Privacy Policy

General Information and Mandatory Disclosures

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for.

Information About the Responsible Party

The responsible party for data processing on this website is:

Christoph Dieck
Am Hang 7
21244 Buchholz in der Nordheide
Germany

Phone: +49 1525 4290232
Email: christoph.dieck@gmail.com

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.

Your Rights (Access, Deletion, Rectification, Restriction)

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances.

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

Data subjects may also contact any other competent data protection supervisory authority.

Data Security (SSL/TLS Encryption)

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. The encryption protects the transmitted data in transit from being read by unauthorized third parties.

Hosting and Content Delivery Network

Cloudflare Pages

This website is hosted and delivered via Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare acts as web host and Content Delivery Network (CDN) to deliver the website quickly and securely and to protect it against attacks (e.g. DDoS). When accessing the website, technical request metadata and your IP address are inevitably processed by Cloudflare.

The use of Cloudflare is based on our legitimate interest in a secure, fast and error-free provision of our online offering (Art. 6 (1) (f) GDPR). The data transfer to the USA is legitimized by the EU-US Data Privacy Framework (DPF), under which Cloudflare is certified. We have also concluded a Data Processing Agreement (DPA) with Cloudflare.

Web Analytics

Umami (Self-hosted)

We use Umami, a self-hosted, privacy-focused analytics tool. Umami does not use cookies and does not track users across websites. The visit data used for statistical analysis is processed by Umami in anonymized form. Only aggregated page view statistics are collected (e.g. page URL, referrer, country, browser, operating system). IP addresses are not stored permanently. The analytics server is operated privately on our own infrastructure in Germany. The statistics are not deleted automatically. They remain stored until we delete them manually.

The use of analytics is based on Art. 6 (1) (f) GDPR (legitimate interest in the statistical evaluation and continuous improvement of our website).

Article Reactions

astro-feedback-board

Below each article you can react to it with emojis. For this we use the open-source software astro-feedback-board, which we run ourselves on Cloudflare (Cloudflare Workers with a Cloudflare D1 database in the EU). Reactions set no cookies, load no third-party scripts or fonts and store nothing in your browser’s local storage.

When you open an article, the page loads the reaction counts from feedback.dieck-labs.de. Cloudflare processes your IP address and technical request data, such as browser and requested address, to deliver the content and to fend off attacks. We do not store your IP address.

When you react, we store the reaction with the article’s address and a hash of your IP address and a random value that changes every day. This limits reactions to one of each kind per article, internet connection and day. We delete the random value and the hash on the reaction after two days. After that the reaction is anonymous and not even we can tell which IP address it came from. Before sending, your browser also solves a small computing task (ALTCHA) against spam. No third party is involved.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is collecting feedback on the articles and protecting the system against spam. For Cloudflare as processor and the transfer to the USA, the section “Cloudflare Pages” applies.

Voluntary Support

Buy Me a Coffee

We offer the option to support this project via Buy Me a Coffee. The provider of this service is Publisher Media LLC, 548 Market St, PMB 69533, San Francisco, CA 94104, USA.

The integration on our site is a pure external link. We load the button image locally from our own server. Absolutely no data flows to Buy Me a Coffee when you visit our page.

When you click the button, you leave our website and are redirected directly to the Buy Me a Coffee website. From that point on, the provider’s privacy policy applies. We have no influence on the data processing that takes place there. Only then does the provider collect data like your IP address or payment details. We have no access to this data.

You can find details regarding their privacy practices in the Buy Me a Coffee privacy policy: https://www.buymeacoffee.com/privacy-policy.

Kinderhaus Weimar

We link to the donation page of Kinderhaus Weimar (kinderhaus-weimar.de/spenden/). This is a pure external link. No data flows to Kinderhaus Weimar when you visit our page. When you click the link, you leave our site and are subject to the privacy policy of the respective website operator.

Some posts on this website contain affiliate links. We participate in the Amazon EU Associates Programme, an affiliate advertising programme designed to provide a means for sites to earn advertising fees by advertising and linking to Amazon. As an Amazon Associate we earn from qualifying purchases. The provider is Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg.

Such links are marked with an asterisk (*) or a corresponding note in the respective post. They do not cause any additional cost for you. If a purchase is made via such a link, we receive a commission.

No data is transmitted to Amazon when you merely visit one of our pages. The links are pure external references. Only when you click an affiliate link do you leave our site and get redirected to Amazon. The link contains a partner identifier (the tag parameter) that Amazon uses to attribute a later purchase to our account; for this, Amazon usually sets a cookie. From that point on, Amazon’s privacy policy applies. We have no access to the data processed there.

The use of affiliate links is based on our legitimate interest in financing this free offering (Art. 6 (1) (f) GDPR). You can find Amazon’s privacy notice at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010.