Data protection

Privacy notice

Updated: 20 September 2026

This privacy notice explains how personal data is processed when you visit this website or contact Wolfgang Ihloff by email. The website is a static brochure site. It does not provide user accounts, contact forms, online ordering, or advertising trackers.

Controller

Wolfgang Ihloff

Website hosting and logging

The origin server for this website runs on Hetzner Cloud in Nuremberg, Germany. Requests involve processing technical data such as IP address, access time, requested URL, response status, referrer and browser information.

The legal basis is Article 6(1)(f) GDPR: the legitimate interests in delivering and maintaining access to the website, preventing attacks and resolving technical faults.

HTTP access logs and request-level error logs are disabled in the Nginx web server, so it stores no such logs for new requests. Technical messages about starting, stopping and operating the server process remain available; they are rotated according to size limits or deleted when removed containers are cleaned up. They have no fixed retention period in days. Cloudflare’s separate processing is described below.

Fonts, stylesheets, images and website scripts are included in the website and delivered under its own domain. These requests also pass through Cloudflare.

Cloudflare: delivery and protection

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, acts as a reverse proxy and content delivery network between your browser and the origin server. This covers ihloff.de, www.ihloff.de, wolfgang.ihloff.de and elgin.ihloff.de, including redirects. Cloudflare receives web requests, can cache content and processes connection and request data to deliver and protect the website.

This includes IP addresses, requested URLs, timestamps, browser and connection information, and transmitted content. The legal basis is Article 6(1)(f) GDPR, for the availability, security and troubleshooting interests described above.

Optional Network Error Logging was disabled on 20 September 2026. New responses no longer send that reporting policy. Browsers that previously stored a policy may continue reporting technical connection errors to Cloudflare until it expires. See Cloudflare’s documentation for more information.

Retention of Cloudflare logs and diagnostic data depends on the service, its configuration and legal requirements. Cloudflare’s privacy policy describes the data processed and the criteria used to determine retention.

Email enquiries

If you contact Wolfgang Ihloff by email, the data you provide will be processed to answer your enquiry, prepare a possible project, or manage an existing business relationship. This typically includes your name, email address, message content, and related metadata.

For an initial enquiry, please send only the information needed to discuss the proposed engagement. Before project work begins, we agree the contractual terms, including confidentiality and data-processing arrangements where required.

Article 6(1)(b) GDPR applies where processing is necessary to perform a contract with you personally or, at your request, take steps towards such a contract. For a company’s contact persons and other business correspondence, the basis is Article 6(1)(f) GDPR: the legitimate interest in handling enquiries and communicating with business partners.

Enquiry data is retained for as long as needed to process the matter and, where relevant, for the duration of statutory retention obligations or limitation periods.

Providing your data

Contacting me by email is voluntary. Without the contact information and details needed for your enquiry, I cannot respond or prepare the requested contractual relationship.

Cookies, analytics, and local storage

The website code contains no advertising trackers, social media plugins or third-party embeds. It sets no cookies and does not store language preferences in local storage. Language redirection only reads the browser’s preferred language. This is separate from the technical processing by Cloudflare described above.

If you choose a light or dark appearance, the website saves that choice under “ihloff-theme” in your browser’s local storage. It applies across this website’s pages and languages and is not sent to the server. Choosing “System preference” removes the saved value and follows your device’s setting again. You can also remove it by clearing this website’s data in your browser. No appearance preference is stored unless you make a choice.

Depending on the security checks used, Cloudflare may use cookies to identify automated requests or remember a completed check. These are not marketing cookies set by the website code. Cloudflare’s cookie documentation explains the purposes and lifetimes of individual cookies.

Recipients and processors

Website operation and communications use Hetzner Cloud for the origin server, Cloudflare for delivery and protection, and Google Workspace for the ihloff.de email mailbox. These providers process the personal data needed for their respective services.

International transfers

The origin server is in Germany. Processing through Cloudflare’s international network is not limited to the EU or EEA and may take place in the United States. Email communication through Google Workspace may also involve cross-border processing.

Cloudflare’s published data-processing terms provide for EU Standard Contractual Clauses for relevant restricted transfers and, where applicable, the EU–US Data Privacy Framework. The terms describe these safeguards and are available at that link. You can request information about the safeguards applicable to your data using the contact address above.

Google’s published data-processing terms and transfer information provide for the EU–US Data Privacy Framework for covered transfers to Google LLC in the United States and EU Standard Contractual Clauses for other relevant restricted transfers.

Your rights

Subject to the statutory conditions, you can request access, rectification, erasure, restriction of processing and data portability. Please use the email address above to exercise your rights. You can complain to the Agencia Española de Protección de Datos (AEPD) or another competent EU supervisory authority.

Right to object under Article 21 GDPR

You can object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. Processing will then stop unless I can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

Changes to this notice

This notice may be updated when the website, processing activities, or legal requirements change.