Datenschutzerklärung

Privacy Policy

(also applies to my social media profiles and online presences)

Protecting your personal data is important to me.

I process personal data only in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications and Digital Services Data Protection Act (TDDDG/TTDSG), where applicable.

This privacy policy applies to this website as well as to my social media profiles and other online presences (such as Instagram, Facebook, Telegram, WhatsApp, newsletters, and email communication), insofar as data is processed by me or I have influence over the processing.

For data processing carried out by the respective platform operators, their own privacy policies also apply.

1.⁠ ⁠Privacy at a glance

General information

The following information provides a simple overview of what happens to personal data when you visit this website.

Personal data is any data that can be used to personally identify you.

More detailed information can be found in the sections below of this privacy policy.

Data collection on this website

Who is responsible for data collection?

Data processing is carried out by me as the website operator.

My contact details can be found in the section “Responsible party”.

How is data collected?

• Through information you actively provide (e.g. contact form, email, appointment booking)

• Automatically when you visit the website (especially technical data such as browser type, operating system, time of access, IP address) – in some cases only after consent via the cookie banner, if such services are activated

What is the data used for?

• To ensure the proper functioning, security, and optimization of the website

• To process inquiries and communicate with you

• If applicable, to analyze user behavior (only if relevant tools are used and consent has been given)

What rights do you have?

You have the right to access, correction, deletion, restriction of processing, data portability, objection, and withdrawal of consent.

You also have the right to lodge a complaint with a data protection authority.

Image credits / copyright

The photos used on this website are protected by copyright and were mostly taken by Julia Veselinovic (photographer).

Photos used in the blog are taken by me, Flo Eckhoff.

Any use or sharing of content without prior written permission from the respective creator is not permitted.

2.⁠ ⁠Responsible party

The responsible party for data processing on this website is:

Flo Eckhoff

21614 Buxtehude

Germany

Email: info@floeckhoff.com

Phone: +49 160 98619421

The “responsible party” is the natural or legal person who decides alone or jointly with others on the purposes and means of processing personal data.

3.⁠ ⁠Hosting / website platform

Wix

This website is operated using Wix.

Provider:

Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“Wix”).

Wix provides website hosting, technical infrastructure, security features, and website functionality.

When visiting the website, Wix processes technical data necessary to ensure functionality, stability, and security. Wix may set cookies required for display and security.

Data may be stored on Wix servers worldwide, including in the USA. According to Wix, appropriate safeguards are used for transfers to third countries (e.g. standard contractual clauses under Art. 46 GDPR), and Wix may participate in the EU–US Data Privacy Framework where applicable.

Legal bases:

• Art. 6 (1) f GDPR (legitimate interest in secure, stable, and efficient website operation)

• Art. 6 (1) a GDPR in conjunction with § 25 (1) TTDSG/TDDDG (consent), if cookies or tracking beyond necessary cookies are used

Further information can be found in Wix’s privacy policy.

4.⁠ ⁠General information and mandatory details

Storage duration

Unless a specific storage period is stated, personal data is stored until the purpose for processing no longer applies.

If you request deletion or withdraw consent, the data will be deleted unless there are legally permitted reasons to retain it (e.g. statutory retention obligations).

Legal bases for processing

Depending on the situation, processing is based on:

• Art. 6 (1) a GDPR (consent)

• Art. 6 (1) b GDPR (contract or pre-contractual measures)

• Art. 6 (1) c GDPR (legal obligation)

• Art. 6 (1) f GDPR (legitimate interest)

• Art. 9 (2) a GDPR (explicit consent), if special categories of data are processed in exceptional cases (e.g. health data, only if you voluntarily provide it)

Recipients of personal data

Personal data is only shared when necessary, for example:

• for contract processing (payment providers, booking tools, email services)

• due to legal obligations

• based on your consent

• within the scope of legitimate interests (IT security, hosting)

Where processors are used, data is shared only on the basis of a valid data processing agreement (Art. 28 GDPR).

In cases of joint responsibility, an agreement under Art. 26 GDPR applies.

Data security / SSL

This website uses SSL/TLS encryption (“https”) for security reasons.

However, complete security of data transmission on the internet cannot be guaranteed.

5.⁠ ⁠Data collection on this website

5.1 Cookies & consent management

This website uses cookies and similar technologies. Cookies are small data files stored on your device and do not cause damage.

• Session cookies are deleted after your visit ends

• Persistent cookies remain stored until you delete them or your browser removes them automatically

There are necessary cookies (for functionality and security) and optional cookies (e.g. statistics or marketing).

Optional cookies are only set after you have given consent via the cookie banner.

Legal bases:

• Necessary cookies: Art. 6 (1) f GDPR in conjunction with § 25 (2) TTDSG/TDDDG

• Optional cookies/tracking: Art. 6 (1) a GDPR in conjunction with § 25 (1) TTDSG/TDDDG

You can delete or block cookies via your browser settings.

If cookies are disabled, website functionality may be limited.

5.2 Server log files

The hosting provider automatically collects and stores information in server log files that your browser transmits:

• browser type and version

• operating system

• referrer URL

• host name of the accessing device

• time of the server request

• IP address

This data is not merged with other data sources.

Legal basis: Art. 6 (1) f GDPR (legitimate interest in security, stability, and error analysis).

5.3 Contact form

If you send inquiries via the contact form, your information and contact details are stored to process your request.

Legal bases:

• Art. 6 (1) b GDPR (contract initiation or fulfillment), or

• Art. 6 (1) f GDPR (legitimate interest in efficient communication), or

• Art. 6 (1) a GDPR (consent), if required

Storage duration: until the purpose no longer applies or upon deletion request; statutory retention obligations remain unaffected.

5.4 Contact by email or phone

If you contact me by email or phone, the transmitted data is stored to process your request.

Legal bases: Art. 6 (1) b or f GDPR.

Storage duration: same as for contact form inquiries.

6.⁠ ⁠Social media / online presences

6.1 General information

I maintain online presences on social networks to provide information and communicate.

When visiting these profiles, personal data is processed by the platform operators independently. I have limited influence over their data processing.

If I receive data from you via social media (e.g. messages, comments, profile name), I process it to communicate with you and respond to your inquiry.

Legal basis: Art. 6 (1) f GDPR (communication) or Art. 6 (1) b GDPR (pre-contractual measures), depending on the content.

6.2 Meta (Facebook / Instagram), if embedded or linked

If social media plugins or embeds (e.g. like buttons, Instagram feeds) are integrated on this website, a connection to Meta servers may be established when the page loads.

This only happens after consent via the cookie banner or after you actively click, depending on implementation.

Legal basis: Art. 6 (1) a GDPR in conjunction with § 25 (1) TTDSG/TDDDG.

Joint responsibility (Art. 26 GDPR):

If personal data is collected and transferred to Meta via certain tools, joint responsibility may exist for collection and transfer only. Further processing by Meta is carried out independently.

You can assert your rights regarding Meta’s processing directly with Meta.

7.⁠ ⁠Newsletter (if used)

If you subscribe to my newsletter, your email address (and any additional voluntary information) is processed for sending the newsletter.

Registration usually takes place via a double opt-in procedure.

You can unsubscribe at any time via the link in the newsletter or by contacting me.

Legal basis: Art. 6 (1) a GDPR (consent).

Storage duration: until withdrawal; a blacklist may be kept to prevent further mailings (legitimate interest, Art. 6 (1) f GDPR).

Note: If a specific newsletter provider is used (e.g. Wix Email Marketing, Mailchimp, Brevo, GetResponse), this provider should be named separately.

8.⁠ ⁠Affiliate links, discount codes & advertising

(website & social media)

I use affiliate links, personal discount codes, and occasionally other forms of advertising on my website and social media channels.

If you make a purchase via an affiliate link or use a discount code, I may receive a commission or other benefit. There are no additional costs for you.

I only recommend products and services that I personally use or recommend to the best of my knowledge and belief.

I am not responsible for the content or services of linked providers; their privacy policies apply.

Legal basis: Art. 6 (1) f GDPR (legitimate interest in financing and transparent operation of my online presences).

9.⁠ ⁠Your rights

You have the right to:

• access (Art. 15 GDPR)

• correction (Art. 16 GDPR)

• deletion (Art. 17 GDPR)

• restriction of processing (Art. 18 GDPR)

• data portability (Art. 20 GDPR)

• objection (Art. 21 GDPR)

• withdrawal of consent (Art. 7 (3) GDPR)