11iEIdeas
Contexts
A more human tomorrow
DE

11iE

Privacy.

This English version is provided for convenience.

Elfie Schürfeld-Todor

Stellinger Steindamm, 22527 Hamburg, Germany
Email: elfie.schuerfeld [at] gmail [dot] com

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The servers are located in the data centres in Berlin and Karlsruhe, that is, exclusively in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.
When you visit this website, the server automatically stores information in log files: browser type and version, operating system, referrer URL, page requested, date and time of access, and IP address. This data could in principle allow conclusions about the person using the site, but it is not analysed for that purpose. The legal basis is my legitimate interest in the technically sound and secure operation of the website (Art. 6 (1) (f) GDPR). According to STRATO, IP addresses that have not been anonymised are retained for a maximum of seven days to detect and prevent attacks. The access logs available to me contain anonymised IP addresses and remain available for six weeks. STRATO provides further information about IP address retention and access logs (both in German). The data is not combined with other data sources.

This website uses SSL/TLS encryption, which you can recognise by „https://“ in your browser’s address bar. Data transmitted between your browser and this website’s server is encrypted. This helps protect it against interception and alteration while in transit.

This website uses no tracking, analytics or advertising cookies. Audience measurement runs without cookies and without storing personal data; see the audience measurement section for details.
The website uses the Polylang plugin’s pll_language cookie to remember your chosen language. It stores the language code so that your preference can be used on subsequent visits. The cookie expires after one year and is not used to analyse browsing behaviour or for advertising. The legal basis for storing your language preference is Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
When the login and administration areas are used, WordPress and the security plugin set additional cookies for authentication, security and administration. These functions are separate from ordinary browsing of the publicly accessible pages.

The search on this website runs entirely on my own server. Search terms are not transmitted to third parties and are not stored permanently.

This website counts page views using the Statify plugin. For each view it stores only the date, the page requested and the referring address, if your browser sent one. No cookie is set, no IP address is stored and no identifier is assigned that could be used to recognise you. No personal reference is created. The data stays in this website’s database and is not transmitted to third parties. Entries are deleted automatically after 14 days.
The legal basis is my legitimate interest in knowing which posts are read (Art. 6 (1) (f) GDPR). As no cookie is set and no information is accessed on your device, consent under Section 25 TDDDG is not required.

The Limit Login Attempts Reloaded plugin protects the administration login against automated attempts to gain access. To detect and limit failed login attempts, it processes IP addresses, the user names entered, timestamps and attempt counts. Checks and logging take place locally on this website’s server. The vendor’s cloud feature is not enabled.
Email alerts about lockouts and regular security reports are also enabled. Lockout alerts may contain the IP address concerned, the user name entered and details of the login attempts. These messages are processed by the providers involved in sending and receiving email. The information about email processing and possible international transfers in the “Contact by email and form” section also applies here.
Temporary lockouts expire after 20 minutes or 24 hours, depending on the number of failed attempts. Attempt counters remain valid for 24 hours after the most recent failed attempt. Expired lockouts and counters are removed during cleanup. Local event log entries are automatically deleted 14 days after the most recent recorded failed attempt for each combination of IP address and user name. IP addresses and user names in daily security reports are also removed after 14 days, measured from the date of each report. Daily totals without these identifying details remain available for security summaries.
Cleanup is scheduled hourly and triggered by WordPress requests. If there are no requests, overdue cleanup runs on the next WordPress request. This rule applies to the website database; it does not delete emails that have already been sent or existing backups. The legal basis is my legitimate interest in preventing unauthorised access (Art. 6 (1) (f) GDPR).

If you contact me by email or through the contact form, I process your information in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry concerns a contract, and otherwise my legitimate interest in responding (Art. 6 (1) (f) GDPR). I delete it once the enquiry has been dealt with and no statutory retention periods apply.

Information entered in the contact form is sent to me by email and processed to answer your enquiry. Your name is optional; an email address and a message are required. The form does not store messages in the website database. To protect against misuse, an identifier derived from your IP address and not stored in plain text is used for no more than ten minutes to limit repeated submissions.

This website links to external pages, for example studies, articles or my LinkedIn profile. The providers of those pages are responsible for data processing there. No social plugins, like buttons or embedded videos that would establish a connection to third parties when this page loads are used.

You have the right at any time to:

  • access the data stored about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • object to processing based on legitimate interest (Art. 21 GDPR)

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.

For questions about data protection, write to me at elfie.schuerfeld [at] gmail [dot] com.

Last updated: 14 October 2026