Legal

Privacy Policy

This English version is provided for your convenience. In the event of any discrepancy, the German version prevails.

1. Controller

Diana Fister, The Tarot Taurus, Marienstraße 15, 76689 Karlsdorf-Neuthard, Germany, email: diana@thetarottaurus.de, phone: +49 173 4781917

2. Hosting

This website is hosted by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. When you visit the site, Framer processes technically necessary data such as your IP address, date and time of access, browser type and operating system in order to deliver and secure the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and stable website). A data processing agreement is in place with Framer.

3. Fonts and scripts

The fonts on this website are loaded locally from my host’s servers. No connection to Google is made.

For smooth scrolling, a script is loaded via the content delivery network unpkg.com. In the process, your IP address is transmitted to the operator. The legal basis is Art. 6 (1) (f) GDPR.

4. Contact by email

If you write to me, I process your details (name, email address, content of your message) in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry concerns a reading, an order or an event, otherwise Art. 6 (1) (f) GDPR. I delete your data once your enquiry has been dealt with and no retention obligations apply.

5. Booking readings, orders and event registrations

To perform the contract I process your name, email address, your delivery address for shipped orders, additionally your phone number and travel details for events, as well as the content you share with me for your reading. The legal basis is Art. 6 (1) (b) GDPR. I keep invoice data for up to 10 years due to tax obligations (Art. 6 (1) (c) GDPR).

I treat the personal content of your readings confidentially and do not pass it on.

I only process voluntary information about health restrictions for an event with your explicit consent (Art. 9 (2) (a) GDPR) and delete it after the event.

Forms (Tally): For written readings, vouchers, event enquiries, event registrations and withdrawals I use Tally, provided by Tally BV, Sint-Pietersnieuwstraat 11, 9000 Ghent, Belgium. Your entries are stored on servers in the EU. To protect against spam, Cloudflare, Inc. (USA) may process your IP address. A data processing agreement is in place with Tally.

Appointment booking (TidyCal): You book live readings via TidyCal, provided by Sumo Group Inc., 1305 E. 6th St #3, Austin, TX 78702, USA. Your name, email address, appointment and the details you enter in the booking form are transmitted to the provider in the USA. The transfer is based on the European Commission’s standard contractual clauses. The legal basis is Art. 6 (1) (b) GDPR.

Video sessions (Zoom): Live readings take place via Zoom, provided by Zoom Communications, Inc., San Jose, USA. Your name, email address as well as image and sound during the session are processed. I do not record readings. Zoom is certified under the EU-US Data Privacy Framework.

6. Payment

Online payments, for example the deposit for events, are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. You enter your payment details directly with Stripe, I do not see them. Stripe may also transfer data to the USA and is certified for this under the EU-US Data Privacy Framework. For payments by bank transfer, my bank processes the payment data. The legal basis is Art. 6 (1) (b) GDPR.

7. Instagram

My website links to my Instagram profile. This is a simple link. Data is only transmitted when you click it and go to Instagram (Meta Platforms Ireland Ltd.). Meta’s privacy policy applies there.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw your consent at any time with effect for the future. Just write to me at diana@thetarottaurus.de.

You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Last updated: October 2026