Privacy Policy

DRAFT, please review: fill in the placeholders in square brackets and remove this note before publishing.

This page explains which personal data is processed when you visit this website and when you contact me. In short: this website sets no cookies, uses no tracking for advertising and has no contact form.

Controller

Jennifer Bühler
Germany
Email:

Hosting and delivery

This website is a static website hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), using Cloudflare Pages. When you visit the website, your browser necessarily transmits technical data to Cloudflare’s servers, in particular your IP address, the date and time of the request, the requested page, the referring page, and your browser and operating system. Cloudflare processes this data to deliver the website and to protect it against attacks and misuse.

The legal basis is Art. 6 (1) (f) GDPR: my legitimate interest in a secure and reliable presentation of this website. Cloudflare may process data in the USA. Cloudflare is certified under the EU-US Data Privacy Framework, on which an adequacy decision of the European Commission is based (Art. 45 GDPR). I have concluded a data processing agreement with Cloudflare. More information: Cloudflare privacy policy.

Visitor statistics

I use Cloudflare Web Analytics to see how many people visit which pages. This service sets no cookies, does not use local storage and does not create profiles of individual visitors. It counts page views and collects technical information such as the referring page, the browser type and the country, which is derived from the IP address. The IP address itself is not stored for this purpose.

The legal basis is Art. 6 (1) (f) GDPR: my legitimate interest in understanding how this website is used, in order to improve it.

Contact by email or LinkedIn

If you contact me by email, I process your email address, your name if given, and the content of your message, in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR, my legitimate interest in answering enquiries. I delete your data when it is no longer needed for this purpose, unless statutory retention obligations apply (for example for business correspondence).

Emails to my address on this domain are forwarded by Cloudflare Email Routing to my Gmail inbox, provided by Google. If you contact me on LinkedIn, the privacy policy of LinkedIn applies.

Embedded YouTube videos

The experience page contains YouTube videos. They are not loaded when you open the page: only a preview image stored on this website is shown. A video is loaded only after you click on it, using YouTube’s privacy-enhanced mode (youtube-nocookie.com). From that moment on, data such as your IP address is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and possibly to Google LLC in the USA. YouTube may also store information on your device.

The legal basis is your consent by clicking a video (Art. 6 (1) (a) GDPR). More information: Google privacy policy.

Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw a consent at any time with effect for the future. To exercise your rights, an email to the address above is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority of your place of residence or of my place of business.

Last updated: 9 November 2026