The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the Imprint of this website.
How do we collect your data?
Some of your data is collected when you provide it to us — for example, data you enter in our contact form. Other data is collected automatically by our hosting provider's systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system, or time of page access).
What do we use your data for?
Some of the data is collected to ensure error-free provision of the website. Any further data is processed solely to handle your contact-form inquiry. No analysis of your user behaviour takes place.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data. For this purpose and for further questions on the subject of data protection, you can contact us at any time at the address given in the Imprint. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
This static website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, via its content delivery network (Cloudflare Pages). When you access the pages, personal data is generated automatically — in particular your IP address, your browser identifier (user agent), and timestamps — which Cloudflare processes to deliver the content securely and reliably. The server-side function that receives your contact inquiry runs on the same platform (see Section 4).
The legal basis is our legitimate interest in the secure, fast, and efficient provision of our online offering (Art. 6 para. 1 lit. f GDPR). Cloudflare is a US company; data transfers to the US are safeguarded by Standard Contractual Clauses (SCCs, Art. 46 GDPR) under Cloudflare's Data Processing Addendum.
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.
The party responsible for data processing on this website is:
Nils Boeffel
Management Consulting
Böhmerwaldstr. 9
85570 Markt Schwaben
Germany
Phone: +49 8121 250 6418
Email: info@boeffel.net
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place after these reasons cease to apply.
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal message by email to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of data processing, and, if applicable, a right to correction or deletion of this data at any time. For this purpose and for further questions on the subject of personal data, you can contact us at any time at the address given in the Imprint.
You have the right to request the restriction of the processing of your personal data. For this purpose, you can contact us at any time at the address given in the Imprint.
We hereby object to the use of contact data published within the scope of the imprint obligation for the purpose of sending unsolicited advertising and information materials. The operators of this website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam emails.
When you access the website, our hosting provider (Cloudflare, see Section 2) automatically collects and stores information that your browser transmits. This is primarily:
We do not merge this data with other data sources. The collection is based on Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in the technically error-free and secure delivery of their website.
When you send us a message via the contact form, we process the data you enter: name, email address, and your message, plus optionally a phone number and subject. We use this data solely to handle your inquiry and do not pass it on without your consent. Your IP address is not stored.
The legal basis is your consent (Art. 6 para. 1 lit. a GDPR), which you give by submitting the form via the consent checkbox. Where your inquiry relates to initiating or performing a contract, processing is additionally based on Art. 6 para. 1 lit. b GDPR. You can revoke your consent at any time with effect for the future.
The technical delivery of the email generated by the form is handled by the Brevo service; the message is delivered to a @boeffel.net mailbox hosted at INWX (see Section 5). To protect against automated spam, we use a form field that is invisible to you and evaluated server-side (a "honeypot"). No data is transmitted to third parties and no user behaviour is analysed.
The data resulting from your contact inquiry remains with us until you request deletion, revoke your consent, or the purpose for storage no longer applies (e.g. after your request has been processed). Mandatory statutory retention periods remain unaffected.
We use the following third-party service providers (data processors within the meaning of Art. 28 GDPR) to operate this website and handle your inquiries:
The website is hosted and served by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (Cloudflare Pages). Cloudflare receives IP addresses, browser information, and timestamps when the pages are accessed, and operates the server-side function that receives contact inquiries. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in reliable, secure operation). Data transfers to the US are safeguarded by Standard Contractual Clauses (SCCs) under Cloudflare's Data Processing Addendum.
To send the email generated by the contact form, we use Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). The submitted form data is processed by Brevo for this purpose. Brevo stores data on servers within the EU. A data processing agreement is in place as part of Brevo's terms of service. For more information, see Brevo's Terms of Use.
Mailboxes under the @boeffel.net domain — including info@boeffel.net, the contact address listed in the Imprint — are hosted by INWX (INWX GmbH & Co. KG, Zweigniederlassung Berlin, Koppenstr. 42, 10243 Berlin, Germany). Your message sent via the contact form is received and stored in such a mailbox. The legal basis is Art. 6 para. 1 lit. f GDPR. Processing takes place within the EU (Germany); a data processing agreement is in place. For more information, see INWX's Privacy Policy.
Links to our profiles on LinkedIn and Xing are included on our website. These links are designed as simple hyperlinks and do not load any content or tracking scripts from the respective platforms as long as you do not click on them. Only when you click on such a link and visit the platform do their privacy policies apply. The same applies to embedded video thumbnails, which are stored locally and only forward you to YouTube (Google) after a click.
This website does not set any cookies on load and therefore needs no cookie banner. We do not use any analytics or tracking services — no Google Analytics, no tag manager, no tracking pixels, no heatmaps, and no session recording. All fonts are self-hosted; no Google Fonts are loaded from external servers. Apart from delivery by Cloudflare, no page loads resources from third-party servers.
Last updated: July 2026