Privacy Policy
Protecting your personal data is important to me. I process your data exclusively on the basis of the applicable legal provisions (GDPR, German Federal Data Protection Act). This privacy policy informs you about the most important aspects of data processing on this website.
1. Controller
The controller responsible for data processing on this website is:
Dr. Magdalena Ludmiła Bochenek, PhD
Radweg 21
55130 Mainz, Germany
Email: mail@magdalenabochenek.com
Phone: +49 (0) 177-77 88 526
2. General information on data processing
Personal data is only collected when you voluntarily provide it in the course of contacting me, or when its collection is technically necessary to deliver the website. Processing is always based on one of the legal grounds set out in Art. 6 GDPR, which are named in the sections below. Data is disclosed to third parties only to the extent described here.
3. Hosting
This website is hosted by an external service provider (Hostinger). Any personal data collected on this website is stored on the host's servers. The servers are located in Frankfurt am Main (Germany); backups are stored in France (EU). This may include, in particular, IP addresses, contact requests, meta and communication data, and other data generated via a website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and reliable provision of this website). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.
4. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from “http://" to “https://" and by the lock symbol. When encryption is active, the data you transmit to me cannot be read by third parties.
5. Server log files
The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. Collection is based on Art. 6 (1) (f) GDPR for the technically error-free presentation and optimisation of the website.
6. Contact form
When you send me an enquiry via the contact form, I process the data you enter (name, email address, subject and message) to handle your enquiry and answer any follow-up questions. The form is processed on the server of this website (see section 3) and delivered to me by email to my mailbox mail@magdalenabochenek.com, which is also hosted by Hostinger. No external form service is used. The form data is not additionally stored on the web server and is not passed on to third parties.
Protection against misuse: The form limits the number of enquiries per sender. For this purpose, a pseudonymised hash value is generated from your IP address and stored on the server together with the time of the enquiry. The IP address itself is not stored. Entries older than one hour are deleted automatically with the next submission.
The legal basis for processing your enquiry is your consent (Art. 6 (1) (a) GDPR), which you give via the checkbox in the form, and — where your enquiry concerns a possible assignment — the initiation of a contractual relationship (Art. 6 (1) (b) GDPR). The misuse protection is based on my legitimate interest in operating the website securely (Art. 6 (1) (f) GDPR). You can withdraw your consent at any time with effect for the future, for example by sending me an informal email. Your enquiry remains in my mailbox until its purpose has been fulfilled. Statutory retention obligations remain unaffected.
7. Enquiry by email
If you contact me by email, your details including the contact data you provide there will be stored for the purpose of processing your enquiry and in case of follow-up questions. Depending on the matter, the legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract), otherwise my legitimate interest in handling the request (Art. 6 (1) (f) GDPR) or your consent (Art. 6 (1) (a) GDPR).
8. Cookies
This website does not set any cookies of its own for analytics, tracking or marketing purposes, and does not embed any corresponding third-party services. No reach measurement and no profiling take place.
9. Your rights
With regard to the personal data concerning you, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent given (Art. 7 (3) GDPR)
To exercise these rights, an informal message to the contact details listed above under “Controller" is sufficient.
10. Right to object
Where the processing of your data is based on legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. I will then no longer process the data concerned unless I can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
11. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. The authority responsible for the controller is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany. You may also contact the supervisory authority of the federal state (Bundesland) where you reside.
12. Storage period
Unless a more specific storage period is stated in this policy, your personal data will remain with me until the purpose for processing no longer applies. If you assert a justified request for erasure or withdraw consent, your data will be deleted unless there are legally permissible reasons for retaining it (e.g. tax or commercial retention periods).
13. Validity and amendment of this policy
This privacy policy is currently valid. Due to the further development of this website or because of changed statutory or regulatory requirements, it may become necessary to amend this privacy policy.
This English translation is provided for convenience. In the event of discrepancies, the German version prevails.
Last updated: September 2026