Privacy Policy

As of: 8 October 2026

Protecting your personal data is important to me. In this privacy policy, I inform you which personal data is processed when you use my website wido-loeffler.com and for what purposes.

2.1 Controller

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Wido Löffler
Mallersdorfer Weg 10
91792 Ellingen
Germany

Email: kontakt [at] wido-loeffler [dot] com

2.2 General information on data processing

Scope of the processing of personal data
As a rule, I process my users’ personal data only to the extent necessary to provide a functional website as well as the content and services provided, or if you have consented to the processing.

Legal bases for processing
Unless a more specific legal basis is stated in an individual case, the processing of personal data is based on the following legal bases:

Art. 6(1)(a) GDPR, if you have given consent to the processing
Art. 6(1)(b) GDPR, if the processing is necessary for the performance of a contract or to take steps prior to entering into a contract
Art. 6(1)(c) GDPR, if the processing is necessary for compliance with a legal obligation
Art. 6(1)(f) GDPR, if the processing is necessary for the purposes of legitimate interests and your interests or fundamental rights and freedoms do not override those interests

Retention period
Unless a more specific retention period is stated in this privacy policy, personal data will be deleted as soon as the purpose of the processing no longer applies. Storage beyond that may occur if this is provided for by European or national legislators in Union law regulations, laws, or other provisions. In such cases, deletion takes place after the respective statutory retention periods have expired.

2.3 Provision of the website and web hosting (Cloudflare Pages)

Provision of the website and web hosting (Cloudflare Pages)
My website is provided and hosted via the service “Cloudflare Pages” of the provider
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Data processed
When you access my website, Cloudflare automatically collects and stores information in so-called server log files that your browser transmits automatically. This includes in particular:

IP address
date and time of the request
time zone difference to Greenwich Mean Time (GMT)
content of the request (specific page)
access status/HTTP status code
amount of data transferred in each case
website from which the request comes (referrer URL)
browser type and browser version
operating system and its interface
language and version of the browser software

Purpose of processing
This data is processed to provide the website, ensure stability and security, and enable the technical use of the website.

Legal basis
Art. 6(1)(f) GDPR (legitimate interest) in the secure and stable provision of the website.

Transfer to third countries
Cloudflare may process data in the USA. Cloudflare states that it uses appropriate safeguards for the transfer of personal data to third countries (e.g., standard contractual clauses).

Further information
Further information on data processing by Cloudflare can be found in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

2.4 Cloudflare (CDN)

Cloudflare
My website uses services of the content delivery network (CDN) “Cloudflare” of the provider
Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Data processed
Cloudflare processes technical connection data in particular (e.g., IP address, system configuration, data about traffic to and from my website).

Purpose of processing
Cloudflare is used to provide the website faster and more securely (e.g., DDoS protection, performance optimization).

Legal basis
Art. 6(1)(f) GDPR (legitimate interest) in a secure and efficient provision of the website.

Further information
Further information on data processing by Cloudflare can be found in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/

2.5 Cookies

Cookies
My website does not use cookies for analytics, tracking, or marketing purposes.

Language preference
If you use the optional function to store your language selection, a cookie named “site_lang” may be set. This cookie stores only the selected language (de/en) and is automatically deleted after no more than 12 months.

Notice banner (local storage)
If you close the notice banner, an entry may be stored in your browser’s local storage to remember your acknowledgement. This entry only stores the acknowledgement status and remains until you clear your browser storage.

Animation preferences (session storage) When you pause or resume article image animations or the page background, your choice is stored in your browser’s session storage under “article-motion-paused” or “site-atmosphere-paused”. These entries contain only the pause status and apply to the current tab session. They are not sent to the server or used for analytics or tracking. Your operating system’s reduced-motion preference is also respected without storing it.

Security cookies (Cloudflare)
In certain cases, Cloudflare may use technically necessary cookies to ensure security and protection against abuse (e.g., bot protection / DDoS mitigation).

Legal bases
Storing or accessing technically necessary cookies and comparable browser storage (e.g., local storage) is based on § 25(2) TDDDG (no consent required for technically necessary cookies). Where personal data is processed in this context, the legal basis is Art. 6(1)(f) GDPR (legitimate interests). Cookies that are not technically necessary are used only with your consent (§ 25(1) TDDDG; Art. 6(1)(a) GDPR).

2.6 Contact

Contact
If you contact me by email or via LinkedIn, the data you provide (e.g., name, email address, message content) will be processed to handle your inquiry.

Legal basis
Art. 6(1)(b) GDPR (contract/pre-contract) or Art. 6(1)(f) GDPR (legitimate interest in communication).

Retention period
The data will be deleted as soon as the processing of your inquiry has been completed and no statutory retention obligations prevent deletion.

2.7 Data security

Data security
I use appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

This website is provided via HTTPS/TLS. You can usually recognize an encrypted connection by the browser’s address bar and the lock symbol. Data transmitted via an encrypted connection generally cannot be read by third parties.

2.8 Updates and changes to this privacy policy

Changes to this privacy policy
I reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to reflect changes to my services in this privacy policy, for example when introducing new features or services.

For your next visit, the current version of the privacy policy will apply.