Privacy Policy
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is: Janne Keipert Marchlewskistraße 102 10243 Berlin Germany Email: jabbekeipert@gmail.com
General information on data processing
This website processes personal data only to the extent technically necessary and to provide the functions you actively use (account, comments, photo submissions, newsletter, orders). No tracking takes place, no analytics services and no advertising cookies are used. Your data is not passed to third parties for advertising purposes.
Server log files
When you access this website, the server automatically records information transmitted by your browser: IP address, date and time of access, name and URL of the retrieved file, the browser and where applicable the operating system used, and the website from which the access originated. This data is technically necessary in order to deliver the website, ensure stability and security, and prevent abuse. The legal basis is Art. 6 (1) (f) GDPR. Website, database, media and mail delivery run on self-operated infrastructure; no content is loaded from third-party CDNs.
Fan accounts and sign-in
A fan account stores your email address and a display name you choose. Sign-in is passwordless: you receive a one-time sign-in link by email which expires after a short time and can only be used once. The legal basis is Art. 6 (1) (b) GDPR. After signing in, your browser keeps an access token in local storage so that you stay signed in. [TODO] Decide a deletion period for inactive accounts.
Bot protection (Cloudflare Turnstile)
The sign-in forms are protected by Cloudflare Turnstile in order to prevent automated sign-in attempts and abuse of the email delivery. In the process your IP address and technical details about your browser are transmitted to Cloudflare Inc. and checked there. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse). This involves a transfer to the USA, which Cloudflare bases on the European Commission's standard contractual clauses.
Delphi Dispatch newsletter
The newsletter stores your email address and your name, and for the printed edition additionally your postal address for delivery. The legal basis is Art. 6 (1) (b) GDPR for the printed edition and Art. 6 (1) (a) GDPR for the digital edition. You can end your subscription at any time, after which the data is deleted. [TODO] Confirm and describe the double opt-in procedure.
Comments and fan photos
Comments and submitted concert photos are stored together with your display name and the time of submission. Submissions are reviewed before publication and only shown publicly once approved. The legal basis is Art. 6 (1) (a) GDPR; you can request deletion of a submission at any time using the contact address above.
Orders
An order stores the data required to process it, in particular your name, delivery address and the items ordered. The legal basis is Art. 6 (1) (b) GDPR; retention periods under commercial and tax law remain unaffected.
Storage in your browser
Your chosen display language is stored in a cookie and in your browser's local storage so that the choice is preserved on your next visit. If you are signed in, your access token and display name are added. These entries are technically necessary for the functions you requested (§ 25 (2) no. 2 TDDDG) and are not used for analytics or tracking. You can delete them at any time via your browser settings.
Your rights as a data subject
You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You can withdraw consent you have given at any time with effect for the future. An informal message to the contact address above is sufficient to exercise these rights.
Right to lodge a complaint with a supervisory authority
Independently of this, you have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.