Privacy notice
As at: September 2026
Binding version
This is a translation for convenience. The German version at https://anelia-wolf.com/datenschutz/ is the legally binding one.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
Anelia Wolf
[Street and house number]
[Postcode] [Town]
Phone: +49 174 4555115
Email: info@anelia-wolf.com
No data protection officer has been appointed, because the statutory conditions for a duty to appoint one (Art. 37 GDPR, Section 38 BDSG) are not met.
2. Overview: what this website does – and what it does not
This website serves solely to provide information about my services. It
- – sets no cookies and stores no information on your device (no local storage, no session storage),
- – uses no analytics, tracking or marketing services (no Google Analytics, no pixels, no fingerprinting),
- – embeds no third-party content (no external fonts, no videos, no maps, no social media plugins),
- – sends the contact form via the hosting provider's server directly to my email inbox (section 5); no third-party form service is involved,
- – contains no newsletter.
All fonts, scripts and images are delivered from the server of the hosting provider named below. A cookie banner is therefore not required.
Personal data is processed in three cases only: when the pages are technically retrieved (server log files, section 3), when you contact me by email or telephone (section 4) and when you submit the contact form (section 5).
3. Hosting and server log files
This website is hosted by:
[hosting provider: company, address, country] (the “host”).
When you call up this website, your browser automatically transmits data to the host's server, which is stored in what are known as server log files:
- – IP address of the requesting device,
- – date and time of access,
- – page or file requested and volume of data transferred,
- – HTTP status code,
- – referrer URL (the page visited before, if your browser transmits it),
- – browser type and version and operating system.
This data is not merged with other data sources and is not analysed in order to identify individuals.
Purpose: technical operation, stability and security of the website (e.g. defence against attacks, error analysis).
Legal basis: Art. 6 (1) (f) GDPR – legitimate interest in the secure and functional operation of the website.
Storage period: the log files are deleted after [number of days – ask the host; 7 to 14 days is usual] days, unless a security-relevant incident requires longer retention.
Recipients: the host processes this data on my behalf. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
4. Contact by email or telephone
If you contact me by email (info@anelia-wolf.com) or by telephone (+49 174 4555115), I process the data you provide (e.g. name, email address, telephone number, company, the content of your enquiry) in order to answer your enquiry and – if you wish – to prepare a quote or arrange an intro call.
Legal basis: Art. 6 (1) (b) GDPR where your enquiry is aimed at entering into or performing a contract (coaching, assessment, training, keynote); otherwise Art. 6 (1) (f) GDPR – legitimate interest in answering enquiries.
Storage period: I delete your enquiry once it has been dealt with conclusively and no further communication is to be expected, and at the latest after [e.g. 12] months. Where messages are subject to statutory retention obligations (business letters: 6 years; accounting records and invoices: 8 years under Section 147 AO and Section 257 HGB), they are deleted only after those periods have expired.
Recipients: for email and calendar I use [email/office provider: company, address, country]. A data processing agreement pursuant to Art. 28 GDPR is in place with that provider.
Your data is not passed on to any other third parties.
5. Contact form
When you submit the contact form on the home page, the data you enter (name, email address, optionally your company and the content of your message) is transmitted in encrypted form to the hosting provider's server (section 3) and delivered from there as an email to my inbox. The email also records the time of sending and the page from which the form was submitted. No third-party form service is involved, and no cookies are set.
Purpose: receiving and answering your enquiry.
Legal basis: Art. 6 (1) (b) GDPR where your enquiry is aimed at entering into or performing a contract; otherwise Art. 6 (1) (f) GDPR – legitimate interest in answering enquiries.
Storage period: the hosting provider's server does not store the form data permanently; it delivers it immediately as an email. The periods set out in section 4 then apply to that email.
Recipients: the hosting provider (section 3) and my email provider (section 4), each as a processor pursuant to Art. 28 GDPR. Your data is not passed on to any other third parties.
To guard against automated messages the form contains a field that is invisible to you and is filled in only by programmes; in addition the server limits the number of submissions per IP address within a short period. Your IP address is processed in memory only for that purpose, is not stored and is not included in the email.
Providing your data is voluntary. Without your name, email address and message I cannot answer your enquiry; you are welcome to reach me directly by email or telephone instead (section 4).
6. External links
This website contains links to external websites (e.g. LinkedIn, herCAREER). Simply clicking a link transmits no data from this website to the operator of the target page; from the moment you open the target page, only that provider's privacy policy applies. Social media plugins, share buttons and tracking pixels belonging to those providers are not embedded on this website.
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Privacy policy: https://www.linkedin.com/legal/privacy-policy
7. Fonts
The fonts used on this website (Playfair Display, Source Sans 3, DM Mono) are stored locally on the web server and are delivered from there only. No connection is made to servers operated by Google (Google Fonts) or any other font provider; your IP address is therefore not transmitted to any third party.
8. Encryption
This website uses TLS/SSL encryption (recognisable by “https://” and the padlock symbol in your browser's address bar). Data transferred between your browser and the server cannot therefore be read by third parties.
9. Your rights as a data subject
You have the following rights in respect of the personal data concerning you:
- – right of access (Art. 15 GDPR),
- – right to rectification (Art. 16 GDPR),
- – right to erasure (Art. 17 GDPR),
- – right to restriction of processing (Art. 18 GDPR),
- – right to data portability (Art. 20 GDPR),
- – right to withdraw consent with effect for the future (Art. 7 (3) GDPR).
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (f) GDPR. I will then no longer process that personal data unless I can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
An informal email to info@anelia-wolf.com is enough to exercise your rights.
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for me is:
[supervisory authority of the federal state in which Anelia Wolf is based – name, address, website]
An overview of all German state authorities: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
10. Obligation to provide data, automated decision-making
You are under no statutory or contractual obligation to provide your personal data. Without your contact details, however, I cannot answer an enquiry. Automated decision-making, including profiling (Art. 22 GDPR), does not take place.
11. Changes to this privacy notice
I update this privacy notice whenever the website or the legal situation changes – for example if a newsletter, online appointment booking or embedded video is introduced. The version published on this page at the time applies.