Privacy Policy

1. Controller

Rolf Seegelken

Freelancer

Rigaer Str. 104

10247 Berlin

Germany

2. Privacy contact

Email: [email protected]

3. General notes on data processing

Personal data is processed only to the extent required to operate this website, respond to inquiries, handle pre-contractual communication, or protect legitimate security and functionality interests.

Depending on the context, Art. 6(1)(b) GDPR may apply to inquiries about potential services or contracts, and Art. 6(1)(f) GDPR may apply to general communication, technical delivery, security, and stability of the website.

No data protection officer has been appointed.

4. Website delivery and hosting via Cloudflare

This website is hosted on Cloudflare Pages. Cloudflare may also be used for DNS, CDN, and security-related delivery functions.

When the website is delivered, technically necessary access data may be processed, for example IP address, requested URL, request date and time, browser and device information, user agent, and referrer where transmitted.

Processing serves website delivery, performance, troubleshooting, and security. The legal basis is generally Art. 6(1)(f) GDPR. Retention periods and further details depend, where relevant, on Cloudflare provider information and the actually used features.

The contact form uses a Cloudflare Pages Function at /api/contact. Submitted form data, technical metadata such as user agent and country hint, and the result of the spam-protection check may be processed there.

5. Contact

If you contact me via contact form, email, or appointment booking, I process the data you provide to handle the inquiry, contact you, and, where applicable, prepare or carry out a collaboration. This can include replying by email.

If you use the contact form, this includes in particular name, email address, optional company, phone or topic details, your message, and your confirmation that you have read the privacy policy.

The form is processed server-side through a Cloudflare Pages Function. Cloudflare Turnstile and a honeypot field are used for spam protection. Valid inquiries are documented in Cloudflare D1; technical metadata such as user agent, source path, and a country hint provided by Cloudflare may also be stored.

Resend is used as the transactional email provider for the internal notification and the automatic confirmation email sent to you. Depending on the email, the reply-to address is either your submitted email address or a configured contact address.

Please do not submit sensitive information. The legal basis is Art. 6(1)(b) GDPR where pre-contractual steps or carrying out a collaboration are concerned; additionally Art. 6(1)(f) GDPR for handling other contact inquiries.

6. Appointment booking / Google Calendar Appointment Scheduling

After a successful contact form submission, an embedded Google Calendar Appointment Scheduling widget can optionally be loaded to book an introductory appointment directly. The provider is Google.

The calendar widget is only embedded as an iframe after the form submission has been confirmed as successful. When the widget loads, technical data such as IP address, browser and device information, and usage data may be transmitted to Google and processed under Google terms. Depending on the booking form, data such as name, email address, company, message, and appointment details may also be processed by Google or Google Workspace.

The purpose of the embed is optional appointment scheduling after a contact inquiry. The legal basis is, depending on context, Art. 6(1)(b) GDPR for appointment scheduling and pre-contractual communication or Art. 6(1)(f) GDPR for efficient appointment organization. Further information is available in Google’s privacy policy: https://policies.google.com/privacy.

7. External links / LinkedIn / Email

The website links to external profiles or services, especially LinkedIn in the footer. No LinkedIn widget is embedded.

The mailto link for the contact email opens your locally configured email application. The copy function copies the contact address only to your browser clipboard and does not send the copied email address to the website operator.

When you open external links, the privacy information of the respective provider applies. I have no control over their processing.

8. Cookies, local storage, and tracking

Usercentrics is used as the Consent Management Platform to manage and document consent choices for optional services. In the banner configuration currently in use, analytics services are grouped in the “Analytics / Statistics” category; consenting to this category enables the analytics services assigned to it together. You can change or withdraw your choices with effect for the future at any time through the cookie settings.

For expressly authorised internal access, the technically necessary first-party cookie “rs_internal_traffic” may be stored on the device after deliberate activation. It contains only the value “1”, applies to the entire domain, and is stored for a maximum of 365 days. The cookie is used to mark visits as internal traffic and, only where analytics consent has also been granted, to transmit the parameter “traffic_type=internal” to Google Analytics 4 so that internal visits can be excluded from regular reporting. The cookie does not activate analytics or marketing services and is not set during ordinary website visits. Storage is necessary to provide the expressly requested internal function under Section 25(2) no. 2 TDDDG. Where personal data is processed, this is based on our legitimate interest in undistorted usage statistics under Art. 6(1)(f) GDPR. The cookie can be deleted through browser settings or disabled by authorised internal users.

Google Tag Manager (GTM), provided by Google, is loaded only after you consent to the “Analytics / Statistics” category. The GTM script is delivered through a first-party path on rolfseegelken.de using Google Tag Gateway and Cloudflare. Before consent, the GTM script is not executed. The additional GTM noscript iframe is deliberately not used because it cannot be activated reliably based on consent when JavaScript is unavailable.

After you consent to the “Analytics / Statistics” category, GTM may load and is used to manage and trigger analytics tags in a controlled manner. Google Analytics 4 (GA4) is configured as a production analytics service. GA4 requests are routed through a first-party path on rolfseegelken.de to a server-side Google Tag Manager infrastructure and are forwarded from there to Google Analytics 4. Google Consent Mode is disabled for this production Main GA4 measurement; no cookieless GA4 pings are intended without analytics consent. After consent, data transmitted to Google may include the IP address, browser and device information, pages viewed, referrer, timestamps, interactions, and technical identifiers. Contact-form contents are not intended for GTM or GA4 and must not be transmitted to these services.

JENTIS is used in production as an additional first-party tracking and data-capture infrastructure. The JENTIS base script is served through a rolfseegelken.de subdomain and is loaded only after you consent to the “Analytics / Statistics” category. The consent choice is synchronised between Usercentrics and the JENTIS Consent Engine. After consent, page views and selected website interactions may be processed server-side through JENTIS and forwarded to a separate Google Analytics 4 property, including scroll depth, clicks on interface elements, and technical status events of the contact form. Contact-form contents and entered values are not part of this analytics transmission; validation-error tracking may include technical field identifiers only. Without consent, the JENTIS script is not loaded and no JENTIS-based GA4 transmission takes place. JENTIS Essential Mode is currently not enabled; any future data stream for explicitly denied consent will be subject to a separate technical and legal review before production use.

Processing is used to analyse website usage and improve content, user journeys, and technical quality. The legal basis is your consent under Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) of the German Telecommunications-Digital-Services Data Protection Act (TDDDG). Depending on the configuration, processing by Google in third countries cannot be ruled out. Further information is available in Google’s privacy policy at https://policies.google.com/privacy.

If consent for the “Analytics / Statistics” category is withdrawn in the cookie settings, the current page reloads automatically. Google Tag Manager, Google Analytics 4, and JENTIS remain blocked in the reloaded document and no further analytics-related tracking requests are triggered by these services.

The website font is served locally. The site should not request Google Fonts from Google font domains.

9. Recipients and service providers

Recipients of personal data may include technical service providers required for operation, delivery, security, or communication. Currently this includes in particular Cloudflare for hosting, website delivery, and first-party routing of technical tracking endpoints, as well as Usercentrics for consent management.

For contact-form inquiries, Cloudflare Pages Functions, Cloudflare Turnstile, Cloudflare D1, and Resend may also be involved as recipients or processors. Additional recipients, such as Google Workspace for appointment booking, become relevant if you open the external booking link or consent to the embedded calendar.

After you consent to the “Analytics / Statistics” category, Google Ireland Limited, Google LLC, and, where applicable, other affiliated Google companies may process data in connection with Google Tag Manager, Google Tag Gateway, server-side tagging, and Google Analytics 4.

After you consent to the “Analytics / Statistics” category, JENTIS GmbH processes data in connection with the provided tracking and data-capture infrastructure and the server-side forwarding of approved analytics data.

10. Retention

Personal data is stored only for as long as required for the respective purposes or statutory retention obligations. Contact-form inquiries are retained for a reasonable period to handle requests, support follow-up communication, and review abuse if needed.

For technical access data in connection with hosting, the applicable settings and provider information apply where relevant. Specific retention periods are not asserted here until they are finally confirmed.

11. Rights of data subjects

Subject to legal requirements, data subjects have rights including access, rectification, erasure, restriction of processing, data portability, and objection to certain processing.

Where processing is based on consent, consent can generally be withdrawn with effect for the future.

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that personal data is processed in violation of data protection law.

13. Status and changes to this privacy policy

Status: August 2026. This privacy policy will be updated if website features, service providers, or data processing activities change.