Privacy Policy

With this privacy policy we inform you about the processing of personal data when you use this website. Personal data is any data that can be related to you personally, e.g. name, address, e-mail address or IP address. The legally binding version of this policy is the German one (Datenschutzerklärung).

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Hannes Thöne
Nordstraße 16
34414 Warburg
Germany
E-mail: [email protected]

2. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights:

right of access (Art. 15 GDPR),
right to rectification (Art. 16 GDPR),
right to erasure (Art. 17 GDPR),
right to restriction of processing (Art. 18 GDPR),
right to data portability (Art. 20 GDPR),
right to object to processing (Art. 21 GDPR).

To exercise your rights, a message to the contact details above is sufficient. Where processing is based on your consent, you have the right to withdraw it at any time with effect for the future.

3. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany

4. Right to object

Insofar as we base the processing of personal data concerning you on our legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

5. Provision of the website and server log files

Each time this website is accessed, your browser automatically transmits information to the server, which is temporarily stored in so-called log files. The following is recorded in particular:

the IP address of the requesting device (anonymised/shortened or full),
the date and time of access,
the specific address (URL) requested and the delivery status,
the browser type and version used and the operating system,
the previously visited page (referrer), if transmitted.

This data is processed for the purpose of technical provision, ensuring a smooth connection, system security and stability, and to prevent and investigate abuse. The legal basis is our legitimate interest in a secure and functional operation of the website pursuant to Art. 6 (1) (f) GDPR.

6. Protection against overload and abuse (rate limiting)

To protect the website against automated abuse and overload, we briefly store the IP address of requesting devices together with a counter in the server's memory. This data is not stored permanently and is automatically deleted after the respective time window expires. The legal basis is our legitimate interest in the security and availability of the service pursuant to Art. 6 (1) (f) GDPR.

7. Automatic content generation via OpenRouter

The content of this website is generated automatically by an AI-based language model when an address is accessed. For this purpose, the topic derived from the requested address (URL) is transmitted to our service provider OpenRouter, Inc. (USA) and to the providers of the respective AI models connected through that service in order to generate the page content. No master data, contact data or IP address is transmitted; only the topic requested by you via the address is transmitted.

For this reason, please do not enter any personal or confidential details into the address you access. The processing is based on our legitimate interest in providing the core function of this service pursuant to Art. 6 (1) (f) GDPR.

In the course of this processing, a transfer to third countries outside the European Union, in particular to the USA, may take place. Where there is no adequacy decision of the European Commission for the third country concerned, we base such a transfer on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the European Commission's Standard Contractual Clauses.

8. Storage of generated pages (caching)

Once generated, pages are stored together with the associated address in a database on the server so that they can be delivered faster and without repeated generation on subsequent access. No personal data of visitors is stored in this cache. The legal basis is our legitimate interest in an efficient and resource-saving operation pursuant to Art. 6 (1) (f) GDPR.

9. Cookies

No cookies are set for regular visitors to this website, and no analysis of your usage behaviour and no tracking take place. Only during the login process in the non-public administration area is a single, technically necessary cookie set to manage the logged-in session. This cookie serves authentication purposes only, contains no advertising or tracking information and becomes invalid when the session ends or upon logout.

The storage of this technically necessary cookie takes place without consent pursuant to § 25 (2) no. 2 TDDDG; the associated data processing is based on Art. 6 (1) (f) GDPR.

10. Contacting us by e-mail

If you contact us by e-mail, the data you provide (your e-mail address and the content of your message) is processed and stored for the purpose of handling your request. The legal basis is our legitimate interest in responding to your enquiry pursuant to Art. 6 (1) (f) GDPR and, where your enquiry is aimed at concluding or performing a contract, Art. 6 (1) (b) GDPR. We delete this data as soon as it is no longer required to achieve the purpose for which it was collected, provided no statutory retention obligations prevent this.

11. Storage period

Unless a more specific storage period is stated in this policy, we process personal data only for as long as is necessary to achieve the respective purpose and then delete it, unless statutory retention or documentation obligations require longer storage.

12. Data security / encryption

For security reasons and to protect the transmission of confidential content, this website uses TLS (SSL) encryption. You can recognise an encrypted connection by the “https” in your browser's address bar and the lock symbol. We also take appropriate technical and organisational measures to protect your data against manipulation, loss or unauthorised access by third parties.

13. Currency of this privacy policy

Due to the further development of this website or because of changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The version available here applies in each case.