PRIVACY NOTICE
Last updated: 2 August 2026
CONTROLLER
The controller responsible for processing personal data on this website is:
Dr. Alexander Tiffert
Engelsgrube 77 / 17
23552 Lübeck
Germany
Email: alex@alextiffert.com
Telephone: +49 (0)451 305 00 71-80
GENERAL INFORMATION
Personal data is any information relating to an identified or identifiable natural person. I process personal data only where this is necessary to provide this website, communicate with visitors, protect the website against misuse or fulfil legal obligations.
There is no automated decision-making or profiling on this website.
HOSTING AND DELIVERY OF THE WEBSITE THROUGH SQUARESPACE
This website is created and hosted using Squarespace. The service provider is Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland.
When you visit the website, technically necessary access data may be processed. This can include your IP address, date and time of access, requested page or file, referrer URL, browser type and version, operating system, device information and information about successful or unsuccessful delivery. Processing is necessary to deliver the website, maintain stability and security, detect misuse and correct technical errors.
The legal basis is Article 6(1)(f) GDPR. My legitimate interests are the reliable, secure and efficient provision of this website. To the extent processing is strictly necessary to provide the digital service requested by you, Section 25(2)(2) TDDDG also applies.
Squarespace acts partly as a processor on my behalf. Squarespace Ireland Limited may use Squarespace, Inc. in the United States and other sub-processors. Transfers to the United States are based, where applicable, on the EU-US Data Privacy Framework and otherwise on the European Commission’s Standard Contractual Clauses. Further information is available in Squarespace’s privacy information and data processing addendum.
I have disabled Squarespace’s visitor activity log. I therefore do not receive an identifiable activity history containing visitors’ IP addresses. Technically necessary server and security data may nevertheless be processed by Squarespace for as long as needed to provide and secure the service and, where applicable, to meet legal retention obligations.
MULTILINGUAL PRESENTATION THROUGH WEGLOT
This website uses Weglot to provide English and German language versions. The provider is Weglot SAS, 7 cité Paradis, 75010 Paris, France.
When you use the website, Weglot may process technical request data such as your IP address, browser and device information, the requested URL and your selected language. Page content is transmitted to Weglot to generate and deliver the translated version. Weglot may store a technically necessary language preference so that the website continues to be displayed in the language you selected.
The legal basis is Article 6(1)(f) GDPR. My legitimate interest is to make the website accessible to an international audience. The storage of the language choice is strictly necessary to provide the language version expressly requested by you and is therefore based on Section 25(2)(2) TDDDG.
According to Weglot, data used for its services is hosted in the European Union. If individual service providers process data in the United States, Weglot states that appropriate transfer safeguards, including the EU-US Data Privacy Framework where applicable, are used. Further information is available in Weglot’s privacy policy.
COOKIES AND CONSENT SETTINGS
This website uses technically necessary cookies and similar technologies to operate securely, remember your language selection and store your privacy choices. These functions are based on Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.
Non-essential cookies and comparable technologies are restricted unless you consent. Where consent is requested, processing is based on Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may accept, reject or select individual categories in the cookie banner and change your choice at any time using Cookie Settings on the website. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
This website does not currently use Google Analytics.
CONTACT BY EMAIL OR TELEPHONE
If you contact me by email or telephone, I process the information you provide, such as your name, contact details, message and any project information, in order to respond to your enquiry.
For enquiries relating to a possible or existing contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR; my legitimate interest is to respond to your request and maintain professional communication. Where processing is required to fulfil legal obligations, Article 6(1)(c) GDPR applies.
The provision of this information is voluntary. Without the contact details and content needed to answer your request, I may be unable to respond. Enquiry data is deleted when the matter has been resolved and no statutory retention obligation or legitimate need to preserve evidence applies. Business and tax records are retained for the periods required by law.
EXTERNAL LINKS AND SOCIAL MEDIA
The website contains links to external services, in particular Instagram. No data is transferred to those providers merely because a text link is displayed. If you follow an external link, the provider of the destination website processes data under its own responsibility. Please consult that provider’s privacy information.
RECIPIENTS AND INTERNATIONAL TRANSFERS
Personal data is disclosed only where necessary to operate the website or respond to enquiries, where I am legally required to do so, or where you have consented. Recipients may include Squarespace and its sub-processors, Weglot and its sub-processors, my email and IT service providers, and public authorities where required by law.
Where data is transferred outside the European Economic Area, this takes place only on the basis of an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism under Chapter V GDPR.
RETENTION
Unless a more specific period is stated above, personal data is retained only for as long as necessary for the respective purpose. It is then deleted or anonymised unless statutory retention obligations, the establishment or defence of legal claims, or other lawful grounds require continued storage.
YOUR RIGHTS
Subject to the statutory requirements, you have the right to:
• obtain information about your personal data under Article 15 GDPR;
• request rectification under Article 16 GDPR;
• request erasure under Article 17 GDPR;
• request restriction of processing under Article 18 GDPR;
• receive data in a portable format under Article 20 GDPR;
• object to processing based on legitimate interests under Article 21 GDPR; and
• withdraw consent at any time with effect for the future under Article 7(3) GDPR.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for Schleswig-Holstein is:
Independent State Centre for Data Protection Schleswig-Holstein (ULD)
Holstenstraße 98
24103 Kiel
Germany
Email: mail@datenschutzzentrum.de
Website: www.datenschutzzentrum.de
SECURITY
This website uses TLS encryption. A secure connection is indicated by the lock symbol in your browser’s address bar. No method of transmission over the internet is completely secure, but appropriate technical and organisational measures are used to protect personal data.
CHANGES TO THIS PRIVACY NOTICE
I may update this privacy notice if the website, the services used or the legal requirements change. The current version is always available on this page.