This is the Privacy Policy for the website of Hesu Lee, located at https://www.hesulee.com. This policy explains how personal data is collected, processed and protected when visiting this website or making contact through it.

1. Controller

The controller responsible for the processing of personal data on this website is:

Hesu Lee
Goldgasse 14
5020 Salzburg, Austria
contact@hesulee.com

2. Website and Hosting

This website is hosted by Squarespace, Inc. When the website is accessed, certain technical information may be processed automatically. This may include the IP address, browser and device information, date and time of access, pages visited and other technical information necessary for the operation, security and analysis of the website.

Squarespace may process personal data in connection with the provision of its services. Where personal data is transferred outside the European Economic Area, applicable safeguards for international data transfers apply.

3. Contact

When contact is made through the contact form or by email, the information provided, such as name, email address and message, is processed for the purpose of responding to the inquiry and any related communication.

The legal basis for this processing is Art. 6(1)(b) GDPR where the inquiry relates to a potential or existing contractual relationship, or Art. 6(1)(f) GDPR where processing is necessary for the legitimate interest of responding to general inquiries.

Google reCAPTCHA is used to protect the contact form from spam and automated abuse. In connection with this service, technical information such as the IP address and browser or device information may be processed by Google.

4. Cookies and Analytics

This website uses cookies and similar technologies for its operation, security, analytics and embedded content.

Non-essential cookies are restricted until the appropriate consent has been given. Cookie preferences can be managed at any time using the Cookies settings available on this website. Consent may be changed or withdrawn at any time.

5. Embedded Content – YouTube

This website contains videos embedded from YouTube, a service provided by Google.

When embedded YouTube content is loaded, personal data such as the IP address and information about interaction with the video may be transmitted to Google. Where consent is required, such content is loaded only after the appropriate consent has been given.

6. Social Media Links

This website contains links to external platforms, including Instagram and YouTube. When such links are followed, the privacy policies and data processing practices of the respective platforms apply.

7. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected or for as long as required by applicable statutory retention obligations.

8. Your Rights

Under the General Data Protection Regulation (GDPR), data subjects have, where applicable, the right to access, rectification, erasure, restriction of processing, data portability and objection to the processing of their personal data.

Where processing is based on consent, consent may be withdrawn at any time with effect for the future.

A complaint may also be lodged with the competent supervisory authority. In Austria, the competent authority is the Austrian Data Protection Authority (Datenschutzbehörde).

9. Changes to this Privacy Policy

This Privacy Policy may be updated where necessary to reflect changes to the website, the services used or applicable legal requirements.

Last updated: August 2026