top of page

Privacy Policy

I am delighted that you are interested in my website. Protecting your personal data is very important to me. Below, I would like to inform you about which data is collected when you visit this website and how it is processed – naturally in accordance with the General Data Protection Regulation (GDPR).

1. Responsible Party

Susanne Rohs
Schmalsteder Weg 10
24582 Brügge
Germany

info@susanne-rohs.de

2. Hosting via Webflow

This website is hosted by Webflow, a U.S.-based website builder and hosting provider.

Provider:

Webflow
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA

When visiting my website, Webflow collects certain technical data (e.g., IP address, browser information) in so-called server log files. In addition, Webflow uses necessary cookies and recognition technologies to ensure the basic functionality and security of the website. No tracking functionality is used.

The processing is based on my legitimate interest in the reliable and secure provision of my website (Art. 6 para. 1 lit. f GDPR). Where explicit consent has been obtained, processing is additionally based on Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TTDSG. You may withdraw your consent at any time.

I have concluded a Data Processing Agreement (DPA) with Webflow. Webflow processes personal data only according to my instructions and in compliance with GDPR requirements.

Content Delivery Network (CDN) & International Data Transfers

To ensure fast and stable website delivery, Webflow uses a global Content Delivery Network (CDN). Data may be transmitted via the infrastructures of Fastly, Inc. and Amazon Web Services, Inc. (AWS), both based in the United States.

The transfer of data is based on Standard Contractual Clauses approved by the European Commission and the EU-U.S. Data Privacy Framework (DPF). Webflow, Fastly, and AWS are certified under this framework and committed to complying with European data protection standards.

Further information:

Webflow Privacy Policy
Fastly CDN
AWS CloudFront
EU-U.S. Data Privacy Framework

Please note: Although these service providers take measures to protect your data, an equivalent level of data protection as within the EU cannot be fully guaranteed when data is transferred to the United States. In particular, there is a theoretical possibility that U.S. authorities may gain access to personal data.

3. Contact Form

If you send me a message via the contact form, the information entered (name, email address, and message) will be transmitted to me via email and used solely to process your request.

Processing is based on Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or, where no contractual relationship exists, on my legitimate interest in responding to your inquiry (Art. 6 para. 1 lit. f GDPR).

4. Analytics Tool: Fathom Analytics

This website uses Fathom Analytics, a privacy-friendly analytics service based in Canada.

I use Fathom in EU mode without cookies. No personal data is stored, no cookies are set, and no user profiles are created.

Only anonymous usage data (e.g., page views, referrer, device type) is collected to improve my website technically and in terms of content.

The use of Fathom Analytics is based on my legitimate interest in privacy-friendly website analytics (Art. 6 para. 1 lit. f GDPR).

Further information:

Fathom Analytics Data Policy

5. Server Log Files

When visiting this website, Webflow automatically stores so-called server log files. These may include, for example:

  • browser type and version

  • operating system used

  • referrer URL

  • IP address (shortened or anonymized)

  • time of access

This data cannot be assigned to specific individuals and is used solely to ensure the technical security and optimization of the website. No merging of this data with other data sources takes place.

6. SSL / TLS Encryption

This website uses SSL/TLS encryption (recognizable by “https://” and the lock symbol in your browser’s address bar) to ensure that your transmitted data is protected as securely as possible.

7. Your Rights

You have the right at any time to:

  • request information about the personal data stored about you

  • request correction of inaccurate data

  • request deletion of your data (unless legal retention obligations apply)

  • request restriction of processing

  • object to the processing of your data

  • request data portability

  • withdraw consent previously given with effect for the future

  • lodge a complaint with a data protection supervisory authority

If you have any questions or wish to exercise your rights, please contact me using the email address provided in the legal notice (Imprint / Impressum).

8. Data Processing for Registration, Contracts & Invoicing

If you book a service via a registration form, I collect the personal data necessary to process your request, fulfill the contract, and issue invoices. This may include:

  • first and last name

  • email address

  • postal address (street, postal code, city)

  • telephone number (if applicable)

Legal Basis for Processing

Your data is processed on the basis of:

  • Art. 6 para. 1 lit. b GDPR (preparation and performance of a contract)

  • Art. 6 para. 1 lit. c GDPR (compliance with legal obligations, particularly tax and commercial retention obligations)

Storage Period

  • Data from inquiries that do not lead to a contractual relationship will generally be deleted after approximately 6 months, unless legitimate reasons require longer storage.

  • Contract and invoice-related data will be stored for 10 years in accordance with legal requirements.

  • Data entered via the contact form will remain stored until you request deletion, withdraw your consent, or the purpose for storing the data no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions – particularly retention periods – remain unaffected.

9. Online Meetings via Zoom

For online meetings, I use the video conferencing tool Zoom.

Provider:

Zoom Video Communications, Inc.
55 Almaden Boulevard, 6th Floor
San Jose, CA 95113
USA

A Data Processing Agreement (DPA) has been concluded with Zoom.

Scope and Type of Data Processing

When using Zoom, the following personal data may be processed:

  • first and last name

  • email address

  • IP address

  • meeting metadata (date, time, duration)

  • audio, video, and chat data

You can deactivate your camera and microphone at any time yourself.

Purpose of Processing

Your data is processed exclusively for the purpose of conducting the respective online appointment.

Legal Basis

Processing is based on:

  • Art. 6 para. 1 lit. b GDPR (performance of a contract)

  • Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication)

  • Art. 6 para. 1 lit. a GDPR (consent), if a recording is made

Transfer to Third Countries

Zoom is a provider based in the United States. Therefore, the transfer of personal data to a third country cannot be excluded.

Such transfers are carried out on the basis of appropriate safeguards pursuant to Art. 46 GDPR, such as Standard Contractual Clauses (SCCs).

Storage Period

Personal data is generally stored only for as long as necessary to conduct the meeting.

Any recordings – if created – will only be stored with your prior consent and deleted after the purpose of processing has ended.

10. Changes to This Privacy Policy

I reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes in my services.

The latest version can always be found here on my website.

 

​

 

bottom of page