Privacy Policy

This English version is provided for convenience.

Controller

Elfie Schürfeld-Todor

Stellinger Steindamm, 22527 Hamburg, Germany
Email: elfie.schuerfeld@gmail.com

Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in the data centres in Berlin and Karlsruhe, that is, exclusively in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.
When you visit this website, the server automatically stores information in log files: browser type and version, operating system, referrer URL, page requested, date and time of access, and IP address. This data could in principle allow conclusions about the person using the site, but it is not analysed for that purpose. The legal basis is my legitimate interest in the technically sound and secure operation of the website (Art. 6 (1) (f) GDPR). Log files are stored only as long as required for operation and security and are then deleted automatically. The data is not combined with other data sources.

Encryption

This website uses SSL/TLS encryption, which you can recognise by “https://” in your browser’s address bar. While encryption is active, the data you send me cannot be read by third parties.

Cookies

This website uses no tracking, analytics or advertising cookies. Audience measurement runs without cookies and without storing personal data, see the section on audience measurement. A cookie banner is therefore not required.
The only cookie set is a technically necessary one for language selection (pll_language, set by the Polylang plugin). It stores whether you are viewing the German or the English version, contains no personal data and expires after one year. The legal basis is Section 25 (2) no. 2 TDDDG, as this storage is strictly necessary to provide the service you requested. No consent is required for it.
When logging in to the administration area, WordPress sets further technically necessary cookies. This concerns only me as the operator, not visitors to this site.

Search function

The search on this website runs entirely on my own server. Search terms are not transmitted to third parties and are not stored permanently.

Audience measurement

This website counts page views using the Statify plugin. For each view it stores only the date, the page requested and the referring address, if your browser sent one. No cookie is set, no IP address is stored and no identifier is assigned that could be used to recognise you. No personal reference is created. The data stays in this website’s database and is not transmitted to third parties. Entries are deleted automatically after 14 days.
The legal basis is my legitimate interest in knowing which posts are read (Art. 6 (1) (f) GDPR). As no cookie is set and no information is accessed on your device, consent under Section 25 TDDDG is not required.

Protection of the administration area

The login to the administration area is protected against automated login attempts by the Limit Login Attempts Reloaded plugin. On a failed login attempt, the plugin stores the IP address, the user name entered and the time, in order to block that address temporarily. Processing takes place exclusively on this website’s server. The vendor’s cloud feature is not activated, and no data is transmitted to the vendor or to any other third party. Entries are deleted once they are no longer needed to fend off further attempts. The legal basis is my legitimate interest in preventing unauthorised access (Art. 6 (1) (f) GDPR).

Contact by email

If you write to me by email, I process your information in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contract, and otherwise my legitimate interest in responding (Art. 6 (1) (f) GDPR). I do not pass your data on. I delete it once the enquiry has been dealt with and no statutory retention periods apply. There is no contact form on this website.

External links

This website links to external pages, for example studies, articles or my LinkedIn profile. The providers of those pages are responsible for data processing there. No social plugins, like buttons or embedded videos that would establish a connection to third parties when this page loads are used.

No transfer to third countries

All data processed via this website remains on servers in Germany. No personal data is transferred to countries outside the EU or the EEA.

Your rights

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interest (Art. 21 GDPR)

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

Data protection contact

For questions about data protection, write to me at elfie.schuerfeld@gmail.com.

Last updated: 5 September 2026