Privacy Policy
Last updated: 5 September 2026
This Privacy Policy explains how Vida Workstation (“we”, “us”, or “our”) processes personal data when you visit www.v-aw.com, contact us, interact with content, use embedded media, follow external or commercial links, or otherwise communicate with us.
We process personal data in accordance with the General Data Protection Regulation (“GDPR”), applicable German data protection law, and other applicable privacy legislation.
1. Data Controller
The controller responsible for the processing of personal data on this website is:
Vida Gholami
operating under the business name Vida Workstation
Legal form: Sole proprietorship / Einzelunternehmen
Corneliusstraße 43
40215 Düsseldorf
Germany
Email: info@v-aw.com
Website: www.v-aw.com
Additional legal information is available on our Imprint / Impressum page.
2. General Principles of Data Processing
We process personal data only where necessary for legitimate and specified purposes.
Depending on how you use this website, personal data may be processed in order to:
provide and operate the website;
maintain the security and technical stability of the website;
respond to enquiries and messages;
communicate with visitors, customers, brands, companies and cooperation partners;
provide editorial, creative, audio and other digital content;
manage commercial or business relationships;
manage product recommendations and external links;
manage affiliate relationships where applicable;
comply with legal, tax, accounting and documentation obligations;
prevent misuse, spam, fraud and security incidents; and
improve the usability and functionality of the website where legally permitted.
We do not sell personal data.
3. Categories of Personal Data
Depending on how you interact with the website, we may process the following categories of personal data.
Technical and usage data
This may include:
IP address;
browser type and version;
operating system;
device information;
date and time of access;
pages visited;
referring URL;
technical log information;
security-related information; and
cookie and consent preferences.
Contact and communication data
If you contact us, we may process:
your name;
email address;
subject of your enquiry;
message content;
company name, where relevant;
project or cooperation information;
attachments or information voluntarily provided by you; and
date and time of communication.
Business and cooperation data
Where you contact us regarding a commercial relationship, brand collaboration, advertising project, content production or other business matter, we may process:
your name;
company or organisation;
job title or role;
business contact details;
project information;
communication history;
offers and agreements;
invoicing information; and
payment or accounting information where required.
4. Legal Bases for Processing
Depending on the individual processing activity, we rely on one or more of the following legal bases.
Consent — Art. 6(1)(a) GDPR
We rely on consent where you voluntarily agree to certain processing activities, for example certain non-essential cookies, optional third-party media or future marketing communications.
You may withdraw your consent at any time with effect for the future.
Contract and Pre-Contractual Measures — Art. 6(1)(b) GDPR
We may process personal data where necessary to perform a contract or take steps at your request before entering into a contract.
This may apply, for example, to business enquiries, cooperation requests, services, orders or other contractual relationships.
Legal Obligation — Art. 6(1)(c) GDPR
We may process personal data where necessary to comply with statutory obligations, including tax, accounting, commercial, regulatory and documentation requirements.
Legitimate Interests — Art. 6(1)(f) GDPR
We may process personal data where this is necessary for our legitimate interests and those interests are not overridden by your rights and freedoms.
Our legitimate interests may include:
operating and securing the website;
protecting the website against abuse and attacks;
responding to general enquiries;
maintaining business communication;
documenting business relationships;
improving website functionality; and
asserting, exercising or defending legal claims.
5. Website Hosting and Squarespace
This website is created and hosted using Squarespace.
For customers located outside the United States, Squarespace services are generally provided by:
Squarespace Ireland Limited
Squarespace House
Ship Street Great
Dublin 8
Ireland
D08 N12C
Squarespace may process personal data on our behalf in connection with hosting, website delivery, security, technical operation and website functionality.
When you visit this website, technical information may be processed automatically, including:
IP address;
browser and device information;
operating system;
date and time of access;
pages requested;
referring website;
technical logs; and
security information.
The processing of technically necessary data is based on Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and technically functional operation of this website.
Squarespace provides a Data Processing Addendum governing relevant processing carried out on behalf of website operators.
More information about Squarespace's handling of personal data is available in Squarespace's own privacy documentation.
6. Server Logs and Website Security
For technical and security purposes, website hosting systems may automatically create server logs.
These logs may contain information such as:
IP address;
requested page or file;
date and time;
browser information;
operating system;
referrer information; and
technical status information.
This processing is necessary to deliver the website, maintain system stability, detect technical problems, prevent abuse and protect the website from attacks.
The legal basis is Art. 6(1)(f) GDPR.
Log data is retained only for as long as necessary for technical and security purposes or as otherwise required by law.
7. Contact Form
If you use a contact form on this website, we process the information you provide in order to respond to your request.
This may include:
name;
email address;
subject;
message;
company information, where relevant; and
other information voluntarily provided by you.
Contact form submissions may be processed through Squarespace and may be forwarded to our business email address:
The legal basis depends on the nature of your enquiry.
For general enquiries, processing may be based on Art. 6(1)(f) GDPR.
Where your enquiry relates to a possible or existing contractual relationship, processing is based on Art. 6(1)(b) GDPR.
We do not use contact form messages for unrelated advertising without a lawful basis.
8. Email Communication
We use Google Workspace, including Gmail, for our business email communication and for the email address:
If you contact us by email, we process the information contained in your message in order to communicate with you and respond to your request.
This may include:
your name;
email address;
message content;
attachments;
date and time of communication;
company or business information, where relevant; and
any other information you voluntarily provide.
Google Workspace may process and store email and related technical data as part of providing the email service.
Google processes relevant customer data under its applicable contractual and data-protection terms, including the Google Cloud Data Processing Addendum.
The legal basis for processing depends on the nature of the communication.
For general enquiries, processing is generally based on Art. 6(1)(f) GDPR. Our legitimate interest is to communicate with visitors, business partners and other persons who contact Vida Workstation.
Where communication relates to a contractual or pre-contractual relationship, processing is based on Art. 6(1)(b) GDPR.
Where communication must be retained to comply with legal, tax or accounting obligations, processing is based on Art. 6(1)(c) GDPR.
Business correspondence may be retained for the period required by applicable German law.
Further information about Google's processing of personal data is available in Google's privacy and Google Workspace data-protection documentation.
9. Brand Collaborations and Business Enquiries
Vida Workstation may work with brands, companies and other business partners in connection with:
content creation;
product presentation;
sponsored content;
brand collaborations;
advertising;
UGC and creative production;
product storytelling;
photography or video projects; and
other commercial collaborations.
Where you contact us regarding such a cooperation, we may process:
name;
business email address;
company information;
project details;
communication history;
contractual information;
invoice information; and
payment information where necessary.
Processing is generally based on Art. 6(1)(b) GDPR for contractual and pre-contractual matters and Art. 6(1)(c) GDPR where legal or accounting obligations apply.
10. Bestara and External Commercial Services
Vida Workstation may contain links to Bestara or other external websites and services where users can search for, discover or compare products, prices, offers or other commercial information.
When you follow such a link, you leave the Vida Workstation website.
Processing of personal data on the external website is governed by the privacy policy and terms of the respective provider.
Vida Workstation does not control the data processing performed independently by external websites.
Where Bestara or another external service is operated as a separate website or digital service, its own privacy information applies to processing carried out on that service.
11. Affiliate Links and Commercial Links
Some content may contain affiliate links, commercial recommendations or links to external retailers, platforms or services.
An affiliate link may allow a retailer, affiliate network or other partner to identify that a visitor arrived through a particular referral link.
Depending on the affiliate system used, the external provider may process information such as:
referral information;
click information;
browser or device information;
affiliate identifiers;
transaction or conversion information; and
cookies or similar identifiers.
Simply displaying a normal external link does not necessarily result in affiliate tracking on the Vida Workstation website.
Where non-essential tracking technologies are used on this website, they will only be activated in accordance with applicable consent requirements.
Additional information about commercial relationships is available in our Affiliate Disclosure.
12. Cookies and Similar Technologies
This website uses cookies and similar technologies where necessary for technical functionality and, where applicable, for optional functions.
Necessary cookies
Certain cookies and storage technologies are required for essential website functions, including:
security;
website operation;
session management;
consent management; and
technical functionality.
Where the storage of information on your device or access to information stored on your device is strictly necessary to provide a service you have requested, consent is not required under § 25(2) TDDDG.
Non-essential cookies
Other technologies, such as certain analytics, performance, marketing, affiliate or third-party media technologies, may require your consent.
Where consent is required, such technologies will only be activated after consent has been given.
The legal basis for subsequent processing of personal data is generally Art. 6(1)(a) GDPR.
You may withdraw or change your consent through the website's cookie settings where available.
13. Cookie Consent and Preferences
The website provides cookie or privacy preference controls where required.
Visitors may be given options to:
accept optional technologies;
reject non-essential technologies; or
manage individual preferences.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Necessary cookies cannot always be disabled because they are required for the operation and security of the website.
14. Squarespace Analytics and Website Statistics
Squarespace may provide website analytics and activity information to website operators.
Depending on the configuration and consent settings, such information may include:
page views;
visitor activity;
referring sources;
device or browser information;
approximate usage statistics; and
technical website activity.
Where analytics processing requires consent, the relevant technology will only be used after consent has been obtained.
Where statistics are processed without consent, this will only occur where permitted by applicable law.
We do not use website analytics for automated decisions that produce legal or similarly significant effects concerning visitors.
15. SoundCloud
Vida Workstation may display audio content through an embedded SoundCloud player.
The provider is:
SoundCloud Global Limited & Co. KG
Karl-Marx-Strasse 101
12043 Berlin
Germany
When SoundCloud content or a SoundCloud player is loaded, SoundCloud may receive technical information such as:
IP address;
browser information;
device information;
page information; and
information concerning interaction with the player.
SoundCloud may also use cookies or similar technologies in accordance with its own privacy policy.
Where loading embedded SoundCloud content requires consent, the content should only be activated after the relevant consent has been provided.
The legal basis for consent-based processing is Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG where applicable.
SoundCloud processes personal data according to its own privacy policy.
16. External Links
This website contains or may contain links to external websites, including:
Bestara;
retailers;
brands;
affiliate partners;
product manufacturers;
creative platforms;
audio platforms; and
other third-party websites.
When you click an external link, you leave the Vida Workstation website.
The respective external provider is responsible for its own data processing.
We recommend reviewing the privacy policy of the external website before providing personal data.
17. Social Media
Vida Workstation may in the future maintain profiles on social media or content platforms.
A simple link to an external social-media profile generally causes data to be transmitted to that provider only after you click the link.
If embedded videos, feeds, social-media plugins or similar integrations are introduced, this Privacy Policy and the website's consent configuration will be updated as necessary before or when those functions are activated.
18. Children and Kids-Related Content
Vida Workstation may provide family-friendly content and content relating to children's creativity, hobbies, stories, activities or entertainment.
The availability of children's content does not mean that this website is intended to collect personal data directly from children.
We do not intentionally request children to submit personal data through the website.
Children should not use contact forms or provide personal information without the involvement of a parent or legal guardian where this is required by law.
If you are a parent or legal guardian and believe that a child has provided personal data to us without appropriate authorisation, please contact:
We will review the matter and, where appropriate, delete the relevant data.
19. Direct Sales, Digital Products and Online Shop Functions
Vida Workstation's registered business activities allow for digital products and online commerce.
If direct checkout, paid downloads, physical product sales or other direct e-commerce functions are activated on www.v-aw.com, personal data necessary for processing the transaction may include:
name;
email address;
billing address;
shipping address where applicable;
order information;
purchased product or service;
invoice information;
payment status;
delivery information;
refund or cancellation information; and
customer communication.
Such processing will generally be based on Art. 6(1)(b) GDPR and, for tax and accounting obligations, Art. 6(1)(c) GDPR.
Before any direct payment or checkout system requiring an external payment provider is activated, the relevant provider and processing information will be added to this Privacy Policy.
20. Payment Providers
At the time this version of the Privacy Policy was prepared, no specific external payment provider is identified in this policy as an active payment provider for direct checkout on www.v-aw.com.
If direct payment processing is introduced, the actual payment provider used will be disclosed in this Privacy Policy before or together with activation of the payment function.
Payment providers generally process payment and transaction information independently or on behalf of merchants according to their own privacy documentation.
Vida Workstation does not intend to store complete payment-card information where such information is processed directly by a specialised payment provider.
21. Customer Accounts, Memberships and Paid Areas
If customer accounts, memberships, paid areas, download libraries, subscriptions or similar account-based services are introduced, the relevant processing details will be added to this Privacy Policy before or together with activation.
Such services may require processing of:
name;
email address;
login information;
account status;
order history;
access rights; and
communication preferences.
At present, visitors should not assume that an account or membership relationship exists merely because the website contains editorial or creative content.
22. Newsletter and Email Marketing
Vida Workstation will not send marketing newsletters merely because a person has contacted us.
If a newsletter or regular marketing email service is introduced, subscription will be based on an appropriate legal basis, normally consent.
Where consent is used, subscribers will be able to withdraw their consent at any time, for example through an unsubscribe link.
The relevant newsletter provider and processing details will be added to this Privacy Policy before regular email marketing is activated.
23. Tax, Accounting and Business Records
Certain personal data must be retained in order to comply with German tax, accounting and commercial documentation obligations.
This may include:
invoices;
accounting records;
payment records;
contracts;
business correspondence;
order information; and
tax-relevant documents.
Depending on the type of document, statutory retention periods under German law may generally be six, eight or ten years.
Where a statutory retention obligation applies, the relevant data will not be deleted before the end of that period unless permitted by law.
The legal basis is Art. 6(1)(c) GDPR.
24. Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected or for as long as required by applicable law.
In particular:
general enquiries are retained for as long as necessary to respond and resolve the matter;
business communications may be retained for the duration of the business relationship and applicable limitation periods;
contracts, invoices and tax-relevant records are retained according to statutory requirements;
consent records may be retained where necessary to demonstrate that valid consent was obtained; and
technical data is retained only for the period necessary for technical, security or legal purposes.
When data is no longer required and no legal obligation prevents deletion, it will be deleted or anonymised where appropriate.
25. Recipients and Service Providers
Personal data may be disclosed or made accessible to service providers where necessary to operate the website and business.
We currently use or may rely on the following relevant service providers:
Squarespace
Squarespace is used to create, host, secure and operate this website and may process technical website data and contact-form information.
Google Workspace
We use Google Workspace, including Gmail, for business email communication and related administrative functions.
Google Workspace may process personal data contained in emails, attachments, communication metadata and related technical information on our behalf in order to provide the service.
Google provides contractual data-protection safeguards for Google Workspace, including its applicable Cloud Data Processing Addendum.
SoundCloud
Where SoundCloud audio content is embedded on this website, SoundCloud may process technical and usage data as described in Section 15 of this Privacy Policy.
Professional Advisers and Authorities
Personal data may also be disclosed to tax advisers, accountants, legal advisers, public authorities or other professional recipients where this is necessary to comply with legal obligations, manage our business or establish, exercise or defend legal claims.
Service providers processing personal data on our behalf are required to process such data in accordance with applicable data-protection requirements.
We do not sell personal data to advertisers or other third parties.
26. International Data Transfers
Some service providers used by Vida Workstation operate internationally. This includes, in particular, Squarespace and Google Workspace.
As a result, personal data may in certain circumstances be processed in or accessed from countries outside Germany or the European Economic Area (“EEA”).
Where personal data is transferred to a country outside the EEA, such transfers will only take place where an appropriate legal mechanism under Chapter V GDPR is available.
Depending on the provider and destination country, such safeguards may include:
an adequacy decision by the European Commission;
the EU-U.S. Data Privacy Framework, where applicable;
Standard Contractual Clauses approved by the European Commission; or
another legally recognised transfer mechanism.
Google provides contractual data-protection safeguards for Google Workspace through its applicable Cloud Data Processing Addendum and related data-transfer mechanisms.
Squarespace similarly provides contractual safeguards governing relevant international processing and data transfers.
27. Data Security
We use appropriate technical and organisational measures designed to protect personal data against:
unauthorised access;
accidental loss;
misuse;
unlawful disclosure;
alteration; and
destruction.
This website uses encrypted HTTPS / SSL-TLS connections for data transmission.
However, no internet-based system can be guaranteed to be completely secure.
28. Your Rights Under the GDPR
Subject to the applicable legal requirements, you may have the following rights:
Right of access — Art. 15 GDPR;
Right to rectification — Art. 16 GDPR;
Right to erasure — Art. 17 GDPR;
Right to restriction of processing — Art. 18 GDPR;
Right to data portability — Art. 20 GDPR;
Right to object — Art. 21 GDPR;
Right to withdraw consent — Art. 7(3) GDPR; and
Right to lodge a complaint with a supervisory authority — Art. 77 GDPR.
To exercise your rights, please contact:
We may need to verify your identity before fulfilling certain requests where necessary to protect your personal data.
29. Right to Object
Where personal data is processed on the basis of Art. 6(1)(f) GDPR, you have the right to object to processing on grounds relating to your particular situation.
If personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
30. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Cookie consent may be changed through the website's cookie or privacy settings where available.
31. Automated Decision-Making
Vida Workstation does not currently use personal data collected through this website for automated decision-making producing legal effects or similarly significant effects within the meaning of Art. 22 GDPR.
32. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The supervisory authority responsible for North Rhine-Westphalia is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Website: www.ldi.nrw.de
You may also contact another competent data protection supervisory authority.
33. Privacy Enquiries
For questions concerning this Privacy Policy, the processing of personal data or your data-protection rights, please contact:
Vida Workstation
Owner: Vida Gholami
Corneliusstraße 43
40215 Düsseldorf
Germany
Email: info@v-aw.com
34. Changes to this Privacy Policy
We may update this Privacy Policy when necessary.
Updates may be required, for example, when:
• website functions change;
• a new service provider is introduced;
• direct sales or digital products are activated;
• payment providers are introduced;
• customer accounts or memberships are introduced;
• newsletter services are activated;
• new analytics or advertising technologies are used;
• social-media or video integrations are added;
• affiliate systems change;
• Bestara integrations change; or
• applicable legal requirements change.
The current version will be published on this page.
35. Google Analytics 4
We use Google Analytics 4, a web analytics service provided in the European Economic Area by:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors find and use www.v-aw.com, assess the performance of pages and content, identify technical or usability issues and improve the website.
Depending on the visitor’s consent and the configuration of the service, Google Analytics may process first-party cookies or similar device identifiers; browser, device and operating-system information; referring pages and traffic sources; pages viewed and engagement information; interactions such as page views, scrolls, outbound-link clicks, website searches, file downloads, video engagement and form interactions; approximate geographical information; and technical information required to provide and secure the service.
We do not intentionally send names, email addresses, contact-form contents or other directly identifying information to Google Analytics.
According to Google, Google Analytics 4 does not log or store individual IP addresses from visitors in the European Union, Switzerland or the United Kingdom. An IP address may be used temporarily to derive approximate geographical information before being discarded.
Google Analytics is a non-essential analytics service. Where consent is legally required, the related cookies and technologies are activated only after the visitor has consented through our cookie banner. The legal basis for storing or accessing information on the visitor’s device is § 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Art. 6(1)(a) GDPR.
Visitors may reject non-essential cookies or withdraw or change their consent at any time through the Cookie Preferences control. Withdrawal does not affect processing carried out before consent was withdrawn.
Google processes Analytics data on our behalf under the applicable Google data-processing terms. Depending on the processing operation, data may also be processed by Google group companies or service providers outside the European Economic Area. Where required, international transfers are protected by an applicable mechanism under Chapter V GDPR, such as an adequacy decision or Standard Contractual Clauses.
Our current Google Analytics retention settings are:
• event data: 2 months;
• user data: 14 months; and
• the user-data retention period resets when new user activity is recorded.
These settings do not necessarily affect aggregated reports that do not directly identify individual visitors.
Further information:
Google Privacy Policy:
https://policies.google.com/privacy
Google Analytics data and privacy:
https://support.google.com/analytics/answer/6004245
EU-focused Analytics privacy information:
https://support.google.com/analytics/answer/12017362
Google Analytics Opt-out Browser Add-on:
https://tools.google.com/dlpage/gaoptout
Last updated: 5 September 2026