

  • correct inaccurate data (Art. 16 GDPR)

  • request deletion (Art. 17 GDPR)

  • restrict processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • withdraw consent at any time (Art. 7(3) GDPR)

  • lodge a complaint with a supervisory authority

12. Right to Object

You may object to the processing of your personal data at any time where processing is based on legitimate interest.

13. Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, loss, or misuse.

14. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect legal changes or improvements to our services.