Privacy Policy

As of: July 23, 2026

1. Controller & Contact

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Daniel Scheffler
Ludwig-Erhard-Strasse 10
34131 Kassel
Germany
Email: info@sflr.net

2. Hosting

This website is hosted by Render Services, Inc., San Francisco, USA. When you visit the site, Render automatically collects standard server log data including IP address, browser type, and request details. Legal basis: Art. 6(1)(f) GDPR. Data may be transferred to the US under Standard Contractual Clauses.

Render delivers the site through the content delivery network of Cloudflare, Inc., which acts as Render's subprocessor and processes your IP address in order to deliver the page. All page content and media files (images, graphics) are served from our own domain; they are retrieved from our content management system when the site is built, so your browser does not connect to any third-party content or media server when you visit the site.

Render's Privacy Policy: https://render.com/privacy

3. Contact Form

If you send us a message via the contact form, the information you provide is used solely to process and respond to your inquiry. Legal basis: Art. 6(1)(b) GDPR.

To deliver your message to us, we use the transactional email service of Sendinblue SAS (Brevo), 7 rue de Madrid, 75008 Paris, France. Brevo processes the data exclusively to transmit the message; processing takes place within the EU. A Data Processing Agreement is in place. Brevo's Privacy Policy

We will delete the data once your inquiry has been fully resolved, unless statutory retention periods apply.

4. Analytics – Google Analytics (GA4)

We use Google Analytics 4 (GA4) by Google Ireland Limited, Dublin, Ireland, to analyze website usage — but only if you explicitly consent to the "Analytics" category in our cookie banner. Without consent, no tracking is loaded. Legal bases: Art. 6(1)(a) GDPR; Section 25(1) TDDDG.

We run GA4 with advertising and personalization signals disabled. Data may be transferred to Google LLC in the USA under Standard Contractual Clauses or the EU-US Data Privacy Framework adequacy decision. Event and user data are retained for 14 months and deleted automatically thereafter.

You can withdraw consent at any time via "Cookie Settings" in the footer.

Google Privacy Policy: https://policies.google.com/privacy

5. YouTube Videos

We embed videos from YouTube, a service of Google Ireland Limited, Dublin, Ireland. A video is only loaded if you consent to the "Marketing" category — either in the cookie banner or by clicking "load video" on the placeholder shown in place of the player. Legal bases: Art. 6(1)(a) GDPR; Section 25(1) TDDDG.

Until you consent, no connection to Google is established: the player is not loaded, no cookies are set, and your IP address is not transmitted. Once you consent, we load the video from the privacy-enhanced domain youtube-nocookie.com. Google then receives your IP address and may store information on your device in order to deliver and measure the video. Data may be transferred to Google LLC in the USA under Standard Contractual Clauses or the EU-US Data Privacy Framework adequacy decision.

You can withdraw consent at any time via "Cookie Settings" in the footer; the player is then removed again.

Google Privacy Policy: https://policies.google.com/privacy

6. Cookies & Local Storage

We use strictly necessary cookies and local storage to operate the site and to remember your consent decision. These are used without consent because the site cannot function without them; your consent record is stored for 12 months.

With your permission we additionally set: Google Analytics cookies if you accept "Analytics" (see section 4), and YouTube cookies if you accept "Marketing" and load a video (see section 5). We do not set cookies for advertising purposes.

You can review, change, or withdraw your choices at any time via "Cookie Settings" in the footer.

7. Your Rights

As a data subject under the GDPR, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may also withdraw any consent at any time without affecting prior processing.

To exercise these rights, contact: info@sflr.net

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The authority competent for our location is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Germany
Website: https://www.datenschutz.hessen.de

9. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in legal requirements or our services. The current version is always available at https://sflr.net/privacy.