Linkwiki:Privacy policy

Name and contact information of the data controller

The data controller as defined by the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is: Linkwiki:Imprint

General Information on Data Processing

Scope of Personal Data Processing

As a general rule, we process personal data of our users only to the extent necessary to provide a fully functional website, as well as our content and services. The processing of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where obtaining prior consent is not possible for practical reasons and the processing of the data is permitted by law.

Legal Basis for the Processing of Personal Data

To the extent that we obtain the data subject’s consent for the processing of personal data, Art. 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data necessary for the performance of a contract to which the data subject is a party, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

To the extent that the processing of personal data is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.

In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the aforementioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

Data Deletion and Retention Periods

The data subject’s personal data will be deleted or blocked as soon as the purpose for which it was stored no longer applies. Data may also be stored if this is provided for by European or national legislation in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

Processing of Personal Data on Our Systems

Website Hosting and Creation of Log Files

Description and Scope of Data Processing
Every time our website is accessed, our systems automatically collect access data and information about the accessing computer system.

The following data is collected in this process:

1. Date and time of access
2. IP address of the user
3. Address of our website accessed by the user’s system (URL)
4. Website from which the user’s system accessed our website (referrer), unless this has been disabled by the user
5. Information about the type and version of the web browser and the operating system used (user agent)

This data is also stored in the log files of our systems.

This data is not stored together with any other personal data belonging to the user. The data is not disclosed to third parties.

Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

Purpose of Data Processing
The temporary storage of the IP address by our systems is necessary to enable the website to be delivered to the user’s system. For this purpose, the user’s IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. In addition, the data helps us technically optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

Duration of Storage
The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

In the case of data collected for the purpose of providing the website, this occurs when the respective session ends.

In the case of data stored in log files, this occurs after seven days at the latest. Storage beyond this period is possible. In this case, users’ IP addresses are deleted or anonymized so that the system making the request can no longer be identified.

Right to Object and Right to Erasure
The collection of data for the purpose of providing the website and the storage of data in log files are absolutely necessary for the operation of the website. Consequently, users have no right to object or request deletion.

Contact Form and Email Contact

Description and Scope of Data Processing
Our website features a contact form that can be used to contact the responsible person electronically. If a user makes use of this option, the data entered in the form is transmitted to us and stored. This data includes:

1. Name (freely selectable; a pseudonym is also acceptable)
2. Email address (freely selectable)
3. Subject
4. Message

At the time of submission, the following data is also stored:

1. User’s IP address
2. Date and time

Your consent to the processing of this data is obtained as part of the submission process, and reference is made to this privacy policy.

Alternatively, you may contact us via the provided email address. In this case, the user’s personal data transmitted with the email will be stored.

In this context, we do not disclose the data to third parties. The data is used exclusively for processing the conversation and - in the event of misuse of the form - for denylists.

However, please be aware that sending unencrypted emails is always insecure: The content of unencrypted emails can be viewed or even tampered with by unauthorized parties.

Legal Basis for Data Processing
The legal basis for processing the data is the user’s consent Art. 6(1)(a) GDPR.

The legal basis for processing data transmitted when sending an email is Art. 6(1)(f) GDPR.

Purpose of Data Processing
We process the personal data entered in the form solely for the purpose of handling your inquiry. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data pursuant to Art. 6(1)(f) GDPR.

The other personal data processed during the submission of the contact form serves to prevent misuse of the contact form and to ensure the security of our information technology systems, which constitutes a legitimate interest under Art. 6(1)(f) GDPR.

Retention Period
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

For personal data entered in the contact form and data sent via email, this is the case once the respective conversation with the user has ended. The conversation is considered concluded when the circumstances indicate that the matter in question has been definitively resolved.

Any additional personal data collected during the submission process will be deleted no later than seven days after submission.

Right to Object and Right to Erasure
The user may revoke their consent to the processing of personal data at any time. If the user contacts us via email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Withdrawal of consent and objection to storage may be submitted at any time to the contact information of the responsible person.

In this case, all personal data stored in the course of establishing contact will be deleted.

Maintenance of Denylists

Description and Scope of Data Processing
If we detect misuse of the services we offer, we will add the data associated with such misuse to appropriate denylists, which restrict or prevent the respective users from using our services.

This data includes:

1. email addresses
2. domains
3. IP addresses

This data is not stored together with other personal data belonging to the user. The data is not disclosed to third parties.

Legal Basis for Data Processing
The legal basis for creating the denylists is Art. 6(1)(f) GDPR.

As a precaution, we would like to point out that, particularly when blocking domains or IP addresses, it is usually impossible to inform the data subjects, or doing so would require a disproportionate amount of effort (Article 14(5)(b) of the GDPR).

Purpose of Data Processing
The storage of data serves to prevent misuse of our services and to ensure the security of our information technology systems.

This purpose also constitutes our legitimate interest in processing the data pursuant to Article 6(1)(f) of the GDPR.

Duration of Storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected.

In the case of IP addresses from which misuse of our services originated, this will only occur once we can reasonably assume that the IP address no longer poses a risk of misuse of our services.

Right to Object and Request Removal
The user of a blocked address may at any time use the contact information of the responsible person to request that the block be lifted.

If the user can credibly assure us that the misuse did not originate from them, the address will be removed from the denylists. However, any further misuse of our services originating from this address will inevitably result in the address being added to the denylists again.

Disclosure of Personal Data to Third Parties

Links to External Services

Our website contains links to external services in various places - that is, services that run on servers beyond our control and are therefore not covered by this privacy policy. As a general rule, we do not share any data with these external services.

For this reason, our links do not contain a “referral ID”; however, it is still possible for the destination service to determine which website the link originated from if the Referrer setting is enabled in the web browser - this setting is under the sole control of the user.

Examples of such external services:

• dsaforum.de - Privacy Policy
• Discord server - Privacy Policy
• Wikipedia - Privacy Policy

Impressum-Privatschutz (IP-Management)

Description and Scope of Data Processing

We use the services of Impressum-Privatschutz GmbH, Ludwig-Erhard-Str. 18, 20459 Hamburg, to manage the mail sent to us.

Legal Basis for Data Processing
The legal basis for the processing is Art. 6(1)(f) GDPR.

Purpose of Data Processing
The purpose of data processing is to ensure the fastest possible and secure receipt of mail sent to us.

This purpose also constitutes our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR.

Duration of Storage
To the best of our knowledge, the provider deletes the data as soon as it is no longer necessary to achieve the purpose for which it was collected.

Information about data protection at Impressum-Privatschutz GmbH can be found at impressum-privatschutz.de.

Right to Object and Right to Erasure
The processing of this data is strictly necessary for the administration of mail. Consequently, the user has no right to object.

Embedding Videos from External Services

Description and Scope of Data Processing
Our website embeds videos from external services in various places, such as Google LLC's YouTube site. These videos are not loaded until the user clicks “Load Video”.

When a video from the respective service is loaded for the first time, the user must explicitly confirm that personal data will be transferred to the external service. To the best of our knowledge, this applies to the following data:

1. The user’s IP address
2. The address of our website from which the video is loaded

Legal Basis for Data Processing
The legal basis for processing the data is the user’s consent Art. 6(1)(a) GDPR.

Purpose of data processing
The purpose of data processing is to load the requested video.

Retention Period
To the best of our knowledge, the provider deletes the data as soon as it is no longer necessary to achieve the purpose for which it was collected.

You can find information about data protection for these external services at:

• youtube.com and google.com.

Right to Object and Right to Erasure
The processing of this data is strictly necessary for loading the video. Consequently, the user has no option to object.

Rights of the Data Subject

If your personal data is processed, you are a data subject as defined in GDPR, and you have the following rights with respect to the controller:

Right to Access Information

You may request confirmation from the data controller as to whether we are processing your personal data.

If such processing is taking place, you may request the following information from the data controller:

1. the purposes for which the personal data is being processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients to whom your personal data has been or will be disclosed;
4. the planned duration of storage of your personal data or, if specific details cannot be provided, the criteria for determining the storage period;
5. the existence of a right to rectification or erasure of your personal data, a right to restrict processing by the controller, or a right to object to such processing;
6. the existence of a right to lodge a complaint with a supervisory authority;
7. all available information regarding the origin of the data, if the personal data was not collected from the data subject;
8. the existence of automated decision-making, including profiling, in accordance with Art. 22(1) and (4) of the GDPR and - at least in such cases - meaningful information about the logic involved, as well as the scope and intended effects of such processing on the data subject.

You have the right to request information regarding whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 of the GDPR in connection with the transfer.

Right to Rectification

You have the right to request that the data controller correct and/or complete your personal data if the processed personal data concerning you is inaccurate or incomplete. The data controller must make the correction without delay.

Right to Restriction of Processing

Under the following conditions, you may request the restriction of the processing of your personal data:

1. if you contest the accuracy of your personal data for a period that allows the controller to verify the accuracy of the personal data;
2. if the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of its use;
3. if the controller no longer needs the personal data for the purposes of the processing, but you need it to assert, exercise, or defend legal claims; or
4. if you have objected to the processing pursuant to Art. 21(1) GDPR and it has not yet been determined whether the controller’s legitimate grounds override your interests.

If the processing of your personal data has been restricted, such data - with the exception of its storage - may be processed only with your consent, or for the purpose of asserting, exercising, or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or a Member State.

If the restriction on processing has been imposed in accordance with the above conditions, the controller will notify you before the restriction is lifted.

Right to Erasure

Obligation to Delete

You may request that the controller immediately erase your personal data, and the controller is obligated to erase such data immediately if any of the following grounds apply:

1. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
2. You withdraw your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.
3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
4. Your personal data has been processed unlawfully.
5. The erasure of your personal data is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.
6. Your personal data was collected in connection with information society services offered pursuant to Art. 8(1) GDPR.

Disclosure to Third Parties

If the controller has made your personal data public and is obligated to erase it pursuant to Article 17(1) of the GDPR, the controller shall take appropriate measures, including technical measures, taking into account available technology and the cost of implementation, to inform controllers who process the personal data that you, as the data subject, have requested that they erase all links to such personal data or any copies or replicas of such personal data.

Exceptions

The right to erasure does not apply to the extent that the processing is necessary

1. for the exercise of the right to freedom of expression and information;
2. to comply with a legal obligation that requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) as well as Art. 9(3) of the GDPR;
4. for archiving purposes in the public interest, scientific or historical research purposes, or for statistical purposes pursuant to Art. 89(1) GDPR, to the extent that the right referred to in the section “Obligation to Erase” is likely to render impossible or seriously impair the achievement of the purposes of such processing; or
5. to assert, exercise, or defend legal claims.

Right to be Informed

If you have exercised your right to rectification, erasure, or restriction of processing with the data controller, the data controller is obligated to notify all recipients to whom your personal data has been disclosed of such rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to request information from the data controller regarding these recipients.

Right to Data Portability

You have the right to receive your personal data that you have provided to the data controller in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR, and
2. the processing is carried out by automated means.

In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another controller, provided this is technically feasible. The freedoms and rights of other individuals must not be infringed upon as a result.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right to Object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data that is carried out pursuant to Art. 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The data controller will no longer process your personal data unless they can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services - notwithstanding Directive 2002/58/EC - you have the option to exercise your right to object through automated procedures that use technical specifications.

Right to Withdraw Consent Under Data Protection Law

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Right to File a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority - in particular, in the Member State of your residence, your workplace, or the location of the alleged infringement - if you believe that the processing of your personal data violates the GDPR.

The supervisory authority to which the complaint was submitted shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.