Privacy Policy

Last updated: 2026-04-09

1. Data Controller

2. Personal Data We Process

• Email address — account creation, authentication, transactional emails, newsletter (where consented)
• Name and username — optional profile information
• IP address — logged at login for security
• Authentication tokens — stored locally in your browser
• Advertising identifiers — where consented (Google services)

3. Legal Basis

• Art. 6(1)(b) GDPR — contract performance
• Art. 6(1)(f) GDPR — legitimate interests (security logging)
• Art. 6(1)(a) GDPR — consent (newsletter, advertising)

4. Data Retention

• Account data: until account deletion.
• Security logs: 90 days.
• Newsletter consent records: until unsubscription + 3 years.

5. Recipients

• Hosting: Strato AG, Pascalstraße 10, 10587 Berlin, Deutschland
• Email: 1&1 Mail & Media GmbH (web.de), Brauerstraße 48, 76135 Karlsruhe, Deutschland
• Advertising (where consented): Google LLC. Privacy policy: policies.google.com/privacy. Opt out: adssettings.google.com.

We do not sell personal data.

6. Cookies and Local Storage

Strictly necessary: Auth tokens in localStorage — no consent required.

Advertising cookies (where consented): Google AdSense may set cross-site tracking cookies. Withdraw consent via cookie settings.

7. Your Rights

• Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Portability (Art. 20), Objection (Art. 21), Withdraw consent (Art. 7(3)).

Contact: lechner.altenstadt@web.de. Response within 30 days.

8. Complaints

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Deutschland, poststelle@lda.bayern.de

9. Changes

The date at the top reflects the most recent version.

10. Contact

lechner.altenstadt@web.de