This policy applies to the website rekindly.de. It does not apply to installations of the Rekindly software: whoever runs Rekindly on their own server is responsible for the data in it, and no data is transferred to me from these installations.
Controller
Daniel Umlauf
Amalienstraße 26
47447 Moers
Germany
Email: [email protected]
In short
- The website sets no cookies of its own, uses no analytics or tracking tools and loads no content from other servers. Fonts and images are stored on its own server.
- When you visit it, data that is technically necessary is processed so that the page can be delivered and protected against attacks. I use Cloudflare for this.
- The web server's logs only contain shortened IP addresses.
Hosting
The website is hosted on a server of Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. The server is located in Lauterbourg, France. Contabo processes the data that arises when the page is visited on my behalf, under a data processing agreement according to Art. 28 GDPR.
Cloudflare
Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) sits between your browser and the server. Cloudflare forwards requests, encrypts the connection (HTTPS) and protects the site against overload attacks and automated access. In doing so, Cloudflare processes in particular your IP address, date and time, the requested address, information about your browser and operating system (user agent) and the amount of data transferred.
- To protect against bots, Cloudflare may set a strictly necessary cookie (
__cf_bm, valid for 30 minutes) or show a short check page. After a passed check, the cookiecf_clearancestores the result for a limited time. - Through “Network Error Logging”, your browser may report to Cloudflare when the page could not be loaded, for example after a connection error. These reports contain no content of the page.
The legal basis is my legitimate interest in a secure and reliably available website (Art. 6 (1) (f) GDPR). Storing the protection cookies is strictly necessary for this service (§ 25 (2) no. 2 TDDDG). A data processing agreement with Cloudflare is in place. Cloudflare may also process data in the USA; Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists. More in Cloudflare's privacy policy.
Web server logs
The web server logs every request with a shortened IP address (the last part set to zero, for example 203.0.113.0), date and time, the requested page, the status code, the amount of data transferred, the previously visited page (referrer) and the user agent. The logs serve to find errors and keep the service running (Art. 6 (1) (f) GDPR). They are not combined with other data and are deleted as soon as the web server's container is restarted or replaced by a new version of the website.
Contact by email
If you write to me, I process your email address and the content of your message to answer you (Art. 6 (1) (f) GDPR). I delete the message once the matter is settled, unless statutory retention obligations apply.
Links to GitHub
The website links to GitHub (GitHub, Inc., USA), for example to the source code and the documentation. Data is only transferred to GitHub when you follow such a link; GitHub's privacy statement applies to it. No content from GitHub is embedded on this website.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where processing is based on legitimate interest, you may object to it at any time on grounds relating to your particular situation (Art. 21 GDPR). Simply write to the email address above.
You can also lodge a complaint with a data protection supervisory authority, for example the authority where you live or the one responsible for me.
No automated decisions
There is no automated decision-making and no profiling. The data described is technically necessary to display the website; without it the page cannot be visited.