Zoe Barossi, address per Legal Notice. Privacy contact: contact@zoebarossi.com.
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare operates a global edge network; requests are served from a geographically nearby location.
Processed data: When you access the site, Cloudflare technically processes connection metadata (IP address, user agent, timestamp, requested resource) to deliver the page and protect against attacks. IP addresses are kept short-term for DDoS protection.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure and fast site delivery).
Data Processing Agreement & international transfer: A Data Processing Addendum (DPA) with EU Standard Contractual Clauses (SCCs) is in place. Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF). Cloudflare DPA · Cloudflare Privacy.
While the site is password-protected, after a successful password entry we set a strictly necessary cookie named zoe-access, so you don't have to re-enter the password on every page.
Lifetime: 1 year. Content: the value "granted" only. Tracking: none. Legal basis: ePrivacy / GDPR exception for strictly necessary cookies — no consent required.
On the coming-soon page you may leave your email to be notified once when the site launches.
We do not store your IP address, user agent or country.
One single email when the site launches. No further mails. No newsletter. No advertising.
Art. 6 (1) (a) GDPR — your consent, given by actively typing your email and submitting the form after being informed of the purpose.
Until you withdraw consent, or 30 days after the launch email has been sent — then deletion.
Stored in Cloudflare Workers KV. Cloudflare replicates KV data within the EU and the US. A DPA with EU SCCs is in place; Cloudflare is EU-U.S. Data Privacy Framework certified.
You may withdraw your consent at any time, without giving reasons and without disadvantage. Email contact@zoebarossi.com with the word "Unsubscribe" — we delete your record within 7 days. The launch email itself will also contain a one-click unsubscribe link.
Mail sent to contact@zoebarossi.com is forwarded via Cloudflare Email Routing to our internal mailbox at Google (Gmail).
Processed data: Email content, sender address, header metadata.
Legal basis: Art. 6 (1) (b) GDPR (handling your enquiry) or (f) (legitimate interest in communication).
Retention: Until your enquiry is closed; then deletion — unless statutory retention obligations apply.
Processors: Cloudflare, Inc. (routing) and Google LLC (Gmail). Both DPF-certified, SCCs in place.
The site features an optional chat widget that opens after explicit click. If you ask a question, your input is sent to Anthropic, Inc. (Claude API, USA) to generate a response.
Processed data: Your chat input + response.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in customer service). You use the chat voluntarily.
Retention: Anthropic processes input only to generate responses; per Anthropic's terms, standard API inputs are not used for model training (zero-retention for standard API requests).
Processor: Anthropic, Inc. (USA), DPF-certified, SCCs in Anthropic DPA.
This site links to Instagram, Twitch, YouTube and other services. Data is only transferred to those providers when you click the link. The privacy policies of those providers then apply.
The site is served exclusively over encrypted HTTPS. SSL certificate via Cloudflare CA / Google Trust Services.
Send an informal request to contact@zoebarossi.com.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). For Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information (Friedrichstr. 219, 10969 Berlin).
If you are based in the UK, the UK GDPR applies in addition; your rights are the same as listed under section 10. If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) grants you comparable rights to access, deletion and opt-out — please use the same contact address.
For users in Brazil, the Lei Geral de Proteção de Dados (LGPD, Law 13.709/2018) applies in addition. The rights described above (access, rectification, erasure, withdrawal of consent) are equivalent to the rights under Art. 18 LGPD and are honoured in the same way. Same contact: contact@zoebarossi.com.
Last update: 3 May 2026