Privacy policy

This website currently serves as a static information page under development. It has no contact form, newsletter, user account, comment function or marketing tracking. Optional usage statistics are activated only after consent.

Data controller

The person responsible for processing personal data on this website is:
Anja Polster
Quinta da Terra dos Cantos
Medelim, Portugal
+351 932 441 758
hello@stellaherbaris.com

Hosting and technical delivery

This website is intended to be served by a shared maintenance container on a server hosted by netcup. The Maintenance Hub controls switching between holding pages and live sites. Data necessary for technical delivery, security and stability is processed when the site is accessed. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is secure and reliable operation.

Server access logs

The Traefik reverse proxy maintains access logs. These may include the client IP address, time, requested path, response status and technical request information. Anonymisation of IP addresses has not been verified. Under the configuration used as the basis for this policy, URL query parameters are excluded from logging.

Contact by email or telephone

If you contact us by email or telephone, we process your contact details and the content of your enquiry to handle and answer it. The legal basis is our legitimate interest in communication under Article 6(1)(f) GDPR. Where your enquiry concerns entering into a contract at your request, Article 6(1)(b) GDPR applies. The data is deleted once the enquiry has been handled, unless statutory retention requirements or legitimate grounds for further retention apply.

Locally hosted fonts

This website uses the Spectral and Raleway typefaces. The font files are hosted locally on the same server as this website. Loading these fonts does not establish a connection to Google or other external font providers.

Local consent choice and optional statistics

Your choice is primarily saved in this browser’s localStorage, without an expiry date set by this website. If that storage is unavailable, a necessary first-party cookie is used solely to save your choice, with the same brand-specific key and the value “allow” or “deny” (up to one year, Path=/, SameSite=Lax, Secure on HTTPS, no Domain attribute). A valid choice is read on all pages of the same website; it is not transferred to other domains or brands. You can change it in the footer or remove it by clearing browser data. Under file://, storage may be isolated per file or blocked; test local pages using an HTTP server. Umami does not load on file://, localhost or hosts outside the whitelist. stella-herbaris-maintenance-analytics-consent-v1.

Umami statistics and your consent

We use Umami to analyse website use if you explicitly agree. The self-hosted analytics script then loads from analytics.frequenzarchitektur.com and may process page views and technical usage data such as the requested URL, referrer, browser, device type and language. It does not load before consent or after refusal. The legal basis for statistical processing is Article 6(1)(a) GDPR. You can withdraw consent at any time for the future using “Privacy settings” in the footer; the page reloads if tracking has already started. Withdrawal does not affect the lawfulness of prior processing.

According to the available infrastructure information, no automatic deletion of Umami data is configured. Automatic deletion after twelve months is not promised. The actual retention of statistics and the precise processing must be finalised and checked before production use.

Recipients of data

Data necessary for technical operation is processed as part of hosting at netcup. Where personal data is included in external backups, Hetzner is involved as a backup service provider. If you contact us, providers used for email and telephone may also process the data needed for communication.

Retention period

Access logs are rotated daily. Three rotated files are retained in addition to the active log file. This does not mean that every entry is deleted after exactly 72 hours. Data included in backups is also subject to the backup cycle.

Backups

The shared infrastructure provides for encrypted external backups at Hetzner. Personal data contained in the backed-up application data or databases may also be included in those backups. Retention is based on seven daily, four weekly and six monthly recovery snapshots. These are not fixed deletion periods for each file; older snapshots are removed during backup cleanup. Backups serve recovery and protection against data loss; the legal basis is Article 6(1)(f) GDPR.

Your rights

Subject to the GDPR, you have in particular the rights of access, rectification, erasure, restriction of processing, objection to processing and data portability.

Right to lodge a complaint

You may lodge a complaint with a competent data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD) (opens in a new tab).

Last updated: October 2026. This policy applies to the current website under development. It must be expanded when contact forms, newsletters, analytics tools, payment features, embedded media or other services are added.