Privacy notice
What is processed when you visit this website — and what is not.
Stand:
In short
This is a translation for convenience. In case of doubt, the German version of this page prevails.
This website currently sets no advertising or analytics cookies. It embeds no content from third-party servers; even the typeface is served from our own server.
For the public part of this website no consent banner is currently required, because no cookies or comparable technologies requiring consent are used.
What is processed: the server access log and our own, cookie-free reach measurement. Both are described in detail below.
Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Bedirhan Erdem, Jägerstr. 51, 45699 Herten, Deutschland
Email: kontakt@lepost.de
No data protection officer has been appointed; the conditions of Art. 37 GDPR and § 38 of the German Federal Data Protection Act are not met.
Hosting
This website runs on a server provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. The server is located in Germany.
A data processing agreement under Art. 28 GDPR is in place with the provider.
Server access log
Every time a page is requested, the server automatically records information sent by your browser. This is technically unavoidable and cannot be switched off without rendering the website unusable.
- Data
- IP address, date and time, requested address, status code, amount of data transferred, referring page, browser identification
- Purpose
- Delivering the pages, detecting and defending against attacks and faults, tracing errors
- Legal basis
- Art. 6 (1) (f) GDPR — legitimate interest in secure and error-free operation
- Retention
- 7 days, then deleted automatically
- Recipients
- none — the logs do not leave the server
Reach measurement
We measure how often an article is opened and how far it is read. The measurement runs on our own server. No cookie is set, nothing is stored in your browser, and no third-party service is involved.
To avoid counting a visit twice, the system has to recognise that the same person already read the same article on the same day. For this, the date, the IP address and the browser identification are combined into a check value (HMAC-SHA-256 using a secret key that is not stored in the database). Only that check value is stored.
The IP address cannot be derived from it. Because the date is part of the input, the value changes every day — no history across several days can be built from it.
- Data
- Check value (64 characters), article, day, type of event, type of referral (search engine, referral, direct)
- NOT stored
- IP address, browser identification, full referring address
- Purpose
- Counting views and readers without double counting
- Legal basis
- Art. 6 (1) (f) GDPR — legitimate interest in reach measurement that works without profiling
- Retention
- 35 days; afterwards only daily totals remain, which relate to no one
- Consent
- not required — nothing is stored in or read from your device (§ 25 German TDDDG)
Cookies
For readers, this website sets no cookie.
A single cookie is created when signing in to the non-public editorial area. It is named “lepost_session”, contains a random string, cannot be read by scripts in the browser and is transmitted over HTTPS only. It is technically necessary to keep a session alive and serves no other purpose. Legal basis: § 25 (2) no. 2 TDDDG.
Typefaces
The typeface used is downloaded when the website is built and served from our own server. No connection to Google or any other provider is made when you visit the site; your IP address is not transmitted there.
Contacting us
If you write to us, we process your message and sender details in order to reply. The legal basis is Art. 6 (1) (f) GDPR, or Art. 6 (1) (b) GDPR for contractual matters.
Messages are deleted once the enquiry has been dealt with conclusively and no statutory retention obligation applies.
Google AdSense
No advertising services are currently used. In particular, Google AdSense is not currently activated; no data is transmitted to Google.
This section is nevertheless shown so that it is clear what would change. Should advertising or an external advertising service be integrated in future, this privacy notice will be adapted beforehand. Any consent required by law will be obtained before activation.
No profiling, no automated decisions
No profiling within the meaning of Art. 4 (4) GDPR takes place. There is no automated decision-making within the meaning of Art. 22 GDPR producing legal effects concerning you.
Content is not personalised: every visitor sees the same page.
Your rights
In respect of your personal data you have the following rights against us:
- Access to whether and which data we process (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on a legitimate interest (Art. 21 GDPR)
Right to object in particular
Where we process data on the basis of a legitimate interest — here the server access log and the reach measurement — you may object at any time on grounds relating to your particular situation.
An informal message to kontakt@lepost.de is sufficient. We will then stop processing the data concerned unless we can demonstrate compelling legitimate grounds which override your interests.
Complaint to a supervisory authority
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority at our place of residence is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
You may also contact the supervisory authority of your habitual residence.
Changes to this notice
This notice describes the state of the technology and the processing as of the date given above. If something about the website changes, it will be adapted. The date is shown at the top of the page so that it remains clear which version you read.