Privacy Policy

Last updated: 1 September 2025

1) Controller

Martina Murr, operating as Meal & Motion by M’s

Address:
Meal & Motion by M’s
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany
Email: info@mealandmotionbyms.com

2) Scope of this Policy

This policy explains how we process personal data when you visit [your site name / domain]. Our site is hosted on WordPress.com, a platform operated by Automattic Inc. (“Automattic”). Some processing is performed by Automattic as platform provider; some is performed by us as site owner. See Automattic’s privacy documents for how they process data of visitors to users’ sites. (Automattic)

3) Categories of Personal Data We Process

  • Server logs (necessary): IP address, date/time, URL, referrer, user agent collected by the hosting platform for security and operation.
  • Platform analytics (“WordPress.com/Jetpack Stats”): On the Free plan this feature is enabled by defaultand we cannot configure or disable it. Data typically includes page views, referrers and general browser information; IP addresses may be used in a limited way (e.g., approximate geolocation and spam prevention) according to Automattic’s policies. (WordPress.com, Automattic)
  • Comments (if enabled): Data you provide (e.g., name, email, comment). You may choose whether your browser stores your details for a future visit.
  • Contact (if applicable): If you email us or submit a form, we process your message and contact details to respond.
  • Embedded content: By default we do not auto-load third-party embeds (e.g., YouTube, Strava, Instagram). If you actively choose to load such content (where offered), the third party may collect data and set cookies.

4) Purposes and Legal Bases (Art. 6 GDPR)

  • Operating and securing the website (server logs, essential platform functions): Art. 6(1)(f) GDPR (legitimate interest).
  • Orders and digital delivery (e-books) (when you choose to purchase via our external sales page): processing necessary for contract performance or steps prior to a contract, Art. 6(1)(b) GDPR.
  • Legal obligations (invoicing/tax retention): Art. 6(1)(c) GDPR.
  • Optional features only with consent (e.g., optional embeds or marketing on third-party pages): Art. 6(1)(a) GDPR and § 25 TTDSG.
  • Platform analytics (WordPress.com/Jetpack Stats): provided by Automattic as part of the hosting platform; on the Free plan enabled by default; we do not add extra analytics on our WordPress pages. (WordPress.com)

5) What We Do Not Do

  • No additional marketing trackers or ad networks on our WordPress pages.
  • No automated decision-making or profiling under Art. 22 GDPR.

6) Cookies & Similar Technologies

  • Essential cookies: WordPress.com uses necessary cookies for security, load balancing, fraud prevention, and core site functions.
  • Non-essential cookies: We do not intentionally deploy non-essential cookies of our own on the Free plan. If you choose to load third-party embeds, that provider may set non-essential cookies.
  • Managing cookies: On the Free plan our control over platform cookies is limited. You can manage cookies in your browser and avoid loading third-party embeds. For details, see Automattic’s Privacy Policy and Cookie Policy. (Automattic)

7) Instagram (links, not embeds)

We link to our Instagram profile but do not embed Instagram feeds or posts by default. Clicking the link takes you to Instagram (Meta Platforms), where their privacy policy applies. No Instagram content or cookies are loaded on our pages unless you actively follow such a link.

8) Sales via Bio Sites (external checkout)

We plan to sell digital products (e-books) via an external page on Bio Sites (a Squarespace/Unfold service). If you click “Buy”, you will be taken to our Bio Site where the purchase is processed. Payment is handled by Stripe Payments Europe, Ltd. and/or PayPal (Europe) S.à r.l. Depending on your device, wallets such as Apple Pay or Google Paymay be offered through these payment providers. On that external page, Squarespace/Unfold and the payment provider act as processors/independent controllers for parts of the processing. Please see their privacy information:
Squarespace/Bio Sites: Privacy PolicyData privacy & security (Squarespace)
Stripe: Privacy Policy (Stripe)
PayPal: Privacy Statement (PayPal)
We receive only the information needed to fulfil your order and comply with legal obligations.

9) Recipients / Processors and Responsibility Sharing

  • Hosting & Platform: WordPress.com operated by Automattic Inc. (and its EU affiliates/service providers) — infrastructure, server logs, security, spam protection (e.g., Akismet), and WordPress.com/Jetpack Stats. See Automattic’s privacy documents for details. (Automattic)
  • Sales platform: Bio Sites (Squarespace/Unfold) — hosting of our external sales page and delivery of digital items. (Squarespace)
  • Payments: Stripe Payments Europe, Ltd. and/or PayPal (Europe) S.à r.l. et Cie, S.C.A. — payment processing and fraud prevention; these providers may transfer data outside the EEA under Standard Contractual Clauses. See their privacy pages linked above. (Stripe, PayPal)

10) International Data Transfers

Where data is transferred to countries outside the EEA (e.g., the USA in connection with WordPress.com or payment processing), this is protected by appropriate safeguards such as Standard Contractual Clauses implemented by the provider. See Automattic’s, Squarespace’s, Stripe’s and PayPal’s privacy pages for details. (Automattic, Squarespace, Stripe, PayPal)

11) Retention

  • Order data & invoices: retained as required by applicable law (e.g., commercial/tax retention) and for legal defence where necessary; after expiry we delete or anonymise the data.
  • Contact inquiries (non-order): kept for 6 months after resolution unless needed longer for legal defence, then deleted.
  • Comments: stored until you or we delete them, or until the post is removed.
  • Platform analytics: retained according to Automattic’s policies; we do not control or further combine this data.

12) Your Rights (Art. 15–22 GDPR)

You have the rights of access, rectification, erasure, restriction, objection (especially to processing based on Art. 6(1)(f)), and data portability. Where processing relies on consent, you may withdraw consent at any time with effect for the future (e.g., by not loading embeds and clearing stored permissions).
You may lodge a complaint with a supervisory authority, e.g., Berliner Beauftragte für Datenschutz und Informationsfreiheit or your local authority.

13) Requirement to Provide Data

You are not legally required to provide personal data. However, the site cannot function without essential technical data (e.g., IP address), and features like comments or contacting us require relevant information.

14) Security

We and our platform provider use technical and organisational measures appropriate to the risk (TLS encryption, access controls, backups, monitoring). No method of transmission or storage is 100% secure.

15) Third-Party Links and Embeds

Our pages may include links to third-party sites. We currently avoid auto-loading third-party embeds. If you actively choose to load embedded content (where offered), the third party becomes a separate controller of your data; please review their privacy information.

16) Contact

For privacy requests or to exercise your rights, contact: info@mealandmotionbyms.com.
When contacting us, please include enough information to identify you so we can process your request.

17) Changes to This Policy

We may update this Privacy Policy. Changes take effect when we post the new version here. The “Last updated” date appears at the top.