Privacy notice

This privacy notice explains which personal data is processed when you use this website — in accordance with the GDPR (Regulation 2016/679) and the German BDSG and TTDSG.

1. Controller

2. Hosting and server log files

The website is provided by a hosting company: SEOHOST Sp. z o.o., ul. Obornicka 330, 60-689 Poznań, Poland (EU). The provider processes technical data solely to keep the website running and secure (processing on our behalf, Art. 28 GDPR).

Every time the site is opened, the server automatically saves a log entry containing:

• the IP address in shortened / anonymised form,
• the date and time of the request,
• the URL requested and the HTTP status code,
• browser and operating system information (user agent),
• the referring page, where it is transmitted.

The legal basis for this processing is Art. 6 (1) (f) GDPR — the legitimate interest in stable, secure operation. Logs are kept for a maximum of 14 days and are not combined with other data.

3. Cookies and LocalStorage

The website uses only technically necessary LocalStorage, to record that “the user has acknowledged the cookie notice” (the key stade_consent) and the language chosen. This data is not passed to any third party. Legal basis: §25 (2) no. 2 TTDSG (technically necessary) and Art. 6 (1) (f) GDPR.

The website does not use: Google Analytics, Matomo, the Facebook pixel, Hotjar or any other analytics or advertising tools.

You will find the details in our cookie policy.

4. Web fonts

The typefaces Inter and Instrument Serif are hosted locally on our own server. We do not use Google Fonts or any other external font provider. No connection to Google servers is made when the page loads.

5. External links

The website contains links to the official pages of public offices, schools, doctors and other institutions. When you click such a link you leave our site. We are not responsible for the privacy policies of third parties.

6. Contact by phone and e-mail

If you contact us by phone or e-mail, the details you give (name, e-mail address, the content of the message, phone number) are processed in order to deal with your enquiry — on the basis of Art. 6 (1) (b) GDPR (contract or pre-contractual steps) or Art. 6 (1) (f) GDPR (legitimate interest). The data is deleted once the matter is settled, at the latest when statutory retention periods expire.

7. Third-party data in the database

The website publishes the contact details of public institutions and providers of public services (offices, schools, medical practices and so on) from publicly available sources (the legal notices on their own sites, official registers). Legal basis: Art. 6 (1) (f) GDPR — the legitimate interest in informing the public in Stade.

If you are a person named in the database and would like an entry corrected or deleted, please contact the controller on +49 155 10247160.

8. Your rights (Art. 15–21 GDPR)

• The right of access to your data (Art. 15 GDPR),
• the right to rectification (Art. 16),
• the right to erasure (the “right to be forgotten”, Art. 17),
• the right to restriction of processing (Art. 18),
• the right to data portability (Art. 20),
• the right to object to processing based on legitimate interest (Art. 21),
• the right to withdraw consent at any time (Art. 7 (3)) — without affecting the lawfulness of processing carried out beforehand.

9. Complaint to the supervisory authority

You have the right to lodge a complaint with a supervisory authority, in particular with:

10. Data security

The website uses TLS/SSL encryption for data transmission. We apply appropriate technical and organisational measures in accordance with Art. 32 GDPR.

11. Updates

This notice may be updated to keep pace with current legal requirements. The current version is always available at this address.

12. Voluntary support through Stripe

On the Support the portal page you can make a voluntary contribution. The payment is handled by Stripe Payments Europe, Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland) as a separate controller.

When you click the donate button you leave this website and are taken to a payment page operated by Stripe. Payment details (card number, name, possibly an e-mail address, IP address) are collected and processed there by Stripe alone — we neither see nor store any card data. No Stripe cookies or scripts are loaded on this website for that purpose.

The legal basis for the redirect is Art. 6 (1) (b) GDPR (carrying out the payment you asked for) or Art. 6 (1) (f) GDPR. For the purpose and scope of Stripe’s processing and your rights towards Stripe, see the Stripe privacy policy.