Last updated: May 27, 2026

This Privacy Policy explains how Marina Buono da Silva Schiller processes personal data through the website [marinaschiller.co](https://marinaschiller.co).

1. Controller

Controller responsible for data processing on this website:

Marina Buono da Silva Schiller

Johann-Schütte-Strasse 12

71034 Böblingen

Germany

Email: adm@marinaschiller.co

2. General Information

This website is a personal brand and portfolio website. At present, no sales are processed directly through the website.

Personal data is generally only processed when a person contacts the website owner by email, phone, or through other direct communication relating to potential UGC collaborations, scripts, brand work, or business inquiries.

In addition, this website may use cookies and analytics tools made available through Squarespace and related website features.

3. Categories of Personal Data

Depending on the nature of the inquiry or website use, the following personal data may be processed:

- Name

- Email address

- Phone number

- Company name

- Content of the inquiry or project request

- Any other information voluntarily shared in emails, calls, or business communications

- Technical usage data, such as IP address, browser type, device information, referrer data, and page interactions

- Cookie and analytics data, where applicable

4. Purposes of Processing

Personal data may be processed for the following purposes:

- Responding to inquiries

- Communicating about potential UGC work, collaborations, or partnerships

- Preparing scripts, project proposals, or related business communication

- Operating, maintaining, and improving the website

- Reviewing website performance and visitor activity through analytics

- Protecting the security and functionality of the website

- Managing cookie preferences and consent choices where applicable

5. Legal Bases for Processing

Personal data is processed on the following legal bases under Article 6 GDPR:

- Article 6(1)(b) GDPR, where processing is necessary to take steps prior to entering into a contract or for the performance of a contract

- Article 6(1)(f) GDPR, where processing is necessary for legitimate interests, such as responding to business inquiries, managing communications, website operation, website security, and improving the website

- Article 6(1)(a) GDPR, where consent is required, including for non-essential cookies, analytics technologies, or similar tools

6. Contact by Email or Phone

If a person contacts the website owner by email or phone, the information shared in that communication is processed solely to handle the request, evaluate a possible business relationship, and continue related communication.

The provision of this data is voluntary, but without the relevant contact details and inquiry information, it may not be possible to process or respond to the request.

7. Cookies and Analytics

This website is built on Squarespace and may use cookies or similar technologies that are necessary for website functionality, security, performance measurement, and analytics.

Some cookies may be essential for the operation of the website. Other cookies or tracking technologies, including analytics-related tools, may only be used after the visitor has given consent where this is legally required.

Through Squarespace analytics and related website services, technical information may be processed, including IP address, browser type, device information, pages visited, time spent on the website, referrer information, and interactions with website content.

This information is used to understand website traffic, improve website performance, and support the operation of the website.

If social media content, links, or integrations are used on the website, those platforms may also process technical data when a visitor interacts with them.

8. Recipients of Data

Personal data may be shared with service providers to the extent necessary for website operation and communication handling. This may include:

- Squarespace, as website hosting and website infrastructure provider

- Email providers used for business communication

- Analytics or technical service providers, where applicable

- Social media platforms, where a visitor interacts with linked or embedded social media content

Personal data is not sold.

9. International Transfers

Some service providers may process data outside the European Union or European Economic Area. Where this occurs, data transfers will only take place in accordance with applicable data protection law and with appropriate safeguards where required.

10. Storage Period

Personal data is stored only for as long as necessary for the relevant purpose.

In particular:

- Business inquiries and correspondence may be retained for as long as necessary to handle the request, evaluate cooperation, and maintain business records

- Data may also be retained where legal retention obligations apply or where needed to establish, exercise, or defend legal claims

- Technical, cookie, and analytics data retention may depend on the settings of the relevant platform or provider

11. Rights of Data Subjects

Under the GDPR, data subjects may have the following rights, subject to the applicable legal requirements:

- Right of access

- Right to rectification

- Right to erasure

- Right to restriction of processing

- Right to data portability

- Right to object to processing based on legitimate interests

- Right to withdraw consent at any time, where processing is based on consent

- Right to lodge a complaint with a competent supervisory authority

12. Supervisory Authority

A data subject may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of their habitual residence, place of work, or place of the alleged infringement.

13. Obligation to Provide Data

There is generally no statutory or contractual obligation to provide personal data when visiting this website. However, if a person wishes to make a business inquiry, certain contact details and relevant information are necessary in order to process and respond to the request.

14. Automated Decision-Making

No automated decision-making or profiling within the meaning of Article 22 GDPR is currently carried out through this website.

15. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or business changes, including changes to website features, analytics, cookies, downloads, contact forms, newsletters, or digital products.

The current version will always be published on this website.