Privacy

Last updated: 30 September 2026

1. Controller

Matthias Höfelmeyer
Am Führsebogen 9
31582 Nienburg
Germany
info@matthias-hoefelmeyer.de
+49 173 3717383

2. Hosting and server logs

This website is hosted by lima-city, a service of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany. The hosting provider processes technical request data required to deliver and protect the website. This can include the IP address, date and time of access, requested domain and URL, HTTP information, response status, data volume, browser and device information, request identifiers and security-related information.

The purpose is to deliver the website reliably, detect and prevent misuse or attacks, and investigate technical faults. The legal basis is Article 6(1)(f) GDPR. The legitimate interests are the secure, stable and efficient operation of this website. According to lima-city, web access log data are retained for seven days.

lima-city acts as a processor for the hosting service and provides a data processing agreement under Article 28 GDPR for this purpose.

3. Cookies and similar technologies

The website’s own code does not use analytics, advertising, profiling or marketing cookies. It does not use third-party embeds, and its fonts and images are served locally.

For security and bot protection, lima-city may set a technically necessary cookie such as _lcp, _lcp2 or _lcp3. According to lima-city, these cookies contain no personal identifier and are not used for advertising, audience measurement or cross-site tracking. They are used only to provide and protect the website. The storage is based on § 25(2) no. 2 TDDDG; related personal-data processing is based on Article 6(1)(f) GDPR.

4. Website enquiries

If you submit the enquiry form, your name, email address, selected answers and any optional company or message are transmitted to this website’s server and forwarded to my mailbox at lima-city. Required information is needed to respond and understand the enquiry. Optional information can be omitted. The form does not subscribe you to marketing or create a booking.

Processing necessary for a possible engagement with you is based on Article 6(1)(b) GDPR. For enquiries on behalf of an organisation or other correspondence, the basis is Article 6(1)(f) GDPR; the legitimate interest is responding to professional enquiries. Message retention and email processing are described below.

To prevent automated abuse, the form uses a hidden spam field, a short-lived request token and request limits based on a hashed network address. Temporary anti-abuse records contain no message text and expire within two hours; expired records are removed on subsequent form access. The legal basis is Article 6(1)(f) GDPR, reflecting the legitimate interest in protecting the website and mailbox. The form itself does not set cookies or store submissions in a website database.

The protected Decision Deck guides use browser authentication without a website session cookie. Access credentials are checked on the server. Please use HTTPS and do not share the credentials.

5. Email correspondence

If you contact me by email, I process the information you provide, your email address and the technical delivery information required to receive and answer the message. If your enquiry concerns a possible or existing engagement, the legal basis is Article 6(1)(b) GDPR. For other correspondence, the legal basis is Article 6(1)(f) GDPR; the legitimate interest is responding to your enquiry and maintaining professional communication.

Messages are retained for as long as required to handle the enquiry and any resulting relationship. They may be retained longer where statutory retention duties apply or where this is necessary to establish, exercise or defend legal claims. lima-city provides the email infrastructure and may process routing, security and content data required to deliver, store and protect email against spam, malware and misuse.

Please do not include confidential customer or partner records in an initial message.

6. LinkedIn links

The LinkedIn icon and linked recommendation names are simple external links. No LinkedIn content or tracking technology is embedded in this website. Data are transferred to LinkedIn only when you choose to follow a link. From that point, LinkedIn’s privacy information and settings apply.

7. Recipients and international transfers

Technical data are received by lima-city as hosting and email service provider. I do not sell personal data and do not disclose them for advertising. This website does not itself initiate a transfer of visitor data to a country outside the European Economic Area. If you follow an external link, the operator of the linked service is responsible for its own processing.

8. Your rights

Subject to the legal requirements, you have the right to request access to your personal data, rectification, erasure, restriction of processing and data portability. You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. You also have the right to lodge a complaint with a data protection supervisory authority.

The competent supervisory authority is the State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany. You can also use the authority’s online complaint form .

9. Changes to this notice

This privacy notice will be updated if the website, the services used or the legal requirements change.