Privacy Notice / Datenschutzerklärung

Short version: This site is private, access-restricted and not intended for public use. No public registration is possible. Data processing is limited to what is necessary to operate the site securely.

1. Controller / Verantwortlicher

Christoph Michel
Karlstr. 1, 64850 Schaafheim, Germany
E-Mail: myregadress@icloud.com

2. Purpose & Legal Basis / Zwecke & Rechtsgrundlagen

• Operating the website, authentication, access control, security monitoring.
  Legal basis: Art. 6(1)(f) GDPR (legitimate interests: secure operation).
• If user accounts for trusted persons exist: administration of those accounts.
  Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual steps).

3. Categories of Data / Datenkategorien

• Server log data: IP address, date/time, requested URL, HTTP status, referrer, user agent.
• Auth data: username, hashed passwords, login timestamps, session IDs, failed/successful login attempts.
• Optional statistics you create and store yourself within the app.

4. Hosting

The site is hosted on Microsoft Azure, operated by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Data is stored in the Azure region North Europe (Ireland). Microsoft acts as a processor under Art. 28 GDPR. A Data Processing Agreement (DPA) with EU Standard Contractual Clauses is in place.

5. Cookies & Local Storage

Only technically necessary cookies/session tokens are used for login and maintaining a session. No analytics or marketing cookies are set.
Note: If you later add non-essential cookies (e.g., analytics), you must obtain consent and document them here.

6. Recipients / Empfänger

Service and infrastructure providers (Microsoft Azure hosting) as processors under Art. 28 GDPR. No data is sold or shared with third parties for marketing purposes.

7. Retention / Speicherdauer

• Server logs: routinely deleted after 7–30 days unless needed for incident analysis.
• Auth & audit logs: retained as long as needed for security and troubleshooting.
• Manually stored statistics: until you delete them.

8. Security Measures / Sicherheit

• TLS encryption (HTTPS), firewalling, least-privilege access, strong password hashing.
• Login attempts are tracked to detect abuse.

9. Data Subject Rights / Betroffenenrechte

You (and any account holders) have the rights of access, rectification, erasure, restriction, portability, and to object (Arts. 15–21 GDPR). You also have the right to lodge a complaint with your supervisory authority. For Hesse (Germany): Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI).

10. International Transfers / Drittlandübermittlung

Data is stored in the EU (Ireland). If Microsoft transfers data outside the EU/EEA (e.g. to the USA for support), this is based on the EU Standard Contractual Clauses and Microsoft’s binding corporate rules.

11. Contact / Kontakt

For privacy requests, please contact: myregadress@icloud.com.

Last updated: 2025-08-29