Privacy policy

This page is a non-binding translation provided for easier understanding. Only the German original is legally binding: Datenschutzerklärung (German original).

As of: October 2026

1. Controller

The controller responsible for data processing on this website is:

Zuhal Tülay
Zoe Pflegeberatung
c/o flexdienst – #21715
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany
Email: info@zoe-pflegeberatung.de

2. Key points in brief

This website itself does not use analytics or advertising cookies and does not use any analytics or advertising tools. Fonts and our own scripts are loaded from our server; the spam protection on the contact page is described in section 6. We process personal data only to the extent necessary for operating the website, for protection against misuse and for handling your enquiry.

3. Hosting and server log files

The website is operated on a server in Germany by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen); technical support is provided by DreiHundertSechzig (Düren) on our behalf. When the pages are accessed, the server automatically processes connection data (IP address, date and time, page accessed, referrer, browser and operating system information). This is technically necessary to deliver the pages and to operate them securely. The legal basis is Art. 6(1)(f) GDPR (DSGVO) (legitimate interest in stable and secure operation). The data is not merged with other data. Data processing agreements under Art. 28 GDPR are in place with the service providers or are being concluded with them.

4. Cloudflare (protection and delivery)

We use the Cloudflare service of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) as a protective layer and content delivery network. Requests to our website are routed via Cloudflare servers; technical connection data such as the IP address is processed in order to fend off attacks and deliver content quickly. The legal basis is Art. 6(1)(f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; the standard contractual clauses of the EU Commission also apply.

5. Contact form and email

If you use the contact form, we process your name, your email address, optionally your telephone number, your request and your message in order to answer your enquiry. The information is sent by email to our mailbox at STRATO GmbH (Berlin, data centres in Germany) and is not stored in a database on the website. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or point (f) GDPR.

If you describe health data in it (e.g. a need for care), we process it exclusively on the basis of your explicit consent under Art. 9(2)(a) GDPR, which you give before sending. You can withdraw it at any time with effect for the future. We delete your enquiry as soon as it has been dealt with and no statutory retention obligations stand in the way.

The same applies if you write to us directly by email. Please note that unencrypted email can have security vulnerabilities.

6. Spam protection with Cloudflare Turnstile

On the contact page we use Cloudflare Turnstile to distinguish automated requests (spam) from requests by real people. The script (challenges.cloudflare.com) is only loaded when you tap or click on the form. In the process, technical browser and connection data is transmitted to Cloudflare. According to Cloudflare, no advertising or tracking cookies are set in the process. The legal basis is Art. 6(1)(f) GDPR (protection against misuse); where access to your end device is required, § 25 (2) no. 2 TDDDG.

Automatic acknowledgement of receipt

After a successful contact request, we send an automatic acknowledgement of receipt to the email address you provided, via the STRATO mailbox. It contains no copy of your message and does not yet confirm a fixed appointment. Technical hash values and the sending status are processed briefly to avoid duplicate sending; message content is not stored in the process. No open or click tracking pixels are used. Genuine contact requests are not transferred to the public CRM test environment.

7. External links

This website links to Instagram (Meta Platforms Ireland Ltd.). No plugins are embedded. Data is only transferred to the respective provider once you click the link; that provider’s privacy policy applies there.

8. Encryption

The transmission between your browser and this website is encrypted using TLS (recognisable by the padlock symbol and “https”).

CRM test environment

A separate test environment is available at /buero/. It uses technically necessary session cookies and processes only the intended sample data. Each login creates its own test area. Please do not enter or upload any real customer or health data. Test entries are deleted on logout and otherwise after 24 hours at the latest. Nothing is transferred from the contact form. For access, failed login attempts are counted in order to limit further attempts.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time. To do so, please contact info@zoe-pflegeberatung.de.

You also have the right to lodge a complaint with a data protection supervisory authority, e.g. with the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz.

10. Changes

We will amend this policy if the website or the legal situation changes. The version published here at the time applies.