Privacy Policy

This is a translation for your convenience. The German version is legally binding.

1. Controller

Mario Meruna, Schöneberger Straße 25, 12103 Berlin, Germany
Email: mario@meruna.at

2. General

This website does not set any cookies itself, does not use analytics or tracking tools, and does not load external fonts. External content from Instagram is only loaded after you click (see section 6). Personal data is processed only as far as necessary to run the website and handle your request.

3. Hosting and server log files

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Data may be transferred to the USA. Netlify is certified under the EU-US Data Privacy Framework and additionally uses the European Commission's Standard Contractual Clauses. More: netlify.com/privacy. When you visit the site, technically necessary data (e.g. IP address, date and time, page visited, browser type) is stored in server log files. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating the website securely).

4. Contact form

When you use the contact form, your details (name, email, optional phone number, district/city, preferred lesson location, lesson details and your message) are processed to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR.

Form submissions are received via the form feature of my host Netlify (see section 3), stored there and forwarded to me by email. I delete requests there regularly, at the latest once they have been dealt with.

Your data is deleted as soon as it is no longer needed to handle your request, unless statutory retention obligations apply (e.g. for invoices).

5. Intro call and online lessons via Google Meet

For the free intro call and online lessons I use Google Meet, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The data needed for the video call is processed, e.g. your name or display name, video and audio during the call, your IP address and technical connection data. You don't need a Google account to join.

The legal basis is Art. 6(1)(b) GDPR (performance or initiation of the lesson contract). Data may also be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. Calls and lessons are not recorded unless we expressly agree to it. More information: policies.google.com/privacy.

6. Instagram

Embedded videos: In the "Videos" section you can watch posts from my Instagram profile. They are only loaded when you click "Load videos"; until then, no data is sent to Instagram. After you click, your browser connects to Instagram's servers (Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland). Your IP address, browser information and the page visited may be transmitted, including to the USA, and Instagram may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), given by clicking; it applies to the current page visit only. See Instagram's privacy policy: privacycenter.instagram.com/policy.

Links: There are also simple links to my Instagram profile. You are only redirected to Instagram when you click one of them.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing (Art. 15–21 GDPR). You can withdraw any consent at any time. You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information.

Last updated: October 2026