Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on data protection can be found in the privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website owner. Contact details can be found in the section “Information about the Data Controller” below.

How do we collect your data?
Some data is collected when you provide it to us, for example, by entering it into a contact or booking form. Other data is collected automatically or after your consent by our IT systems when you visit the website. This primarily includes technical data (e.g., browser, operating system, time of visit). This data is collected automatically as soon as you enter this website.

Why do we collect your data?
Some data is collected to ensure the website functions correctly. Other data may be used to analyze user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data at any time free of charge. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you may revoke this consent at any time for the future. Under certain circumstances, you also have the right to request the restriction of processing of your personal data.
You have the right to lodge a complaint with the competent supervisory authority. For further questions on data protection, you may contact us at any time.

Analytics and Third-Party Tools

When visiting this website, your browsing behavior may be statistically analyzed. This is mainly done using analytics programs. Details can be found below.

2. Hosting

Website Hosting
This website is hosted by Squarespace (Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland). When you visit this website, your personal data is processed on Squarespace’s servers. Data may also be transferred to Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace stores cookies necessary for website display and security.

The use of Squarespace is based on Art. 6(1)(f) GDPR (legitimate interest in reliable website presentation). If consent is requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG (German law), as far as the consent relates to storage of cookies or access to device information. Consent can be revoked at any time.
Data transfer to the USA is based on the EU Commission’s Standard Contractual Clauses.

For details, see:
https://support.squarespace.com/hc/en-us/articles/360000851908-GDPR-and-Squarespace

Data Processing Agreement
We have concluded a data processing agreement (DPA) with Squarespace as required by law.

3. General Information and Mandatory Disclosures

Data Protection
We take the protection of your personal data very seriously and treat your data confidentially and in accordance with legal requirements and this privacy policy.
Please note that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data from third-party access is not possible.

Information about the Data Controller
Tobias Elliott-Walter
Lortzingstraße 12 (4th floor), 66111 Saarbrücken, Germany
Phone: +49(0)1607578923
Email: tobiastherolfer@gmx.com

The controller is the natural or legal person who determines the purposes and means of processing personal data.

Storage Duration
Unless a specific storage period is stated in this policy, your personal data will remain with us until the purpose for processing no longer applies. If you request deletion or revoke consent, your data will be deleted unless there are legal retention requirements.

Legal Bases for Processing

Consent: Art. 6(1)(a) GDPR
Contract performance: Art. 6(1)(b) GDPR
Legal obligation: Art. 6(1)(c) GDPR
Legitimate interest: Art. 6(1)(f) GDPR

Data Transfers to Third Countries
Some tools we use are based in the USA or other countries outside the EU. When these tools are active, your personal data may be transferred and processed outside the EU. We cannot guarantee a level of data protection comparable to the EU in these countries.

Recipients of Personal Data
We only share your data with third parties if necessary for contract performance, required by law, or based on legitimate interest. If we use processors, data is only shared on the basis of a DPA.

Your Rights

Right to information, correction, deletion, restriction
Right to data portability
Right to withdraw consent
Right to object to processing (Art. 21 GDPR)
Right to complain to a supervisory authority

SSL/TLS Encryption
This site uses SSL/TLS encryption for security and to protect the transmission of confidential content.

4. Data Collection on This Website

Contact by Email or Phone
If you contact us by email or phone, your inquiry and any resulting personal data (name, inquiry) will be stored and processed for the purpose of handling your request. We do not share this data without your consent.
Processing is based on Art. 6(1)(b) GDPR (contract or pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest).

Data will be retained until you request deletion, revoke consent, or the purpose for storage no longer applies. Legal retention periods remain unaffected.

5. Social Media

Instagram
Features of the Instagram service are integrated on this website (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland). When using these features, data may be transmitted to Instagram servers. If you are logged into your Instagram account, Instagram can associate your visit to this website with your account.
For more information, see: Instagram Privacy Policy.

LinkedIn and Facebook
This website contains simple links to our profiles on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) and Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).
When you click these links, you will be redirected to the external platform. No personal data is transmitted to LinkedIn or Facebook simply by visiting our website; data transmission only occurs after you click the link and leave our site.
For more information, see:

6. Plugins and Tools

Google Fonts (Local Hosting)
This site uses Google Fonts for uniform display. The fonts are locally installed; no connection to Google’s servers is established.

Google reCAPTCHA
We use Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to check whether data entry is by a human or automated program. Analysis starts automatically upon visiting the website. Data collected includes IP address, time spent, and mouse movements.
Processing is based on Art. 6(1)(f) GDPR (legitimate interest in preventing abuse). If consent is requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG.

For details, see:
https://policies.google.com/privacy?hl=en
https://policies.google.com/terms?hl=en

7. Online Appointment Booking

Calendly
We use Calendly (Calendly LLC, 271 17th Street NW, Atlanta, GA 30363, USA) for online appointment scheduling. When booking, the following data is processed: