Last updated: 31 July 2026
1. Controller
The controller responsible for processing personal data on this website is:
Tanya Ury
you are why
Corkstraße 19
51103 Cologne
Germany
Email: youarewhy@netcologne.d…
Telephone: +49 221 5503795
2. Scope
This Privacy Policy applies to tanyaury.com and to tanyaury.com while the staging environment is used for development and testing.
3. Hosting and server logs
The website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4 – 6, 32339 Espelkamp, Germany. When the website is accessed, the hosting provider processes technical connection data required to deliver it. This may include the IP address, date and time of access, requested file or page, amount of data transferred, referrer URL, browser type, operating system and HTTP status.
This processing is necessary to deliver the website, ensure its stability and security and prevent misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website. Log data is retained only for as long as required for operation, troubleshooting and security and is then deleted, unless a legal obligation or a specific security incident requires longer retention. A data processing agreement is in place with the hosting provider.
Further information: Mittwald Privacy Policy.
4. Contact and contact form
If you contact us by email or through the contact form, we process the information you provide, in particular your name, email address and message, together with the metadata technically required for transmission. Required fields are marked in the form.
The information is used to respond to your enquiry. It is stored within the WordPress installation and sent by email to the mailboxes responsible for processing the enquiry and providing technical website support. It is not used for advertising or disclosed to unrelated third parties.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or commission; otherwise it is Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and documenting communications.
Enquiries are deleted once they have been dealt with and there are no statutory retention requirements or legitimate reasons for further storage. Documents subject to legal retention requirements are kept for the prescribed period.
5. Cookies and local storage
The public website uses only technically necessary functions. Polylang may set the pll_language cookie to remember the selected language. It contains the selected language code and is retained for up to one year. The legal basis is section 25(2)(2) TDDDG; subsequent processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is presenting the website in the language selected by the visitor.
WordPress sets additional login and administration cookies only for authorised persons who sign in to the non-public administration area. Public user registration is not available.
6. Audience measurement
No analytics or visitor tracking is currently active on the public website. In particular, neither Google Analytics nor Matomo is used. If audience measurement is enabled in future, this Privacy Policy will be updated beforehand.
7. Media, galleries and external links
Images, audio and video files are generally delivered by this website itself. The website also contains links to external services, including publications, institutions, press articles and video platforms. Only when you follow such a link does your browser connect to the respective third party. From that point onwards, the third party’s privacy policy applies.
According to the current technical configuration, the website does not automatically transmit visitor data to social networks or video platforms through social-media tracking.
8. Recipients and international transfers
Personal data is accessible only to parties who require it for hosting, technical support or responding to your enquiry. Transfers outside the European Union or European Economic Area are not intended for the normal operation of this website. If you voluntarily follow an external link, the relevant third party may process data under its own terms.
9. Retention
Unless a specific period is stated above, personal data is retained only for as long as required for the relevant purpose. It is then deleted unless statutory retention duties, the establishment or defence of legal claims or security requirements justify further retention.
10. Your rights
Subject to the statutory requirements, you have the right of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Any consent may be withdrawn at any time with future effect.
To exercise your rights, contact youarewhy@netcologne.d…. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is, in particular, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2 – 4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
11. Security
The website is transmitted over encrypted HTTPS connections. We use appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access. Absolute security of data transmitted over the internet cannot, however, be guaranteed.
12. Changes to this Privacy Policy
We update this Privacy Policy when the website, the services used or legal requirements change. The version published on this website is the applicable version.