Privacy Policy
Last updated: March 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Dr. Luc Albrecht
Esserstraße 2
51105 Cologne, Germany
Email: contact@lucalbrecht.com
2. General Information on Data Processing
I process personal data only insofar as this is necessary for the provision of this website, the handling of enquiries, the initiation or performance of contractual relationships, compliance with legal obligations or on the basis of your consent.
Data processing is carried out in accordance with the GDPR and the German Federal Data Protection Act (BDSG).
3. Hosting and Provision of the Website
This website is hosted via Squarespace. The provider is Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland.
When you access this website, technically required data is processed by Squarespace, in particular:
IP address
browser type and browser version
operating system
referrer URL
date and time of access
requested content
This processing is carried out on the basis of Art. 6(1)(f) GDPR. My legitimate interest lies in the secure, stable and efficient provision of my website.
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Squarespace.
4. SSL/TLS Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that your browser’s address bar begins with “https://”.
5. Cookies and Consent Management
This website uses technically necessary cookies and, where activated, analytics cookies.
To obtain and manage your consent, I use Squarespace’s integrated cookie consent tool. Your consent decision is stored for the purpose of complying with data protection documentation obligations and for the technically necessary management of your consent.
The legal basis for this is Art. 6(1)(c) GDPR and Section 25(2) No. 2 TDDDG.
You can adjust or withdraw your consent at any time with effect for the future via the “Cookie Settings” link in the footer of this website.
6. Google Analytics
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated may be transmitted to Google servers. A transfer to the United States cannot be ruled out.
Google Analytics is used solely on the basis of your consent pursuant to Art. 6(1)(a) GDPR. Without your consent, no analytics cookies are stored.
Google Analytics is operated in Consent Mode. According to Google, IP addresses of users in the EU are not logged or stored during data collection via Google Analytics 4. The retention period for user-related data in Google Analytics is set to 14 months.
Google is certified under the EU-U.S. Data Privacy Framework. In addition, where required, the European Commission’s Standard Contractual Clauses apply. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Google.
You can withdraw your consent at any time via the “Cookie Settings” link in the footer of this website.
7. Contact Form and Contact by Email
If you contact me via the contact form or by email, I process the data you provide, in particular:
name
email address
message content
any other information you provide voluntarily
The processing is carried out for the purpose of handling your enquiry and, where applicable, for the implementation of pre-contractual measures.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into a contract, and Art. 6(1)(f) GDPR for other enquiries. My legitimate interest lies in the proper handling of incoming messages.
The data will be deleted as soon as your enquiry has been fully processed and no statutory retention obligations prevent deletion.
8. External Content and Locally Embedded Fonts
Where external content is used on this website, such as embedded videos or comparable interactive elements, such content will only be loaded if you have given any required consent.
Locally embedded fonts are loaded without any connection to external servers.
9. Recipients and Transfers to Third Countries
Personal data is generally not disclosed to third parties for their own purposes. However, processing may be carried out by technically integrated service providers acting as processors pursuant to Art. 28 GDPR.
Where data is transferred to third countries outside the European Union or the European Economic Area, this will only take place on the basis of appropriate safeguards, in particular the European Commission’s Standard Contractual Clauses or an adequacy decision, such as under the EU-U.S. Data Privacy Framework.
10. Retention Period
Personal data will be deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion.
11. Your Rights
Within the scope of the applicable legal provisions, you have in particular the following rights:
right of access pursuant to Art. 15 GDPR
right to rectification pursuant to Art. 16 GDPR
right to erasure pursuant to Art. 17 GDPR
right to restriction of processing pursuant to Art. 18 GDPR
right to data portability pursuant to Art. 20 GDPR
right to object pursuant to Art. 21 GDPR
right to withdraw any consent given pursuant to Art. 7(3) GDPR with effect for the future
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in particular is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
To exercise your rights, you may contact me at:
12. Automated Decision-Making
Automated decision-making, including profiling, pursuant to Art. 22 GDPR does not take place.
13. Image Credits
Where images are used on this website, they originate either from my own photography or from licensed sources, in particular Pexels, Unsplash or Pixabay.
14. Objection to Promotional Emails
The use of contact details published as part of the legal notice obligation for the sending of unsolicited advertising and informational material is hereby objected to.
15. Updates to this Privacy Policy
This Privacy Policy is dated March 2026. I reserve the right to amend it in the event of changes to the legal framework, the services used or the website.