Privacy Policy (Datenschutzerklärung)

The protection of your personal data matters to me. This privacy policy explains what personal data is collected when you visit this website, book a workshop, join the newsletter or take part in a session, why it is collected, and what rights you have under the General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).
Last updated: 15.08.2026

1. Controller (Verantwortliche)

The party responsible for data processing on this website and in connection with the sozo space is:
Zoé Coetzee the sozo space Elbestraße 5 12045 Berlin Germany Email: zoe@thesozospace.com
I am not legally required to appoint a data protection officer.

2. General information

Legal bases. Depending on the purpose, personal data is processed on the basis of Art. 6 (1) (a) GDPR (your consent), Art. 6 (1) (b) GDPR (performance of a contract or steps before entering into one), Art. 6 (1) (c) GDPR (legal obligations, for example tax retention duties) or Art. 6 (1) (f) GDPR (my legitimate interests, for example the secure and reliable operation of this website). The relevant basis is named in each section below.
Retention. I keep personal data only as long as needed for the purpose it was collected for, or as long as legal retention periods require (for example, booking and invoice records under German tax law). After that it is deleted or anonymised.
Transfers outside the EEA. Some of the service providers named below are based in the United States or process data there. Where that is the case, transfers are protected by standard contractual clauses approved by the European Commission and, where the provider is certified, by the EU-US Data Privacy Framework.
Encryption. This website uses SSL/TLS encryption. You can recognise this by the padlock symbol and "https://" in your browser's address bar.

3. Hosting and server log files

This website is hosted by Squarespace. For users in the European Economic Area the contracting entity is Squarespace Ireland Ltd., Squarespace House, Ship Street Great, Dublin 8, Ireland; the parent company Squarespace, Inc., 225 Varick Street, 12th Floor, New York, NY 10014, USA, may also process data. Squarespace processes data on my behalf under a data processing agreement in accordance with Art. 28 GDPR.
When you visit this website, Squarespace's servers automatically record information that your browser transmits, including your IP address, browser type and version, operating system, referrer URL, the pages you visit, and the date and time of access. This data is needed to deliver the website to you, to keep it stable and secure, and to identify and resolve technical problems. Legal basis: Art. 6 (1) (f) GDPR. Log data is retained by Squarespace for a limited period and then deleted; it is not merged with other data about you.
Fonts on this website are served from Squarespace's servers, not loaded from third-party font services.
More information: https://www.squarespace.com/privacy

4. Cookies and consent banner

This website uses cookies. Some are strictly necessary for the site to function (for example, remembering your cookie choice or keeping a session open). Others are used for website analytics (see section 5) and are only set if you agree.
When you first visit, a cookie banner asks for your consent to non-essential cookies. You can accept, decline, or change your choice at any time via the banner or by clearing cookies in your browser. Legal basis: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR for non-essential cookies; § 25 (2) TDDDG and Art. 6 (1) (f) GDPR for strictly necessary cookies.
More information on Squarespace's cookies: https://www.squarespace.com/cookie-policy

5. Website analytics

This website uses Squarespace's built-in analytics to understand how the site is used (for example, which pages are visited, roughly where visitors come from, and which devices they use). Squarespace Analytics uses cookies and processes IP addresses in shortened, anonymised form. Analytics cookies are only set after you have given consent via the cookie banner. Legal basis: Art. 6 (1) (a) GDPR. You can withdraw consent at any time via the cookie banner.
I also use Google Search Console to see how this website appears in Google search results. Search Console provides aggregated search statistics only and does not set cookies or collect personal data from visitors to this website.
I do not use Google Analytics, advertising pixels, or other tracking tools.

6. Contact form and email

If you contact me via the contact form on this website or by email, the details you provide (at least your name, email address and your message) are stored and used to handle your enquiry and any follow-up questions. Contact form submissions are processed via Squarespace (see section 3) and forwarded to my email inbox. My email is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 305, Phoenix, AZ 85034, USA (Private Email), which processes it on my behalf under a data processing agreement; transfers to the USA are covered by standard contractual clauses.
Legal basis: Art. 6 (1) (b) GDPR where your enquiry relates to a booking or a service, otherwise Art. 6 (1) (f) GDPR (my legitimate interest in answering enquiries). Your data is deleted once your enquiry has been fully dealt with, unless legal retention periods apply.

7. Bookings and ticketing via Eventbrite

Tickets and registrations for workshops and series are handled through Eventbrite. When you click a booking link on this website, you leave this site and are taken to Eventbrite. Eventbrite is operated by Eventbrite, Inc., 535 Mission Street, 8th Floor, San Francisco, CA 94105, USA, and its European affiliate. Eventbrite is responsible for the data you enter on its platform, including payment details, and its own privacy policy applies: https://www.eventbrite.com/l/legalterms/
For each booking, Eventbrite provides me with the data needed to run the event: your name, email address, ticket type, and any answers you give to registration questions. I use this to manage attendance, send you practical information about the event, and handle refunds and changes. Legal basis: Art. 6 (1) (b) GDPR. Booking records are retained for as long as German tax law requires, then deleted.
If you tick the newsletter opt-in during checkout, your email address is added to my newsletter list on the basis of your consent (see section 8). Attending an event does not, on its own, subscribe you to the newsletter.

8. Newsletter

You can subscribe to my newsletter via this website or via the opt-in when booking an event. I use the double opt-in procedure: after signing up you receive an email asking you to confirm your address, and only then are you added to the list. I record the time of sign-up and confirmation to be able to prove your consent.
The newsletter is sent using Squarespace Email Campaigns, a service of Squarespace (see section 3 for company details). Squarespace processes your email address, name (if given), and basic engagement data (whether an email was opened or a link clicked) on my behalf.
Legal basis: Art. 6 (1) (a) GDPR. You can withdraw your consent at any time by clicking the unsubscribe link in any newsletter or by emailing me. Your data is deleted from the list when you unsubscribe, apart from a record needed to prove that consent was validly given.

9. Participant data at workshops and sessions

When you take part in a workshop, series or 1:1 session, I process the data needed to organise and deliver it: your name and contact details, attendance, and any information you choose to share with me about your needs or accessibility. Legal basis: Art. 6 (1) (b) GDPR. Attendance lists are kept only as long as necessary for the event and for booking and invoice records under tax law.
Photos and video. I sometimes take photographs or short videos at sessions, mostly of the space and of work created during the session. I ask the group before any photos are taken, and people are only shown recognisably if they have agreed. You can always say no, and you can ask me not to share an image later. Legal basis: Art. 6 (1) (a) GDPR and § 22 KUG. You can withdraw consent at any time by emailing me; images already published will be removed from channels I control.

10. Instagram and external links

This website contains a link to my Instagram profile. Clicking it takes you to Instagram, a service of Meta Platforms Ireland Ltd., Merrion Road, Dublin 4, Ireland. No data is transferred to Meta simply by visiting this website; Meta's privacy policy applies once you are on Instagram. Other external links on this site (for example, to venues or collaborators) work the same way.

11. Your rights

Under the GDPR you have the right to:
information about the personal data I hold about you (Art. 15)correction of inaccurate data (Art. 16)deletion of your data (Art. 17)restriction of processing (Art. 18)data portability (Art. 20)object to processing based on legitimate interests (Art. 21)withdraw any consent you have given, at any time, with effect for the future (Art. 7 (3))
To exercise any of these rights, email zoe@thesozospace.com.
You also have the right to lodge a complaint with a supervisory authority. The authority responsible for me is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit Alt-Moabit 59-61 10555 Berlin https://www.datenschutz-berlin.de

12. Changes to this policy

I may update this privacy policy when the website, my services or the law change. The current version is always available on this page.