This is a courtesy translation. In the event of any discrepancy, the German version of this privacy policy shall prevail.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Paul Knöfel
Streiberstrasse 47
06110 Halle (Saale)
Germany
E-mail: info@paul-knoefel.de
No data protection officer has been appointed, as the legal requirements for such an appointment (Section 38 of the German Federal Data Protection Act) are not met.
This privacy policy informs you, in accordance with Article 13 GDPR, which personal data is processed when you visit this website, for which purposes and on which legal basis this takes place, and which rights you have. Personal data means any information relating to an identified or identifiable natural person (Article 4 (1) GDPR).
This website is a portfolio. No products or services are sold through it. There are no user accounts, no contact form, no newsletter and no comment function.
This website is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes personal data on my behalf on the basis of a data processing agreement pursuant to Article 28 GDPR, which I have concluded with IONOS.
When this website is accessed, the web server automatically collects and stores information in so-called server log files:
IP address of the accessing device
date and time of access
name and URL of the file or page retrieved
volume of data transferred and notification of successful retrieval
browser type and version
operating system used
previously visited website (referrer URL), where transmitted
According to IONOS, visitors' IP addresses are anonymised in the log files for data protection reasons.
Purpose: establishing the connection and delivering the website, ensuring system security and stability, analysis in the event of technical faults or attacks, and administrative purposes.
Legal basis: Article 6 (1) (f) GDPR. My legitimate interest lies in the technically faultless provision and the security of this website. Processing this log data is technically indispensable for delivering a website at all.
Retention period: According to IONOS, log data is retained for a maximum of eight weeks and is deleted thereafter.
This data is not merged with other data sources and is not analysed for the purpose of creating user profiles.
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser begins with "https://". When encryption is active, the data you transmit to this website cannot be read by third parties. The legal basis is Article 6 (1) (f) GDPR in conjunction with the obligation to implement appropriate technical measures under Article 32 GDPR.
If you contact me by e-mail, I process the data you transmit, that is, your e-mail address, your name where provided, and the content of your message, exclusively in order to deal with your enquiry.
Legal basis: Article 6 (1) (f) GDPR, based on my legitimate interest in responding to enquiries. If your enquiry is aimed at concluding or preparing a contract, Article 6 (1) (b) GDPR is an additional legal basis.
Retention period: Your message will be deleted as soon as it is no longer required to achieve the purpose, that is, generally once your enquiry has been dealt with conclusively, unless statutory retention obligations apply.
Please note that the transmission of data by unencrypted e-mail may have security vulnerabilities. Complete protection against access by third parties is not possible with unencrypted e-mail.
This website does not use any cookies for analytics, advertising or tracking purposes. Only technically necessary cookies are used:
Name: pll_language
Purpose: Stores the language version of this website you have selected (German or English) so that the site is displayed in your preferred language when you return. Set by the multilingual extension Polylang. The cookie contains only the language code and no personal data.
Storage period: 30 days
In addition, the content management system used, WordPress, may in individual cases use technically necessary cookies in connection with logging in to the administration area. These affect logged-in users only, that is, me as the operator, and not visitors to the public pages.
Legal basis: Pursuant to Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), no consent is required for storage and access operations that are strictly necessary in order to provide a service expressly requested by you. The associated data processing is based on Article 6 (1) (f) GDPR and my legitimate interest in a functional and user-friendly website. As no cookies or comparable technologies requiring consent are used, no consent banner is displayed on this website.
In addition, the theme of this website stores a technical entry in your browser's session storage (sameCatIdToUseSetByThumbnailGrid). It is used for the navigation between projects. The entry contains no personal data, is not transmitted to the server and is deleted automatically when you close the browser window. The legal basis is Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).
You can delete or block cookies at any time via your browser settings. In that case, your language selection will no longer be recognised on a return visit.
My hosting provider IONOS provides an audience measurement function ("IONOS WebAnalytics") as part of the hosting package, operated at server level. It serves statistical evaluation and technical optimisation of this website.
According to IONOS, the following data is collected: previously visited website (referrer), requested web page or file, browser type and version, operating system, device type, time of access and the IP address in anonymised form. The IP address is used solely to determine the approximate location of access and, according to IONOS, is anonymised immediately after transmission. No cookies are set. Depending on the tariff, data is collected via a log file or via a tracking pixel. According to IONOS, no data is passed on to third parties.
Legal basis: Insofar as personal data is processed at all in the course of this evaluation, this takes place on the basis of Article 6 (1) (f) GDPR. My legitimate interest lies in the statistical evaluation of usage behaviour in order to improve my offering. As no information is stored in your terminal equipment and no information stored there is accessed, consent under Section 25 (1) TDDDG is not required.
Retention period: The underlying log data is deleted after a maximum of eight weeks. The aggregated statistics derived from it do not contain any personal reference.
Further information on data processing by IONOS is available at: https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-durch-ihr-ionos-produktes/webanalytics/
In order to display fonts consistently, this website uses fonts that are stored locally on the server of this website and delivered from there. No connection is established between your browser and third-party servers such as Google Fonts. Your IP address is not transmitted to font providers.
This website is based on the content management system WordPress and is operated on the server named above. In addition, extensions are used for presentation, multilingualism, optimisation and data backup. These extensions run entirely on the server of this website. No visitor data is transmitted to external servers, with the exception of the storage of your language selection on your device described in section 6.
To protect this website against attacks, I use a security extension. It processes your IP address, the time and the requested address on the server of this website in order to detect and block suspicious requests. This data is not transmitted to the manufacturer of the extension. The legal basis is Article 6 (1) (f) GDPR. My legitimate interest lies in the secure and uninterrupted operation of the website.
For data backup purposes, backup copies of the website and the associated database are created at regular intervals. These backups are stored exclusively on the web space of my hosting provider within Germany. No transfer to external cloud storage services takes place. In addition, the hosting provider automatically creates daily backups which are retained for a limited period of at least 14 days. The backups serve exclusively to restore the site in the event of an error. The legal basis is Article 6 (1) (f) GDPR in conjunction with Article 32 GDPR. Older backups are overwritten or deleted on a rolling basis.
This website does not embed any third-party content. In particular, no video platforms, social media plug-ins, map services, content delivery networks or external scripts that would establish a connection between your browser and third-party servers are integrated.
This website contains links to my profiles on LinkedIn and Instagram. These are plain text links. No content from these platforms is embedded, and no data is transmitted to LinkedIn or Instagram when you simply access this website. Only when you click on one of these links do you leave this website, and the privacy policy of the respective provider then applies. I have no influence on the data processing that takes place there.
Your personal data is not passed on to third parties, with the exception of the hosting provider named above acting as a processor, and cases in which I am legally obliged to disclose data or in which disclosure is necessary to enforce my rights.
No personal data is transferred to countries outside the European Union or the European Economic Area.
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
You have the following rights with regard to the personal data concerning you:
Access (Article 15 GDPR): you may request information as to whether and which data concerning you I process.
Rectification (Article 16 GDPR): you may request the correction of inaccurate data or the completion of incomplete data.
Erasure (Article 17 GDPR): you may request the erasure of your data, provided no statutory retention obligations apply.
Restriction of processing (Article 18 GDPR).
Data portability (Article 20 GDPR).
Withdrawal of consent given (Article 7 (3) GDPR) with effect for the future.
An informal message to the contact details given above is sufficient to exercise these rights.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (f) GDPR. If I demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or that the processing serves the establishment, exercise or defence of legal claims, I will continue to process the data. Otherwise, I will no longer process the data concerned.
Without prejudice to any other remedy, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for me is:
Die Landesbeauftragte für den Datenschutz Sachsen-Anhalt
Otto-von-Guericke-Strasse 34a
39104 Magdeburg, Germany
Postal address: Postfach 1947, 39009 Magdeburg
Telephone: +49 391 81803-0
E-mail: poststelle@lfd.sachsen-anhalt.de
Website: https://datenschutz.sachsen-anhalt.de
The provision of personal data is neither required by law nor by contract. The data listed in section 3 is transmitted as a technical necessity when you access this website; without this transmission, accessing the page is technically impossible. Contacting me by e-mail is voluntary.
I will amend this privacy policy as soon as changes to the technology used on this website or to the legal situation make this necessary. The version available when you access this page applies.
Last updated: 25 September 2026
This is a courtesy translation. In the event of any discrepancy, the German version of this privacy policy shall prevail.
This is a courtesy translation. In the event of any discrepancy, the German version of this privacy policy shall prevail.
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Paul Knöfel
Streiberstrasse 47
06110 Halle (Saale)
Germany
E-mail: info@paul-knoefel.de
No data protection officer has been appointed, as the legal requirements for such an appointment (Section 38 of the German Federal Data Protection Act) are not met.
This privacy policy informs you, in accordance with Article 13 GDPR, which personal data is processed when you visit this website, for which purposes and on which legal basis this takes place, and which rights you have. Personal data means any information relating to an identified or identifiable natural person (Article 4 (1) GDPR).
This website is a portfolio. No products or services are sold through it. There are no user accounts, no contact form, no newsletter and no comment function.
This website is hosted by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. The servers are located in Germany. IONOS processes personal data on my behalf on the basis of a data processing agreement pursuant to Article 28 GDPR, which I have concluded with IONOS.
When this website is accessed, the web server automatically collects and stores information in so-called server log files:
IP address of the accessing device
date and time of access
name and URL of the file or page retrieved
volume of data transferred and notification of successful retrieval
browser type and version
operating system used
previously visited website (referrer URL), where transmitted
According to IONOS, visitors' IP addresses are anonymised in the log files for data protection reasons.
Purpose: establishing the connection and delivering the website, ensuring system security and stability, analysis in the event of technical faults or attacks, and administrative purposes.
Legal basis: Article 6 (1) (f) GDPR. My legitimate interest lies in the technically faultless provision and the security of this website. Processing this log data is technically indispensable for delivering a website at all.
Retention period: According to IONOS, log data is retained for a maximum of eight weeks and is deleted thereafter.
This data is not merged with other data sources and is not analysed for the purpose of creating user profiles.
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser begins with "https://". When encryption is active, the data you transmit to this website cannot be read by third parties. The legal basis is Article 6 (1) (f) GDPR in conjunction with the obligation to implement appropriate technical measures under Article 32 GDPR.
If you contact me by e-mail, I process the data you transmit, that is, your e-mail address, your name where provided, and the content of your message, exclusively in order to deal with your enquiry.
Legal basis: Article 6 (1) (f) GDPR, based on my legitimate interest in responding to enquiries. If your enquiry is aimed at concluding or preparing a contract, Article 6 (1) (b) GDPR is an additional legal basis.
Retention period: Your message will be deleted as soon as it is no longer required to achieve the purpose, that is, generally once your enquiry has been dealt with conclusively, unless statutory retention obligations apply.
Please note that the transmission of data by unencrypted e-mail may have security vulnerabilities. Complete protection against access by third parties is not possible with unencrypted e-mail.
This website does not use any cookies for analytics, advertising or tracking purposes. Only technically necessary cookies are used:
Name: pll_language
Purpose: Stores the language version of this website you have selected (German or English) so that the site is displayed in your preferred language when you return. Set by the multilingual extension Polylang. The cookie contains only the language code and no personal data.
Storage period: 30 days
In addition, the content management system used, WordPress, may in individual cases use technically necessary cookies in connection with logging in to the administration area. These affect logged-in users only, that is, me as the operator, and not visitors to the public pages.
Legal basis: Pursuant to Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), no consent is required for storage and access operations that are strictly necessary in order to provide a service expressly requested by you. The associated data processing is based on Article 6 (1) (f) GDPR and my legitimate interest in a functional and user-friendly website. As no cookies or comparable technologies requiring consent are used, no consent banner is displayed on this website.
In addition, the theme of this website stores a technical entry in your browser's session storage (sameCatIdToUseSetByThumbnailGrid). It is used for the navigation between projects. The entry contains no personal data, is not transmitted to the server and is deleted automatically when you close the browser window. The legal basis is Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).
You can delete or block cookies at any time via your browser settings. In that case, your language selection will no longer be recognised on a return visit.
My hosting provider IONOS provides an audience measurement function ("IONOS WebAnalytics") as part of the hosting package, operated at server level. It serves statistical evaluation and technical optimisation of this website.
According to IONOS, the following data is collected: previously visited website (referrer), requested web page or file, browser type and version, operating system, device type, time of access and the IP address in anonymised form. The IP address is used solely to determine the approximate location of access and, according to IONOS, is anonymised immediately after transmission. No cookies are set. Depending on the tariff, data is collected via a log file or via a tracking pixel. According to IONOS, no data is passed on to third parties.
Legal basis: Insofar as personal data is processed at all in the course of this evaluation, this takes place on the basis of Article 6 (1) (f) GDPR. My legitimate interest lies in the statistical evaluation of usage behaviour in order to improve my offering. As no information is stored in your terminal equipment and no information stored there is accessed, consent under Section 25 (1) TDDDG is not required.
Retention period: The underlying log data is deleted after a maximum of eight weeks. The aggregated statistics derived from it do not contain any personal reference.
Further information on data processing by IONOS is available at: https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-durch-ihr-ionos-produktes/webanalytics/
In order to display fonts consistently, this website uses fonts that are stored locally on the server of this website and delivered from there. No connection is established between your browser and third-party servers such as Google Fonts. Your IP address is not transmitted to font providers.
This website is based on the content management system WordPress and is operated on the server named above. In addition, extensions are used for presentation, multilingualism, optimisation and data backup. These extensions run entirely on the server of this website. No visitor data is transmitted to external servers, with the exception of the storage of your language selection on your device described in section 6.
To protect this website against attacks, I use a security extension. It processes your IP address, the time and the requested address on the server of this website in order to detect and block suspicious requests. This data is not transmitted to the manufacturer of the extension. The legal basis is Article 6 (1) (f) GDPR. My legitimate interest lies in the secure and uninterrupted operation of the website.
For data backup purposes, backup copies of the website and the associated database are created at regular intervals. These backups are stored exclusively on the web space of my hosting provider within Germany. No transfer to external cloud storage services takes place. In addition, the hosting provider automatically creates daily backups which are retained for a limited period of at least 14 days. The backups serve exclusively to restore the site in the event of an error. The legal basis is Article 6 (1) (f) GDPR in conjunction with Article 32 GDPR. Older backups are overwritten or deleted on a rolling basis.
This website does not embed any third-party content. In particular, no video platforms, social media plug-ins, map services, content delivery networks or external scripts that would establish a connection between your browser and third-party servers are integrated.
This website contains links to my profiles on LinkedIn and Instagram. These are plain text links. No content from these platforms is embedded, and no data is transmitted to LinkedIn or Instagram when you simply access this website. Only when you click on one of these links do you leave this website, and the privacy policy of the respective provider then applies. I have no influence on the data processing that takes place there.
Your personal data is not passed on to third parties, with the exception of the hosting provider named above acting as a processor, and cases in which I am legally obliged to disclose data or in which disclosure is necessary to enforce my rights.
No personal data is transferred to countries outside the European Union or the European Economic Area.
No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place.
You have the following rights with regard to the personal data concerning you:
Access (Article 15 GDPR): you may request information as to whether and which data concerning you I process.
Rectification (Article 16 GDPR): you may request the correction of inaccurate data or the completion of incomplete data.
Erasure (Article 17 GDPR): you may request the erasure of your data, provided no statutory retention obligations apply.
Restriction of processing (Article 18 GDPR).
Data portability (Article 20 GDPR).
Withdrawal of consent given (Article 7 (3) GDPR) with effect for the future.
An informal message to the contact details given above is sufficient to exercise these rights.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 (1) (f) GDPR. If I demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or that the processing serves the establishment, exercise or defence of legal claims, I will continue to process the data. Otherwise, I will no longer process the data concerned.
Without prejudice to any other remedy, you have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for me is:
Die Landesbeauftragte für den Datenschutz Sachsen-Anhalt
Otto-von-Guericke-Strasse 34a
39104 Magdeburg, Germany
Postal address: Postfach 1947, 39009 Magdeburg
Telephone: +49 391 81803-0
E-mail: poststelle@lfd.sachsen-anhalt.de
Website: https://datenschutz.sachsen-anhalt.de
The provision of personal data is neither required by law nor by contract. The data listed in section 3 is transmitted as a technical necessity when you access this website; without this transmission, accessing the page is technically impossible. Contacting me by e-mail is voluntary.
I will amend this privacy policy as soon as changes to the technology used on this website or to the legal situation make this necessary. The version available when you access this page applies.
Last updated: 25 September 2026
