Privacy Policy
Imprint
Information pursuant to Section 5 of the German Digital Services Act (DDG)
Paint with Lioba
Website owner and content provider:
Lioba Brückner
Germany
Contact
Email:hello@paintwithlioba.com
VAT Identification Number
VAT identification number pursuant to Section 27a of the German VAT Act:
VAT: DE287821775
Consumer Dispute Resolution
We are neither willing nor obliged to participate in dispute-resolution proceedings before a consumer arbitration board.
Privacy Policy
Last updated: 29.7.2026
This Privacy Policy explains how personal data is collected and processed when you visit paintwithlioba.com, create an account, purchase a subscription or use the Paint with Lioba course platform.
1. Data Controller
The controller responsible for this website is:
Lioba Brückner
Germany
VAT: DE287821775
Email: hello@paintwithlioba.com
2. Website Hosting
Our website is hosted by:
alfahostimg.com
When you visit our website, technical information may be processed automatically, including your IP address, browser type, operating system, requested page, date and time of access and possible error messages.
This information is used to provide the website securely, prevent misuse and resolve technical problems.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Server log files are deleted after 7 days, unless longer storage is required to investigate a security incident or comply with legal obligations.
3. Customer Accounts and Course Access
Our website uses WordPress and LearnPress to provide customer accounts, subscriptions and digital video courses.
When you create an account, purchase a subscription or use a course, we may process:
your name and email address;
your username and account details;
your purchased subscription;
payment and billing information;
course enrolment and progress;
login and access information;
messages relating to your account or purchase.
This information is required to create and manage your account, provide access to purchased courses and fulfil our contract with you.
The legal basis is Article 6(1)(b) GDPR.
Account information is stored for as long as your account or subscription remains active. Certain transaction and invoice information may be retained for longer where required by tax, accounting or commercial law.
4. Payments Through Stripe
Payments are processed by Stripe.
For customers in the European Economic Area, Stripe services may be provided by:
Stripe Technology Company Limited
The One Building
1 Grand Canal Street Lower
Dublin 2
Ireland
When you make a payment, Stripe may process information including your name, email address, billing details, payment method, transaction amount, IP address and fraud-prevention information.
We do not normally receive your complete card details. We receive the information necessary to confirm and administer your payment, such as the payment status and transaction number.
The legal basis is Article 6(1)(b) GDPR.
Stripe also processes certain information under its own responsibility, for example to prevent fraud, comply with legal obligations and provide its payment services.
5. Contact and Customer Support
When you contact us by email or through a contact form, we process the information you provide, such as your name, email address, message and relevant account or purchase details.
Where your request concerns a purchase or subscription, the legal basis is Article 6(1)(b) GDPR.
For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to messages and managing our business communications.
Messages are deleted when they are no longer required, unless legal retention obligations apply.
6. Cookies and Similar Technologies
Our website uses technically necessary cookies and, with your consent, optional cookies and similar technologies.
Technically necessary cookies are used for functions such as:
secure login;
customer accounts;
course access;
checkout and payment processing;
subscription management;
website security;
storing your cookie preferences.
These technologies are required to provide the website and services requested by you.
Optional technologies are used only after you have provided consent. They may be used for advertising, conversion measurement, external media and similar purposes.
The legal basis for optional technologies is your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may accept or reject optional technologies and change your selection at any time through the “Cookie Settings” link in the footer of our website.
Further information about individual cookies, their purposes and storage periods is displayed in our cookie settings.
7. Meta Pixel
With your consent, we use the Meta Pixel provided by:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
The Meta Pixel helps us measure the effectiveness of advertisements on Facebook and Instagram and understand how visitors interact with our website.
Meta may receive information including:
your IP address;
browser and device information;
pages visited;
website interactions;
registrations and purchases;
transaction value and currency;
cookie and device identifiers.
Meta may associate this information with your Facebook or Instagram account and use it for advertising, measurement, personalisation and security purposes.
The Meta Pixel is activated only after you have consented to marketing technologies.
The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG.
You may withdraw your consent at any time through the “Cookie Settings” link. The withdrawal applies to future processing.
For certain collection and transmission activities, we and Meta may act as joint controllers. Meta is independently responsible for its subsequent processing.
8. Embedded Videos
Our website and courses contain videos hosted by:
Youtube, Vimeo
When a video is loaded, the provider may receive information such as your IP address, browser and device information, the page or course visited and information about video playback.
Videos on publicly accessible pages are only loaded after the required consent has been provided.
Videos within purchased courses may be loaded where this is necessary to provide the course you purchased. The legal basis for the necessary processing is Article 6(1)(b) GDPR.
Optional advertising or tracking technologies used by the video provider remain subject to consent.
Further information is available in the privacy policy of Youtube and Vimeo.
9. Newsletter
When you subscribe to our newsletter, we process your email address and, where provided, your name.
The newsletter is sent on the basis of your consent under Article 6(1)(a) GDPR.
We may use a double opt-in process to verify your subscription and document your consent.
You may unsubscribe at any time using the unsubscribe link included in each newsletter.
Your newsletter information is stored until you unsubscribe or withdraw your consent, unless limited further retention is required to document previously granted consent.
10. Recipients and Service Providers
We may share personal data with service providers where this is necessary to operate the website, process payments or provide the courses.
These may include:
our hosting provider;
WordPress and LearnPress service providers;
Stripe;
Meta
our video-hosting provider;
our newsletter provider, where applicable;
IT, accounting and tax service providers;
public authorities where disclosure is legally required.
Service providers acting on our behalf may only process personal data in accordance with our instructions and applicable data-protection law.
11. International Data Transfers
Some providers, particularly Meta, Stripe or the video-hosting provider, may process personal data outside the European Economic Area.
Where required, international transfers are based on an adequacy decision by the European Commission, Standard Contractual Clauses or another legally recognised transfer mechanism.
12. Data Retention
We retain personal data only for as long as it is required for the relevant purpose.
In particular:
account information is generally stored for the duration of your account;
course and subscription information is stored for the duration of the customer relationship;
transaction and invoice records are retained for applicable statutory periods;
contact requests are retained until the matter has been resolved;
consent information may be stored for as long as necessary to document your selection.
Information may be stored for longer where this is required by law or necessary to establish, exercise or defend legal claims
13. Your Rights
Under applicable data-protection law, you may have the right to:
request access to your personal data;
request correction of inaccurate information;
request deletion of your information;
request restriction of processing;
object to processing based on legitimate interests;
receive certain information in a portable format;
withdraw consent at any time with effect for the future;
lodge a complaint with a data-protection authority.
To exercise your rights, contact:
hello@paintwithlioba.com
You may lodge a complaint with the data-protection authority responsible for your place of residence or with the authority responsible for us:
[RESPONSIBLE GERMAN DATA-PROTECTION AUTHORITY AND ADDRESS]
14. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and unlawful disclosure.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
15. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies or legal obligations change.
The current version is always available on this page. The date of the latest update appears at the top.
