Privacy Policy

1. Controller

Rolf Seegelken

Freelancer

Rigaer Str. 104

10247 Berlin

Germany

2. Privacy contact

Email: kontakt@rolfseegelken.de

3. General notes on data processing

Personal data is processed only to the extent required to operate this website, respond to inquiries, handle pre-contractual communication, or protect legitimate security and functionality interests.

Depending on the context, Art. 6(1)(b) GDPR may apply to inquiries about potential services or contracts, and Art. 6(1)(f) GDPR may apply to general communication, technical delivery, security, and stability of the website.

No data protection officer has been appointed.

4. Website delivery and hosting via Cloudflare

This website is hosted on Cloudflare Pages. Cloudflare may also be used for DNS, CDN, and security-related delivery functions.

When the website is delivered, technically necessary access data may be processed, for example IP address, requested URL, request date and time, browser and device information, user agent, and referrer where transmitted.

Processing serves website delivery, performance, troubleshooting, and security. The legal basis is generally Art. 6(1)(f) GDPR. Retention periods and further details depend, where relevant, on Cloudflare provider information and the actually used features.

The contact form uses a Cloudflare Pages Function at /api/contact. Submitted form data, technical metadata such as user agent and country hint, and the result of the spam-protection check may be processed there.

5. Contact

If you contact me via contact form, email, or appointment booking, I process the data you provide to handle the inquiry, contact you, and, where applicable, prepare or carry out a collaboration. This can include replying by email.

If you use the contact form, this includes in particular name, email address, optional company, phone or topic details, your message, and your confirmation that you have read the privacy policy.

The form is processed server-side through a Cloudflare Pages Function. Cloudflare Turnstile and a honeypot field are used for spam protection. Valid inquiries are documented in Cloudflare D1; technical metadata such as user agent, source path, and a country hint provided by Cloudflare may also be stored.

Resend is used as the transactional email provider for the internal notification and the automatic confirmation email sent to you. Depending on the email, the reply-to address is either your submitted email address or a configured contact address.

Please do not submit sensitive information. The legal basis is Art. 6(1)(b) GDPR where pre-contractual steps or carrying out a collaboration are concerned; additionally Art. 6(1)(f) GDPR for handling other contact inquiries.

6. Appointment booking / Google Calendar Appointment Scheduling

After a successful contact form submission, an embedded Google Calendar Appointment Scheduling widget can optionally be loaded to book an introductory appointment directly. The provider is Google.

The calendar widget is only embedded as an iframe after the form submission has been confirmed as successful. When the widget loads, technical data such as IP address, browser and device information, and usage data may be transmitted to Google and processed under Google terms. Depending on the booking form, data such as name, email address, company, message, and appointment details may also be processed by Google or Google Workspace.

The purpose of the embed is optional appointment scheduling after a contact inquiry. The legal basis is, depending on context, Art. 6(1)(b) GDPR for appointment scheduling and pre-contractual communication or Art. 6(1)(f) GDPR for efficient appointment organization. Further information is available in Google’s privacy policy: https://policies.google.com/privacy.

7. External links / LinkedIn / Email

The website links to external profiles or services, especially LinkedIn in the footer. No LinkedIn widget is embedded.

The mailto link for the contact email opens your locally configured email application. The copy function copies the contact address only to your browser clipboard and does not send the copied email address to the website operator.

When you open external links, the privacy information of the respective provider applies. I have no control over their processing.

8. Cookies, local storage, and tracking

Usercentrics is used as the Consent Management Platform to manage and document consent choices for optional services. Optional services are loaded only according to the selected choices. You can change or withdraw your choices with effect for the future at any time through the cookie settings.

For expressly authorised internal access, the technically necessary first-party cookie “rs_internal_traffic” may be stored on the device after deliberate activation. It contains only the value “1”, applies to the entire domain, and is stored for a maximum of 365 days. The cookie is used to mark visits as internal traffic and, only where analytics consent has also been granted, to transmit the parameter “traffic_type=internal” to Google Analytics 4 so that internal visits can be excluded from regular reporting. The cookie does not activate analytics or marketing services and is not set during ordinary website visits. Storage is necessary to provide the expressly requested internal function under Section 25(2) no. 2 TDDDG. Where personal data is processed, this is based on our legitimate interest in undistorted usage statistics under Art. 6(1)(f) GDPR. The cookie can be deleted through browser settings or disabled by authorised internal users.

Google Tag Manager (GTM), provided by Google, is loaded only after you consent to the “Google Tag Manager” service in the “Analytics / Statistics” category. Before consent, the GTM script is not executed and no connection to googletagmanager.com is established. The additional GTM noscript iframe is deliberately not used because it cannot be activated reliably based on consent when JavaScript is unavailable.

After consent, GTM is used to manage and trigger analytics tags in a controlled manner. Google Analytics 4 (GA4) is configured as the initial analytics service; a GA4 property and web data stream have already been created. Data collection can begin only after the corresponding GA4 tags and triggers have been published in GTM and the required consents are available. Data transmitted to Google may then include the IP address, browser and device information, pages viewed, referrer, timestamps, interactions, and technical identifiers. Contact-form contents are not intended for GTM or GA4 and must not be transmitted to these services.

Processing is used to analyse website usage and improve content, user journeys, and technical quality. The legal basis is your consent under Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) of the German Telecommunications-Digital-Services Data Protection Act (TDDDG). Depending on the configuration, processing by Google in third countries cannot be ruled out. Further information is available in Google’s privacy policy at https://policies.google.com/privacy.

If consent for Google Tag Manager is withdrawn in the cookie settings, the current page reloads automatically. This ensures that the already executed container is blocked again for the new document and that no further GA4 events are sent from the previous page.

The website font is served locally. The site should not request Google Fonts from Google font domains.

9. Recipients and service providers

Recipients of personal data may include technical service providers required for operation, delivery, security, or communication. Currently this includes in particular Cloudflare for hosting and website delivery and Usercentrics for consent management.

For contact-form inquiries, Cloudflare Pages Functions, Cloudflare Turnstile, Cloudflare D1, and Resend may also be involved as recipients or processors. Additional recipients, such as Google Workspace for appointment booking, become relevant if you open the external booking link or consent to the embedded calendar.

After you consent to analytics, Google Ireland Limited, Google LLC, and, where applicable, other affiliated Google companies may process data in connection with Google Tag Manager and Google Analytics 4.

10. Retention

Personal data is stored only for as long as required for the respective purposes or statutory retention obligations. Contact-form inquiries are retained for a reasonable period to handle requests, support follow-up communication, and review abuse if needed.

For technical access data in connection with hosting, the applicable settings and provider information apply where relevant. Specific retention periods are not asserted here until they are finally confirmed.

11. Rights of data subjects

Subject to legal requirements, data subjects have rights including access, rectification, erasure, restriction of processing, data portability, and objection to certain processing.

Where processing is based on consent, consent can generally be withdrawn with effect for the future.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that personal data is processed in violation of data protection law.

13. Status and changes to this privacy policy

Status: August 2026. This privacy policy will be updated if website features, service providers, or data processing activities change.