1. Controller

The controller responsible for data processing on this website is:

Patrick Waldschmitt
Moltkestr. 129
76185 Karlsruhe
Germany

2. Data Collection on This Website

Our web server automatically collects and stores information in server log files that your browser transmits to us. This includes:

- Operating system

This data is not merged with other data sources. The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website. Server log files are stored for a maximum of 30 days and then automatically deleted.

3. Legal Bases

We process your personal data on the following legal bases pursuant to Art. 6(1) GDPR:

- Consent (lit. a): Where you have given us explicit consent for specific processing purposes.

- Contract (lit. b): Where processing is necessary for the performance of a contract with you or for pre-contractual measures.

- Legitimate interest (lit. f): Where processing is necessary for the purposes of our legitimate interests, except where such interests are overridden by your interests or fundamental rights.

4. Hosting

This website is hosted on servers in Germany. The hosting provider processes personal data on our behalf. This is based on Art. 6(1)(f) GDPR and our legitimate interest in a reliable and secure presentation of our website.

5. Contact Form & Appointment Booking

When you use our contact form or appointment booking system, the data you provide (name, email address, message content, preferred appointment time) is transmitted to us via email and stored for the purpose of processing your inquiry. This data is processed based on Art. 6(1)(b) GDPR (pre-contractual measures). We retain this data until your inquiry has been conclusively processed, or you request deletion, whichever comes first.

6. Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile, a security service by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), to protect our website from automated abuse and bot traffic. When you interact with Turnstile-protected elements, the following data may be processed:

- Browser type and version

This processing is based on Art. 6(1)(f) GDPR (legitimate interest in website security). Cloudflare may transfer data to the USA. Cloudflare participates in the EU-US Data Privacy Framework. For more information, see the Cloudflare privacy policy at cloudflare.com/privacypolicy.

7. Web Analytics (Google Analytics)

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that are only set if you consent via our cookie banner. The following data may be processed:

- Browser type and operating system

This processing is based on Art. 6(1)(a) GDPR (consent). Data is only collected if you accept analytics cookies. You can withdraw consent at any time via the cookie settings. Data retention is set to 14 months. Google may transfer data to the USA; Google participates in the EU-US Data Privacy Framework. For more information, see the Google Privacy Policy.

8. Data Processing Agreement (DPA)

For business customers who require a formal Data Processing Agreement, we provide a standard agreement that outlines our data processing practices. (DPA PDF link omitted — download link will be added when the DPA asset is hosted under YAAF.)

9. Contact for Data Protection Inquiries

For questions about data protection, you can reach us at:

Email: info@patrickwaldschmitt.de
Phone: +49 170 2166783