Privacy Policy
Your data deserves the same care as every challenge you bring to me. Below I explain clearly what information is processed, why it is processed, and what rights you have.
I treat privacy as an element of trust — not as a formality.
At a glance
Controller:
Edyta Stanisz-Busch Consulting & Management
Contact:
contact@stanisz-busch.eu
Main purposes:
operation and security of the website, handling enquiries, and business correspondence.
No advertising analytics.
Write directly to the contact address. I will reply in a clear and understandable way.
How do I protect your data?
This policy describes the processing of personal data in connection with the use of stanisz-busch.eu. It has been prepared in accordance with the transparency obligations set out in Articles 12–14 of the GDPR.
1. Data controller
The controller of personal data processed through this website is:
Edyta Stanisz-Busch Consulting & Management
An der Siedlung 26
01900 Großröhrsdorf
Germany
E-mail: contact@stanisz-busch.eu
The controller has not appointed a data protection officer. For all matters concerning personal data, you may contact the controller directly at the e-mail address above.
2. Scope and purposes of processing
Data is processed only to the extent necessary to provide the website, ensure its security, handle messages sent through the contact form, and conduct correspondence relating to services and cooperation.
Depending on how you use the website, this may include your IP address, date and time of access, browser and device information, the page visited and referring page, and, in the contact form, your name, e-mail address, company or organization name, selected subject, and message content.
3. Legal bases
Depending on the circumstances, processing is based on:
- Article 6(1)(b) GDPR — where contact is made in order to take steps before entering into a contract or to perform a contract;
- Article 6(1)(f) GDPR — where processing is based on the controller’s legitimate interests, in particular conducting business communication, ensuring the operation and security of the website, and protecting it against misuse;
- Article 6(1)(a) GDPR — where, in a specific case, processing is based on freely given consent;
- Article 6(1)(c) GDPR — where storage or disclosure of data is required by law.
4. Hosting and server log files
Whenever the website is accessed, the server may automatically record technical data in log files, in particular the IP address, date and time of the request, requested resource, response code, amount of data transferred, browser and operating-system information, and referring page.
This data is needed to provide the website correctly and securely and to identify errors and attempted misuse. The legal basis is Article 6(1)(f) GDPR. Logs are deleted or anonymized once the purpose of their storage no longer applies, unless longer retention is necessary to investigate a security incident or pursue legal claims.
5. Contact form and e-mail
The contact form is operated using Contact Form 7. Data entered in the form is used to handle your enquiry and subsequent correspondence. In the current configuration, submissions are not stored in the WordPress database; the message is sent by e-mail to the controller.
Message delivery technically uses an SMTP service. Recipients of the data may include the hosting provider, e-mail service provider, and entities responsible for technical website maintenance, only to the extent necessary to provide those services.
Data from an enquiry is retained for the period required to respond and handle the matter and then, where necessary, for the period arising from legal obligations or the limitation period for potential claims.
6. Cloudflare Turnstile — spam protection
The form uses Cloudflare Turnstile, a service provided by Cloudflare, Inc., to distinguish human activity from automated spam submissions. For this purpose, Turnstile performs non-interactive security checks in the browser and analyzes technical signals relating to the device and browser environment.
According to Cloudflare, Turnstile processes the data needed to provide its security function and does not access the content entered in the form. The legal basis is Article 6(1)(f) GDPR — the legitimate interest in protecting the form and infrastructure against spam and misuse.
Cloudflare may also process data outside the European Economic Area. Transfer safeguards are described in the Cloudflare Data Processing Addendum.
7. Wordfence — website security
The website uses the Wordfence plugin to protect against malicious traffic, login attempts, attacks, and malware. As part of these security mechanisms, IP addresses, request information, technical identifiers, and data relating to suspicious events may be processed.
The legal basis is Article 6(1)(f) GDPR. The controller’s legitimate interest is to ensure the confidentiality, integrity, and availability of the website. The service provider is Defiant, Inc., based in the United States. Information about Wordfence and the GDPR is available in the provider’s documentation.
8. Cookies and similar technologies
The website may use technically necessary cookies and similar technologies required for the proper operation of WordPress, protection of the form, website security, and maintenance of user or administrator sessions.
At the time this policy was prepared, the website did not use analytics or advertising tools. If additional services requiring consent are introduced in the future, this policy will be updated and users will be given an appropriate choice mechanism before those services are activated.
9. Recipients of data
Data may be disclosed only to entities that support the controller in operating the website and conducting communications, in particular providers of hosting, e-mail, website security, form protection, and technical support. Data may also be disclosed to public authorities where required by law.
Processors acting on the controller’s behalf are required to ensure an appropriate level of protection and to act only on documented instructions.
10. Transfers of data outside the EEA
Because Cloudflare and Wordfence services are used, data may be processed in the United States or other countries outside the European Economic Area. In such cases, transfers are made using mechanisms provided for in Chapter V of the GDPR, in particular an adequacy decision, the EU–US Data Privacy Framework, or the European Commission’s standard contractual clauses, depending on the legal basis used by the relevant provider.
11. Rights of data subjects
Within the limits provided by law, data subjects have the right of access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, write to contact@stanisz-busch.eu. The controller may request information necessary to verify the identity of the person making the request.
12. Right to lodge a complaint
If you believe that your data is being processed unlawfully, you may lodge a complaint with the competent supervisory authority. The authority competent for the controller is:
Sächsische Datenschutz- und Transparenzbeauftragte
Postfach 11 01 32
01330 Dresden
Telephone: +49 351 85471-101
E-mail: post@sdtb.sachsen.de
www.datenschutz.sachsen.de
13. Security and updates to this policy
The controller applies appropriate technical and organizational measures to protect data against loss, unauthorized access, alteration, or disclosure. Data transmission between the browser and the website is protected by TLS/SSL encryption.
This policy may be updated in response to changes in law, website functionality, or the services used. The current version is always available at stanisz-busch.eu/privacy-policy/.
Last updated: 10 September 2026.