Privacy policy

Summary

1. Controller

2. Contact for data protection questions

3. Data processed when you visit the website

When you visit this website, your browser transmits technically necessary data to our server. This data is stored in server log files:

• IP address of the requesting device
• date and time of access
• name and URL of the requested file
• amount of data transferred and status code
• browser and operating system used
• previously visited page (referrer), if sent by the browser

This data is used exclusively for the operation, stability and security of the website. It is not combined with other data sources and is not used to identify individual persons.

4. Legal basis

The processing of log data is based on our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR).

5. No cookies, no tracking

This website sets no cookies and uses no analytics, tracking or advertising services. No data is stored in your browser's local storage. There is no audience measurement.

Fonts are loaded from our own servers; there is no connection to Google Fonts or similar services. We also do not embed maps, videos or social media plug-ins.

6. Newsletter field

The newsletter has not been set up yet. The input field on the home page is therefore disabled – nothing can be entered and nothing can be submitted. No email addresses are currently collected, stored or passed on this way.

Before the newsletter starts, this policy will be updated with the information that then applies.

7. Links to other services

This website links to app.flingern-strassenfest.de, www.buergerinitiative-flingern.de and www.karuki.de. These links are only accessed when you click them; until then, no data is transmitted to them. The linked services have their own privacy policies.

8. Recipients and processors

We use the following service providers as processors (Art. 28 GDPR) to operate the website:

• Microsoft Azure – hosting of the website on a dedicated virtual server (server location: Germany West Central)
• Karuki Group GmbH i.G. – technical development and maintenance, with administrative access to the infrastructure used

Microsoft is based in the USA; processing takes place on servers in the EU. Where access from a third country cannot be ruled out in individual cases, it is safeguarded by EU standard contractual clauses or certification under the EU-U.S. Data Privacy Framework. Data is not passed on to any other third parties.

9. Storage period

Server log files are rotated daily and automatically deleted after 14 days. They are only kept longer if a specific security incident requires it; the affected entries are then kept until the matter is resolved.

10. Data security

All data is transmitted in encrypted form (TLS/HTTPS). Requests via unencrypted HTTP are automatically redirected to the encrypted connection.

11. Your rights

Under the GDPR, you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal message to the contact addresses above is sufficient to exercise these rights.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).

12. No automated decision-making

There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.