The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:
Anton Büttner
Waldstraße 49
16515 Oranienburg
Germany
Email: [email protected]
We process personal data of our users only to the extent necessary to provide a functioning website, our content and services (including the discussion forum). Processing of personal data takes place either with the user's consent or on the basis of legitimate interests (Art. 6(1)(f) GDPR), in particular to ensure a secure and functioning operation of our services.
3. Hosting and Server Log Files 3.1 Hosting with HetznerOur website and the discussion forum are operated on servers provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner"). Hetzner processes personal data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. Processing takes place exclusively within the EU.
3.2 Content Delivery Network (Cloudflare)We use the Cloudflare service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare") to secure our website and forum and improve load times. Cloudflare acts as a processor and processes, among other things, IP addresses and other technical connection data of all visitors to our services.
Processing takes place on the basis of the Cloudflare Data Processing Addendum (DPA), which reflects the requirements of Art. 28 GDPR and is incorporated into Cloudflare's terms of service (available at: cloudflare.com/cloudflare-customer-dpa). As Cloudflare is a US company and may process data outside the EU, the transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of Cloudflare's DPA.
3.3 Log FilesEach time our website or forum is accessed, the respective server automatically collects and stores information in so-called server log files, in particular:
- IP address
- Date and time of the request
- Page/resource accessed
- Browser and operating system used (user agent)
- Referrer URL
Purpose and legal basis: This processing serves to ensure smooth operation, system security, and the prevention of misuse. The legal basis is Art. 6(1)(f) GDPR (legitimate interest).
Retention period: Log files are automatically deleted after 7 days, unless security-related reasons require longer retention.
4. Use of Our Discussion Forum (Discourse)Our forum runs on self-hosted Discourse software. When you register and use the forum, we process the following categories of data:
Basic personal data: Email address, chosen username, password (stored as a hash), and optionally: profile picture, short bio, or other voluntarily provided profile information.
Usage data: Time of registration and last login, reading activity within the forum (e.g. topics read), activity metrics (e.g. likes given, badges earned).
Content data: Forum posts, topics, and other content you publish.
Communication data: Private messages between users (if this feature is used), as well as the content of any inquiries you send us by email (e.g. to [email protected]).
Purpose and legal basis: Processing takes place to provide the registration and forum functionality and to enable exchange between users. The legal basis is Art. 6(1)(b) GDPR (performance of the usage relationship established upon registration) or Art. 6(1)(f) GDPR (legitimate interest in a functioning discussion platform) for usage and log data. For handling inquiries sent by email, the legal basis is Art. 6(1)(f) GDPR.
Retention period: Account and post data are stored for as long as the user account exists. After account deletion, personal data is deleted or anonymized, unless statutory retention obligations require otherwise.
4.1 Profile Pictures (Gravatar)If you do not upload your own profile picture, the forum may automatically load a profile picture via the Gravatar service (Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA). For this purpose, a hash of your email address is transmitted to Gravatar. Automattic processes this data as an independent controller; further information can be found in Automattic's privacy policy (automattic.com/privacy/). As Automattic is a US company, your data may be transferred to the USA. The legal basis is Art. 6(1)(f) GDPR. You can avoid the use of Gravatar by uploading your own profile picture.
5. Sending of Emails (Brevo)For sending registration, notification, and other system emails related to our forum, we use the email delivery service Brevo (Sendinblue SAS, 7 Rue de Madrid, 75008 Paris, France). In this process, your email address and, where applicable, the content of the notifications sent are transmitted to Brevo and processed on servers within the EU.
Processing takes place on the basis of a data processing agreement pursuant to Art. 28 GDPR. As Brevo is an EU-based company, no transfer to third countries takes place, so no additional safeguards under Art. 44 et seq. GDPR are required. The legal basis for this processing is Art. 6(1)(b) GDPR (performance of the usage relationship).
6. CookiesOur forum uses technically necessary cookies, in particular to maintain your login session (session/authentication cookies). These cookies are required for the forum to function and cannot be disabled without limiting functionality.
Legal basis: Art. 6(1)(f) GDPR and/or § 25(2) TTDSG (technically necessary cookies do not require consent).
No analytics, marketing, or tracking cookies are used.
7. Your Rights as a Data SubjectUnder applicable law, you have the right at any time to:
- Access the personal data we process about you (Art. 15 GDPR)
- Rectification of inaccurate personal data (Art. 16 GDPR)
- Erasure of data stored about you (Art. 17 GDPR)
- Restriction of processing, where the legal requirements are met (Art. 18 GDPR)
- Data portability, if you have consented to processing or a contract for automated processing exists (Art. 20 GDPR)
- Object to the processing of your personal data, where such processing is based on legitimate interests (Art. 21 GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
If you have questions about the collection, processing, or use of your personal data, or wish to exercise your rights, please contact:
Last updated: 4th September 2026