1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find her contact details in the imprint of this website.
How do we collect your data?
Your data is collected in part when you provide it to us — for example when you send us an email. Other data is collected automatically by our hosting provider's systems when you visit the website. This is mainly technical data (e.g. your internet browser, operating system, or the time the page was accessed).
What do we use your data for?
Part of the data is collected to ensure the website is provided without errors. Further data is processed solely to handle your enquiry. Your usage behaviour is not analysed.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipients, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. For this and for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint. You also have the right to lodge a complaint with the competent supervisory authority.
2. Hosting
External Hosting
This website is hosted as a static site by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, and delivered via its content delivery network (Cloudflare Pages). When the pages are accessed, personal data is automatically generated — in particular your IP address, your browser identifier (user agent), and timestamps — which Cloudflare processes to deliver the content securely and reliably.
The legal basis is our legitimate interest in the secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR). Cloudflare is a US company; data transfers to the USA are safeguarded by standard contractual clauses (SCCs, Art. 46 GDPR) within the scope of the Cloudflare data processing addendum.
3. General Information and Mandatory Notices
Data Protection
The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
We point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Information on the Responsible Party
The party responsible for data processing on this website is:
Dr. Silke Boeffel
Böhmerwaldstr. 9
85570 Markt Schwaben
Germany
Phone: +49 8121 250 6980
Email: [email protected]
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage Period
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial retention periods); in the latter case, deletion takes place once these reasons no longer apply.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal notification by email to us is sufficient. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged breach. This right exists without prejudice to any other administrative or judicial remedy.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place insofar as it is technically feasible.
Information, Deletion, and Correction
Within the framework of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and where applicable a right to correction or deletion of this data. For this and for further questions on the subject of personal data, you can contact us at any time at the address given in the imprint.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the imprint.
Objection to Advertising Emails
The use of contact data published within the scope of the imprint obligation to send advertising and information material not expressly requested is hereby objected to. The operator of the pages expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam emails.
4. Data Collection on This Website
Server Log Files
When the website is accessed, our hosting provider (Cloudflare, see section 2) automatically collects information that your browser transmits. This is mainly:
- browser type and version (user agent)
- operating system used
- IP address
- time of the server request
This data is not merged with other data sources by us. Collection takes place on the basis of Art. 6(1)(f) GDPR; the website operator has a legitimate interest in the technically error-free and secure delivery of her website.
Contact by Email
If you contact us by email, we process your details (name, email address, and the content of your message) solely to handle your enquiry. We do not pass this data on without your consent. The legal basis is our legitimate interest in responding to your request (Art. 6(1)(f) GDPR) or, where your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR.
Email to the address given in the imprint is received via Cloudflare Email Routing (see section 5); incoming messages are automatically forwarded to our personal email mailbox.
5. Processors
We use the following external service providers (processors within the meaning of Art. 28 GDPR) to operate this website and handle your enquiries:
Cloudflare, Inc. (Hosting, Delivery, and Email Routing)
The website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare Pages). When the pages are accessed, Cloudflare receives IP addresses, browser information, and timestamps. In addition, the email address given in the imprint is operated via Cloudflare Email Routing: messages sent to that address are received by Cloudflare and forwarded to our personal email mailbox. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable, secure operation). Data transfers to the USA are safeguarded by standard contractual clauses (SCCs) within the scope of the Cloudflare data processing addendum.
6. Social Media
Social Media Links
Our website includes links to our profiles on LinkedIn and Xing. These links are designed as simple hyperlinks and do not load any content or tracking scripts from the respective platforms unless you click on them. Only when you click such a link and visit the platform do their privacy policies apply.
7. Cookies and Tracking
This website does not set any cookies when accessed and therefore does not require a cookie banner. We do not use any analysis or tracking services — no Google Analytics, no tag manager, no counting pixels, no heatmaps, and no session recording. All fonts are embedded locally; no Google Fonts are loaded from external servers. Apart from delivery by Cloudflare, no page loads resources from third-party servers.
Last updated: July 2026