Hello, you seem to be lost!

Welcome to the most boring part of the site! This is my legal notice and privacy policy. If you are wondering why a tiny personal website like mine would need those, go ask the lawmakers of the EU and Germany. Thumper’s famous quote from the 1942 Movie “Bambi” represents my thoughts on this quite accurately.

Legal Notice (Impressum)

Provider:
Adrian Steffan
Birkenallee 14
82445 Schwaigen

Contact:
Phone: +49 176 38242139
E-mail: adrian.steffan@hotmail.de
Website: adriansteffan.com

Privacy Policy

This privacy policy explains how we use the personal data we collect from you when you use our service.

Data We Collect and Process

Log Data

Whenever you visit our service, we collect information that your browser sends to us that is called Log Data. This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser user agents, (sub-)pages of our service that you visit, the time and date of your visit, the time spent on those pages, the version of the app you are using, and other statistics. The storage and analysis of the log data is based on Art. 6 (1) lit. f DSGVO. The use of this data to prevent abuse of our systems is based on our legitimate interest (and that of our users) in providing our website as error-free and secure as possible.

Plausible

We use a self-hosted version of Plausible Analytics to track overall trends in the usage of our website in a privacy-friendly way. Plausible Analytics collects only aggregated information, which does not allow us to identify any visitor to our website. Additionally, this data is not shared with third parties, as we run Plausible on our infrastructure - no data is transmitted to the creators of Plausible. For more information, please visit the Plausible Analytics Data Policy at https://plausible.io/data-policy

Voluntary Correspondence

When you email us with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future. We also store information you may volunteer, for example, written responses to surveys. If you agree to a customer interview, we may ask for your permission to record specific answers for future reference or use. We will only do so with your express consent.

When We Give Access to or Disclose your Data

We use some third-party subprocessors to help run our applications and provide services to you.

Hetzner

We host this app on servers provided by the Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter referred to as Hetzner). We use Hetzner on the basis of Art. 6(1)(f) GDPR. Using dedicated hosting services is industry standard, and we have a legitimate interest in the most reliable depiction of our website possible. All data is stored in data centers located in Germany.

When users access our websites, Hetzner creates log files to prevent misuse of their systems and stores them for 7 days. Regarding the content of these log files, Hetzner writes the following:

“For our customers’ websites, the log files store, among other things, the IP address, the browser visitors use, the time and date of the visits, and the system that visitors use. We at Hetzner Online only store pseudonymised IP addresses of visitors to the website. At the web server level, this happens by default by storing an IP address <123.123.123.XXX> in the log file instead of the visitor’s actual IP address, for example, <123.123.123.123>. The XXX is a random value between 1 and 254, so it is no longer possible to establish the true identity of the visitor.”

As Hetzner acts as a data processor on our behalf, we have a DPA (Data Processing Agreement in Accordance with Article 28 GDPR) in place to ensure that Hetzner preserves the privacy of our users and only uses the data when required to provide their hosting service to us.

Children’s Privacy

Our Services do not address anyone under the age of 13. We do not knowingly collect personal identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

Data Subject Rights

As a user of our service, you have certain rights concerning your personal data. Some of these rights include:

Right to Know. You have the right to know what personal information is collected, used, or shared. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.

Right of Access. This includes your right to access the personal information we gather about you, and your right to obtain information about the sharing, storage, security and processing of that information.

Right to Correction. You have the right to request correction of your personal information.

Right to Erasure / “To Be Forgotten”. This is your right to request, subject to certain limitations under applicable law, that your personal information be erased from our possession and, by extension, from all of our service providers. Fulfillment of some data deletion requests may prevent you from using our services because our applications may then no longer work. In such cases, a data deletion request may result in closing your account.

Right to Complain. You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.

Right to Restrict Processing. This is your right to request restriction of how and why your personal information is used or processed.

Right to Object. You have the right, in certain situations, to object to how or why your personal information is processed.

Right to Portability. You have the right to receive the personal information we have about you and the right to transmit it to another party.

Right to not Be Subject to Automated Decision-Making. You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely based on automated processes. This right is limited if the decision is necessary for performance of any contract between you and us, is allowed by applicable law, or is based on your explicit consent.

Many of these rights can be exercised by signing in and updating your account information. Please note that certain information may be exempt from such requests under applicable law. For example, we need to retain certain information in order to provide our services to you.

In some cases, we also need to take reasonable steps to verify your identity before responding to a request, which may include, at a minimum, depending on the sensitivity of the information you are requesting and the type of request you are making, verifying your name and email address. If we are unable to verify you, we may be unable to respond to your requests. If you have questions about exercising these rights or need assistance, please contact us. If an authorized agent is corresponding on your behalf, we will need written consent with a signature from the account holder before proceeding.

Depending on applicable law, you may have the right to appeal our decision to deny your request, if applicable. You also have the right to lodge a complaint with a supervisory authority. If you are in the EU or UK, you can contact your data protection authority to file a complaint or learn more about local privacy laws.

Changes to our Privacy Policy

We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies regarding existing clauses, we will take appropriate steps to notify users.

Some sections of my Privacy Policy have been adapted from the
Basecamp open-source policies / CC BY 4.0