Privacy Policy

[TODO(Recht): Hinweis, ob die deutsche Fassung maßgeblich ist]

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Judit Wolf-Schäffer
Deutsch ohne Angst
Rittsteigerstraße 17A
94036 Passau
Germany

Email: juditschaeffer@hotmail.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. General information on data processing and legal bases

I only process personal data to the extent necessary to provide this website, to evaluate its use statistically and to answer enquiries. Personal data is any information relating to an identified or identifiable person, e.g. name, email address or IP address.

Processing is based on the following legal bases:

Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures (e.g. enquiries about my lessons)
Art. 6(1)(c) GDPR – compliance with legal obligations (e.g. retention obligations under tax law)
Art. 6(1)(f) GDPR – legitimate interests (e.g. secure and stable operation of the website, audience measurement)

Information is only stored on or read from your device where this is strictly necessary for a service you have expressly requested (Section 25(2) no. 2 TDDDG).

Your data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion.

I do not use advertising cookies or cross-site tracking. For cookieless audience measurement I use Vercel Web Analytics (see section 7). There is no automated decision-making, including profiling (Art. 22 GDPR).

Obligation to provide data: You are not legally or contractually obliged to provide me with personal data. However, without your name and email address I cannot answer your enquiry.

3. Hosting

This website is hosted by an external service provider:

Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA

When the website is accessed, Vercel processes technically necessary data (see section 4) in order to deliver the website. Delivery takes place via a worldwide server network; your request is usually answered by a server near you. The legal basis is my legitimate interest in providing the website securely, quickly and reliably (Art. 6(1)(f) GDPR).

Vercel is based in the USA. The data transfer is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), under which Vercel is certified. Vercel processes the data as a processor; the data processing agreement (Data Processing Addendum) forms part of Vercel's terms of service.

For more information, please see Vercel's privacy policy: https://vercel.com/legal/privacy-policy

4. Server log files

Each time this website is accessed, information transmitted by your browser is automatically recorded in so-called server log files:

IP address
date and time of access
page or file accessed
referrer URL (previously visited page)
browser and operating system used
amount of data transferred and status code

This data is not combined with other data sources and is not used to identify individuals. It serves exclusively to provide the website technically, detect errors and ensure security. The legal basis is Art. 6(1)(f) GDPR. Vercel only stores the log files for a short time and, depending on the plan, deletes them automatically after one day at the latest.

5. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in the address bar and the padlock symbol in your browser. When encryption is active, the data you send to me cannot be read by third parties.

6. Contact by email

If you send me an email, I process your details (email address, name and the content of your message) in order to answer your enquiry.

My mailbox is operated via Microsoft's Outlook.com (Hotmail) service. A transfer of your data to the USA cannot be ruled out. Microsoft is certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). More information: https://privacy.microsoft.com/en-gb/privacystatement

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to my teaching services, and otherwise my legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

Your data is deleted once your enquiry has been fully dealt with, unless it leads to a teaching relationship or statutory retention obligations prevent deletion.

7. Audience measurement (Vercel Web Analytics)

This website uses Vercel Web Analytics, a service of Vercel Inc. (address see section 3), to evaluate statistically how the website is used. In particular, the following is recorded: pages viewed, referrer (previously visited page), time of access, approximate geographical region, device type, operating system and browser.

Vercel Web Analytics does not set cookies and does not store any information on your device. To distinguish visits from one another, a hash value is generated from the respective request and automatically discarded after 24 hours at the latest. The recorded data is not attributed to individual persons or IP addresses and is only evaluated by me in aggregated, statistical form.

The legal basis is my legitimate interest in evaluating and improving this website statistically (Art. 6(1)(f) GDPR). You can object to this processing under Art. 21 GDPR (see section 10).

Vercel processes the data as a processor; the transfer of data to the USA is based on the European Commission's adequacy decision on the EU-US Data Privacy Framework (see section 3).

More information: https://vercel.com/docs/analytics/privacy-policy

8. Local storage in the browser

This website only stores the following information in your browser, which is necessary for it to function:

Cookie “NEXT_LOCALE”: stores the language you have chosen (German, English or Hungarian) so that the website is displayed in this language on your next visit. Storage period: 1 year. Legal basis: Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR.

You can delete this data at any time via your browser settings.

9. Fonts

The fonts used on this website are served locally by this website. No connection to third-party servers (e.g. Google) is established when the page is loaded, and no data is transferred to third parties in the process.

10. Your rights

Within the scope of the statutory provisions, you have the following rights at any time:

Access to your personal data stored by me (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data, unless retention obligations prevent this (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability – receiving your data in a common, machine-readable format (Art. 20 GDPR)
Objection (Art. 21 GDPR, see separately below)
Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out until withdrawal remains unaffected
Complaint to a supervisory authority (Art. 77 GDPR)

RIGHT TO OBJECT UNDER ART. 21 GDPR

Where I process your data on the basis of my legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process your data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

An informal message to the contact details given in section 1 above is sufficient to exercise your rights.

The competent supervisory authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
https://www.lda.bayern.de

You may also contact the supervisory authority at your place of residence.

11. Last updated and changes

This privacy policy was last updated: 30 October 2026

I adapt this privacy policy whenever the website, my services or the legal requirements change. The version published here applies.