Work with me

Privacy Policy

  1. General Information

The protection of your personal data is important to us. This Privacy Policy explains what personal data is collected when you visit this website, how and why it is processed, and what rights you have regarding your personal data.

Personal data is any information that can be used to identify you directly or indirectly.

We process personal data only to the extent necessary to operate this website, communicate with visitors, maintain the security and functionality of the website, and comply with applicable legal obligations.

  1. Controller

The controller responsible for the processing of personal data on this website is:

Cornelia Wottawah
8911 Old Courthouse Road
Vienna, VA 22182
United States

Email: hello@corneliawottawah.com
Telephone: +1 517 602 1007

If you have any questions regarding privacy or the processing of your personal data, you may contact us using the contact information above.

  1. Hosting and WordPress

This website is operated using WordPress and related services provided by Automattic.

When you access this website, technical information necessary to deliver and operate the website may be processed. This may include, in particular:

  • IP address
  • date and time of access
  • requested page or file
  • browser type and browser version
  • operating system
  • referring website
  • technical device information

This processing is necessary to provide the website, maintain its technical functionality and security, detect errors and prevent misuse.

Where the General Data Protection Regulation (GDPR) applies, the processing is based, as applicable, on Art. 6(1)(f) GDPR (legitimate interests in the secure and reliable operation of the website) and Art. 6(1)(b) GDPR where processing is necessary in connection with steps taken at the request of a visitor.

  1. Server Log Files

The hosting provider may automatically collect and store information in server log files transmitted by your browser.

Server log information may include IP addresses, browser information, operating system, requested resources, referring URLs, and the date and time of a request.

The processing of this information serves to ensure the secure and reliable operation of the website, identify technical problems, and protect the website against misuse and attacks.

Where the GDPR applies, this processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of this website.

Server log data is retained only for as long as necessary for these purposes or as required by applicable law.

  1. Contact Form and Contact by Email

If you contact us through the contact form or by email, the information you provide will be processed for the purpose of responding to your inquiry.

Depending on the information you provide, this may include:

  • your name
  • your email address
  • the content of your message
  • other information you voluntarily provide

The information is used solely to process and respond to your inquiry and for any necessary follow-up communication.

Where the GDPR applies, processing is based on Art. 6(1)(b) GDPR if your inquiry relates to a potential or existing contractual relationship. In other cases, processing is based on Art. 6(1)(f) GDPR, based on our legitimate interest in responding to inquiries and communicating with website visitors.

Information submitted through the contact form may also be stored within the WordPress/Jetpack infrastructure if the corresponding form functionality is used.

We retain correspondence only for as long as necessary to handle the inquiry and any subsequent communication, unless a longer retention period is required by law.

  1. Jetpack and Website Statistics

This website uses Jetpack functionality provided by Automattic, including website statistics.

Jetpack Stats may process information about visits to the website in order to provide statistical information about website usage. Depending on the configuration and the visitor’s device, the information processed may include:

  • pages and posts viewed
  • date and time of visits
  • referring websites or services
  • country or approximate geographic information
  • device type
  • browser and operating system information
  • technical identifiers and IP-related information

These statistics help us understand how the website is used and allow us to improve its content and technical performance.

Where such processing requires consent under applicable law, it takes place only after the visitor has provided the required consent through the consent banner.

Where the GDPR applies and consent is required, the legal basis is Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future through the cookie or consent settings available on this website.

  1. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Cookies are small data files stored on or accessed from a visitor’s device. Some cookies or comparable technologies may be technically necessary for the website to function correctly. Others may be used for statistics or other optional purposes.

Technically necessary cookies may be used without consent where permitted by applicable law.

Cookies and technologies that are not strictly necessary are activated only where required consent has been obtained.

You can use the consent banner or cookie settings on this website to make or change your choices. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

  1. Complianz Consent Management

This website uses Complianz to manage cookie and privacy consent.

Complianz helps determine which cookies and services are used on the website, displays the consent banner, stores or manages the visitor’s consent choices as configured, and helps prevent optional services from being activated before the necessary consent has been provided.

For this purpose, technically necessary information may be stored on the visitor’s device to remember consent preferences.

Where the GDPR applies, the processing necessary to manage and document consent is based on Art. 6(1)(c) GDPR where required to comply with legal obligations and Art. 6(1)(f) GDPR for the legitimate interest in operating an effective consent-management system.

  1. External Links and Social Media

This website may contain links to external websites or social media platforms, including services such as Instagram, Facebook or LinkedIn.

A simple external link does not itself mean that personal data is automatically transmitted to the linked provider merely because the link appears on this website. If you click an external link, however, you leave this website and the privacy practices of the respective third-party provider apply.

We have no control over the processing of personal data performed by third-party websites after you leave this website. Please consult the privacy policies of the respective providers for further information.

  1. International Data Transfers

The operator of this website is located in the United States, and some of the service providers used to operate this website may also process personal data in the United States or other countries outside the European Union or European Economic Area.

Where personal data of individuals in the European Economic Area is transferred to a country outside the EEA, appropriate safeguards are used where required by applicable law.

Depending on the provider and circumstances, these safeguards may include an adequacy decision by the European Commission, participation in an applicable data privacy framework, Standard Contractual Clauses approved by the European Commission, or other legally recognized transfer mechanisms.

Despite such safeguards, data protection laws outside the EEA may differ from those applicable within the EEA.

  1. Legal Bases for Processing

Where the GDPR applies, personal data may be processed on one or more of the following legal bases:

  • Art. 6(1)(a) GDPR – consent
  • Art. 6(1)(b) GDPR – performance of a contract or steps taken prior to entering into a contract
  • Art. 6(1)(c) GDPR – compliance with a legal obligation
  • Art. 6(1)(f) GDPR – legitimate interests

Where processing is based on legitimate interests, those interests generally include operating a secure and functional website, responding to inquiries, protecting the website from misuse, and improving the website and its content.

  1. Retention of Personal Data

Personal data is retained only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required or permitted by law.

The applicable retention period depends on the type of information, the purpose of processing, legal obligations, and whether the information is required for the establishment, exercise or defense of legal claims.

When personal data is no longer required and no legal retention obligation applies, it will be deleted or anonymized where appropriate.

  1. Your Rights under the GDPR

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the applicable legal requirements:

  • the right to access your personal data
  • the right to rectification of inaccurate personal data
  • the right to erasure of your personal data
  • the right to restriction of processing
  • the right to data portability
  • the right to object to certain processing
  • the right to withdraw consent at any time with effect for the future

Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation, subject to the requirements of Art. 21 GDPR.

If processing is based on consent, withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact us using the contact information provided above.

  1. Right to Lodge a Complaint

If you believe that the processing of your personal data violates applicable data protection law, you may have the right to lodge a complaint with a competent data protection supervisory authority.

If you are located in the European Union or European Economic Area, you may generally contact a supervisory authority in the country of your habitual residence, your place of work, or the place of the alleged infringement.

  1. United States Privacy Rights

Depending on your place of residence and the applicability of U.S. state privacy laws, you may have additional rights concerning your personal information.

These rights may include, where applicable, the right to request access to or information about personal information, correction, deletion, or a copy of certain personal information, as well as the right to opt out of certain forms of processing.

The availability and scope of these rights depend on the applicable state law and whether that law applies to this website and its operator.

Requests concerning privacy rights may be submitted using the contact information provided above.

  1. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.

However, no transmission of information over the internet or electronic storage system can be guaranteed to be completely secure.

  1. Changes to this Privacy Policy

This Privacy Policy may be updated when the website, the services used on it, or applicable legal requirements change.

The current version published on this website applies.

Last updated: August 2026