Privacy policy

Controller

The person named in the imprint is responsible for processing personal data on nikolasschrader.com. Questions about privacy go to hi@nikolasschrader.com.

Hosting, server logs and backups

The site runs on a server of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany), which operates it on our behalf (Art. 28 GDPR). On every request the web server logs the IP address, date and time, the requested page, the referrer and the browser. The logs serve secure operation and the detection of abuse (Art. 6(1)(f) GDPR) and are deleted after seven days.

Every night a backup of the site's data, including messages from the contact form and comments, is encrypted on the server and stored with Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, in its Frankfurt am Main data centre. Only the operator holds the key; Amazon cannot read the contents. Backups are deleted after 60 days at the latest (Art. 6(1)(f) GDPR, protection against data loss).

Contact form and email

If you use the contact form, send a suggestion about an article or write an email, your name, email address and message are stored to answer the request (Art. 6(1)(b) and (f) GDPR). Messages from the form are also forwarded by email to hi@nikolasschrader.com. They are sent through Google Workspace (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland); the mailbox is at mailbox.org (Heinlein Hosting GmbH, Schwedter Str. 8/9a, 10119 Berlin, Germany). Both process the data on our behalf (Art. 28 GDPR). Google may also process data in the USA; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). Requests are deleted six months after they are settled unless a legal retention duty applies.

Comments

Comments under articles are stored with name, email address and text and reviewed before publication. Name, date and text are published; the email address stays private and is deleted together with the comment. You can request deletion at any time by email.

Embedded videos

Videos from YouTube (Google Ireland Ltd.) and Vimeo (Vimeo.com Inc.) are loaded only after you press play. Until then no connection to the provider is made. By clicking you consent to the provider receiving your IP address and possibly further data (Art. 6(1)(a) GDPR). YouTube is embedded in privacy-enhanced mode, Vimeo with do-not-track enabled. An "always allow" choice is stored in your browser only. Privacy notices: Google, Vimeo.

App downloads

Apps that are not distributed through the App Store are downloaded from downloads.nikolasschrader.com. Amazon CloudFront (Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg) delivers these files from storage in Frankfurt am Main and processes your IP address to transfer them (Art. 28 GDPR, processing on our behalf; Art. 6(1)(f) GDPR, interest in fast and secure delivery). No access logs are kept for this. Apps that check for updates ask the same address. For apps from the App Store, Apple's privacy policy applies.

Cookies and local storage

This site sets no cookies for visitors. Your colour scheme choice and, where applicable, your consent for embedded videos are kept only in your browser's local storage and never sent to the server. That is why there is no cookie banner. Only people who sign in to edit the site receive a technically necessary sign-in cookie (§ 25(2) TDDDG).

Analytics

This site counts, without cookies and without storing anything on your device, how often a page is viewed and read (read means: visible for at least 30 seconds and scrolled halfway), how often a download or App Store link is clicked, and which website visits come from. Only these numbers and the name of the referring website are stored, per page and day; your IP address and details of your browser are neither stored nor passed on for this. There is no analytics tool, no tracking pixel and no third-party statistics service. The legal basis is our legitimate interest in knowing which content is read (Art. 6(1)(f) GDPR). The server log files described above are not analysed for statistics.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR), and the right to withdraw consent at any time. Complaints can be lodged with a supervisory authority, for Bavaria the Bayerisches Landesamt für Datenschutzaufsicht.