Privacy policy
Controller
Leonard Surac, contact details in the legal notice.
Hosting and server logs
The website and its database run on a rented server of dogado GmbH, Dortmund, located in Germany. The provider only supplies the server and does not process the data stored on it for its own purposes; a data processing agreement is in place (Art. 28 GDPR). On every request the web server logs the IP address, time, requested address and browser identification. This serves secure operation and the defence against attacks (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days.
No cookies, no third-party services
The public website sets no cookies, uses no third-party analytics or tracking services and loads no third-party content; even the fonts are served from the own server. Only the admin area sets a strictly necessary session cookie after login.
Application links
Opening a personal application link records an event in the database with its kind (view, download), time and language, without IP address, browser identification or referrer. The key in the link is not stored in any log.
Operational and usage data
For secure operation and to understand how the website is used, the application logs every page view and every request to its interface: the page (without parameters), time, response status and duration, on the first page of a visit the domain name of the referring page (such as a search engine), and the IP address in shortened form (IPv4 without the last byte, IPv6 only the first 48 bits), so that it no longer points to a single connection. Login attempts to the admin area are logged with the full IP address to defend against attacks. Technical metrics of the application are collected as well. Request contents and cookies are not recorded. The data stays on a server operated by the site owner in Germany, is not passed on to third parties and is deleted after 30 days. The legal basis is the legitimate interest in secure operation and in improving the website (Art. 6 (1) (f) GDPR); you can object to this processing at any time (Art. 21 GDPR).
Contact by e-mail
If you write to me, I process your details only to answer your request (Art. 6 (1) (b) and (f) GDPR).
Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR) and the right to lodge a complaint with a supervisory authority, such as the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.