PRIVACY POLICY
Last updated: 31 July 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Michael R. Loefler
Schachblumenweg 6
81377 Munich
Germany
Telephone: +49 162 99 22 636
Email: Michael.Loefler@gmail.com
2. General Information
I take the protection of your personal data seriously. Personal data is any information relating to an identified or identifiable natural person.
This Privacy Policy explains what personal data may be collected when you visit this website, why it is processed, how long it may be retained, and what rights you have under applicable data protection law, including the European General Data Protection Regulation.
3. Website Hosting and Technical Data
This website is hosted by Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, Ireland.
When you access this website, technical information may be processed in order to display the website securely and correctly. This may include:
• your IP address;
• browser type and browser version;
• device and operating-system information;
• date and time of access;
• the page or file requested;
• referrer information; and
• technical security and error information.
This processing is necessary for the secure, stable and efficient operation of the website. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is the secure and reliable provision of this website.
4. Squarespace Analytics and Activity Log
With your consent, this website uses Squarespace Analytics to understand how visitors find and use the website.
The information processed may include:
• information about your browser, network and device;
• your IP address and approximate geographic location;
• pages visited before accessing this website;
• pages and internal links visited on this website;
• clicks, scrolling and searches;
• timestamps;
• operating-system information; and
• the source or referring website through which you reached this website.
Squarespace may make recent visitor activity available to me through its Activity Log. This may include the visitor’s IP address, approximate location, browser, operating system, referrer, pages visited and time of access. The Activity Log generally displays visits from the preceding seven days.
Analytics and performance cookies are used only after you have provided consent through the cookie banner. The legal basis is Article 6(1)(a) GDPR.
You may withdraw or change your consent at any time by selecting “Cookie settings” on this website. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Cookies
This website uses cookies and similar technologies.
Necessary cookies are used to operate and secure the website and to remember essential settings. They cannot be disabled through the consent banner where they are technically required for the website to function.
Analytics and performance cookies are non-essential. They are activated only after you have given consent. Depending on the cookie, Squarespace Analytics cookies may remain on your device for up to two years.
The cookie banner allows you to:
• accept all cookies;
• reject non-essential cookies;
• manage individual cookie preferences; and
• change your previous selection at any time.
You can also delete cookies through your browser settings. Disabling necessary cookies through your browser may affect the operation of the website.
The storage of or access to information on your device through non-essential cookies is based on your consent pursuant to Section 25(1) TDDDG. Strictly necessary cookies are used pursuant to Section 25(2) TDDDG where they are required to provide a service expressly requested by you.
6. Contact by Email or Contact Function
When you contact me by email or through a contact function on this website, I process the information you provide. This may include:
• your name;
• your email address;
• your telephone number, if provided;
• your organisation or professional role; and
• the contents of your enquiry.
The information is used solely to respond to your enquiry and to communicate with you.
Where your enquiry relates to a potential engagement or contract, the legal basis is Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR and my legitimate interest in responding to professional and general enquiries.
Your information will be retained for as long as necessary to respond to and conclude the enquiry. It may be retained for longer where legal retention obligations apply or where it is necessary to establish, exercise or defend legal claims.
7. Recipients and Service Providers
Personal data may be processed by Squarespace and its technical service providers to the extent necessary to host, secure, maintain and analyse this website.
Personal data will otherwise be disclosed only where:
• this is necessary to respond to your enquiry;
• you have consented to the disclosure;
• disclosure is required by law;
• it is necessary for the establishment, exercise or defence of legal claims; or
• a professional service provider is bound by confidentiality and requires the information for a legitimate purpose.
I do not sell personal data and do not use personal data collected through this website for behavioural advertising.
8. International Data Transfers
Squarespace and some of its service providers may process or store personal data in the United States or other countries outside the European Economic Area.
Squarespace states that international transfers are protected, where applicable, through recognised safeguards including the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
Further information about Squarespace’s processing and international-transfer safeguards is available in the Squarespace Privacy Policy and Data Processing Addendum.
9. Retention
Personal data is retained only for as long as necessary for the respective purpose or for as long as required by law.
In particular:
• recent visitor information in the Squarespace Activity Log is generally available for seven days;
• analytics cookies may remain on a device for up to two years, depending on the cookie;
• contact information is retained until the enquiry has been concluded, unless continued retention is required by law or justified by legal claims; and
• consent records may be retained for as long as necessary to demonstrate compliance with legal obligations.
10. Your Rights
Subject to the applicable legal requirements, you have the right to:
• obtain information about personal data processed concerning you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• receive data you provided in a structured, commonly used and machine-readable format where the right to data portability applies;
• object to processing based on legitimate interests;
• withdraw consent at any time with effect for the future; and
• lodge a complaint with a data-protection supervisory authority.
Requests concerning your personal data may be sent to:
11. Supervisory Authority
The competent supervisory authority for private-sector data controllers in Bavaria is:
Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht – BayLDA
Promenade 18
91522 Ansbach
Germany
12. Automated Decision-Making
No automated decision-making or profiling producing legal or similarly significant effects is carried out through this website.
13. External Links
This website may contain links to external websites. I am not responsible for the content or privacy practices of third-party websites. The privacy policies of the respective external providers apply when you visit those websites.
14. Changes to this Privacy Policy
This Privacy Policy may be updated if the website, the services used or applicable legal requirements change. The version published on this website at the time of your visit applies.