Privacy Policy

Preamble
With the following privacy policy, we would like to inform you about the types of your personal data (hereinafter also referred to shortly as „data“) we process, for what purposes, and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the context of providing our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as „online offer“).

The terms used are not gender-specific.

Status: June 22, 2026

Controller
Stefan Zeuner

Erdmannstr. 10

04229 Leipzig

Germany

Email address: hello.stefanzeuner@gmail.com

Phone: +49 15 1414 8989

Legal Notice: https://www.stefanzeuner.de/imprint/

Overview of Processing Operations
The following overview summarizes the types of data processed and the purposes of their processing and refers to the data subjects.

Types of Processed Data

Meta, communication, and procedural data.
Log data.
Categories of Data Subjects
Employees.
Users.
Third parties.
Whistleblowers.
Purposes of Processing
Communication.
Security measures.
Firewall.
Feedback.

Provision of our online offer and user-friendliness.

Information technology infrastructure.
Whistleblower protection.
Public relations.

Key Legal Bases
Key legal bases under the GDPR: The following provides an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, should more specific legal bases be applicable in individual cases, we will inform you of these in the privacy policy.

Consent (Art. 6 (1) (1) (a) GDPR) – The data subject has given consent to the processing of his or her personal data for one or more specific purposes.

Legal obligation (Art. 6 (1) (1) (c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.

Legitimate interests (Art. 6 (1) (1) (f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. This includes, in particular, the Act on Protection Against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). The BDSG contains, in particular, special regulations on the right to access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and transfer as well as automated decision-making in individual cases including profiling. Furthermore, state data protection laws of the individual federal states may apply.

Note on the applicability of the GDPR and the Swiss DPA: This data protection notice serves to provide information both under the Swiss Data Protection Act (DPA) and under the General Data Protection Regulation (GDPR). For this reason, please note that due to the broader spatial application and for better understandability, the terms of the GDPR are used. In particular, instead of the terms „processing“ of „personal data“, „overriding interest“, and „highly sensitive personal data“ used in the Swiss DPA, the terms „processing“ of „personal data“ as well as „legitimate interest“ and „special categories of data“ used in the GDPR are employed. However, the legal meaning of the terms will continue to be determined in accordance with the Swiss DPA within the scope of its applicability.

Applicability of data protection regulations in the country of domicile: In the country in which the controller has its registered office, national data protection regulations apply in addition to the General Data Protection Regulation (GDPR).

Security Measures
We take appropriate technical and organizational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk.

The measures include, in particular, safeguarding the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data as well as access, entry, transfer, securing availability, and separation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the erasure of data, and responses to data threats. Furthermore, we already consider the protection of personal data during the development or selection of hardware, software, and procedures in accordance with the principle of data protection by design and by default.

Securing online connections through TLS/SSL encryption technology (HTTPS): In order to protect the data of users transmitted via our online services from unauthorized access, we use TLS/SSL encryption technology. Secure Sockets Layer (SSL) and Transport Layer Security (TLS) are the cornerstones of secure data transmission on the internet. These technologies encrypt the information transmitted between the website or app and the user’s browser (or between two servers), thereby protecting the data from unauthorized access. TLS, as the more advanced and secure version of SSL, ensures that all data transmissions meet the highest security standards. When a website is secured by an SSL/TLS certificate, this is signaled by the display of HTTPS in the URL. This serves as an indicator for users that their data is being transmitted securely and encrypted.

Transfer of Personal Data
In the context of our processing of personal data, it happens that the data is transferred to other bodies, companies, legally independent organizational units, or persons, or disclosed to them. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude corresponding contracts or agreements that serve to protect your data with the recipients of your data.

International Data Transfers
Data processing in third countries: If we transfer data to a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs in the context of using third-party services or disclosing or transferring data to other persons, bodies, or companies (which becomes recognizable by the postal address of the respective provider or if the transfer of data to third countries is explicitly pointed out in the privacy policy), this always takes place in accordance with the legal requirements.

For data transfers to the USA, we primarily rely on the Data Privacy Framework (DPF), which was recognized as a secure legal framework by an adequacy decision of the EU Commission dated July 10, 2023. In addition, we have concluded standard contractual clauses with the respective providers that correspond to the specifications of the EU Commission and establish contractual obligations to protect your data.

This dual protection ensures comprehensive security for your data: The DPF forms the primary level of protection, while the standard contractual clauses serve as additional security. Should changes occur within the framework of the DPF, the standard contractual clauses step in as a reliable fallback option. In this way, we ensure that your data always remains adequately protected, even in the event of political or legal changes.

For the individual service providers, we inform you whether they are certified under the DPF and whether standard contractual clauses are in place. Further information on the DPF and a list of certified companies can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/.

For data transfers to other third countries, corresponding security measures apply, in particular standard contractual clauses, explicit consents, or transfers required by law. Information on third-country transfers and applicable adequacy decisions can be found on the information page of the EU Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de.

General Information on Data Storage and Erasure
We erase personal data that we process in accordance with the legal regulations as soon as the underlying consents are withdrawn or no further legal bases for processing exist. This applies to cases where the original purpose of processing no longer applies or the data is no longer required. Exceptions to this regulation exist if statutory obligations or special interests require a longer retention or archiving of the data.

In particular, data that must be kept for commercial or tax reasons or whose storage is necessary for the enforcement of legal claims or to protect the rights of other natural or legal persons must be archived accordingly.

Our data protection notices contain additional information on the retention and erasure of data that applies specifically to certain processing operations.

If there are multiple specifications regarding the retention period or erasure deadlines of a specific data item, the longest period is always applicable. Data that is no longer stored for the originally intended purpose, but due to legal requirements or other reasons, is processed by us exclusively for the reasons that justify its retention.

Start of the period at the end of the year: If a period does not explicitly start on a specific date and is at least one year long, it starts automatically at the end of the calendar year in which the event triggering the period occurred. In the case of ongoing contractual relationships within the scope of which data is stored, the event triggering the period is the time at which the termination or other termination of the legal relationship becomes effective.

Provision of the Online Offer and Web Hosting
We process the data of users in order to be able to provide them with our online services. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or terminal device.

Processed data types: Usage data (e.g., page views and duration of stay, click paths, intensity and frequency of use, types of devices and operating systems used, interactions with content and functions); meta, communication, and procedural data (e.g., IP addresses, time specifications, identification numbers, involved persons); log data (e.g., log files concerning logins or the retrieval of data or access times); content data (e.g., text or image messages and contributions as well as information relating to them, such as details on authorship or time of creation).

Data subjects: Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Provision of our online offer and user-friendliness; information technology infrastructure (operation and provision of information systems and technical devices (computers, servers, etc.)); security measures; firewall.

Retention and erasure: Erasure in accordance with the specifications in the section „General Information on Data Storage and Erasure“.

Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR).

Further information on processing operations, procedures, and services:

Provision of the online offer on rented storage space: For the provision of our online offer, we use storage space, computing capacity, and software that we rent or otherwise obtain from a corresponding server provider (also called „web hoster“); Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR).

Collection of access data and log files: Access to our online offer is logged in the form of so-called „server log files“. The server log files may include the address and name of the retrieved web pages and files, date and time of retrieval, transmitted data volumes, notification of successful retrieval, browser type and version, the user’s operating system, referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. The server log files can be used for security purposes, e.g., to avoid an overload of the servers (in particular in the case of abusive attacks, so-called DDoS attacks), and to ensure the utilization of the servers and their stability; Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR). Erasure of data: Log file information is stored for a maximum period of 30 days and then deleted or anonymized. Data whose further retention is required for evidentiary purposes is excluded from erasure until final clarification of the respective incident.

STRATO: Services in the field of providing information technology infrastructure and related services (e.g., storage space and/or computing capacities); Service provider: STRATO AG, Pascalstraße 10, 10587 Berlin, Germany; Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR); Website: https://www.strato.de; Privacy policy: https://www.strato.de/datenschutz/. Data processing agreement: Provided by the service provider.

WordPress.com: Hosting and software for the creation, provision, and operation of websites, blogs, and other online offers; Service provider: Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland; Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR); Website: https://wordpress.com; Privacy policy: https://automattic.com/privacy/; Data processing agreement: https://wordpress.com/support/data-processing-agreements/. Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses (provided by the service provider).

Wordfence: Firewall, security, and error detection functions to detect and prevent unauthorized access attempts as well as technical vulnerabilities that could enable such access. For these purposes, cookies and similar storage methods required for this purpose can be used and security logs created during the audit and in particular in the event of unauthorized access. In this context, the IP addresses of the users, a user identification number, and their activities including the time of access are processed and stored and matched with the data provided by the provider of the firewall and security function and transmitted to them; Service provider: Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA; Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR); Website: https://www.wordfence.com; Privacy policy: https://www.wordfence.com/privacy-policy/; Basis for third-country transfers: Standard Contractual Clauses (https://www.wordfence.com/standard-contractual-clauses/). Further information: https://www.wordfence.com/help/general-data-protection-regulation/.

Use of Cookies
The term „cookies“ refers to functions that store and read information on users‘ terminal devices. Cookies can also be used for different purposes, such as for the functionality, security, and convenience of online offers as well as the creation of analyses of visitor flows. We use cookies in accordance with the legal regulations. For this purpose, we obtain the prior consent of the users if required. If consent is not necessary, we rely on our legitimate interests. This applies if the storage and reading of information is essential in order to be able to provide explicitly requested content and functions. These include, for example, the storage of settings and ensuring the functionality and security of our online offer. Consent can be withdrawn at any time. We inform clearly about their scope and which cookies are used.

Notes on data protection legal bases: Whether we process personal data with the help of cookies depends on consent. If consent is given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the respective services and procedures.

Storage period: With regard to the storage period, a distinction is made between the following types of cookies:

Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed his terminal device (e.g., browser or mobile application).

Permanent cookies: Permanent cookies remain stored even after the terminal device is closed. For example, the login status can be saved and preferred content can be displayed directly when the user visits a website again. Likewise, the user data collected with the help of cookies can be used for reach measurement. Unless we provide users with explicit details on the type and storage period of cookies (e.g., in the context of obtaining consent), they should assume that these are permanent and the storage period can be up to two years.

General notes on withdrawal and objection (Opt-out): Users can withdraw the consents they have given at any time and also declare an objection to the processing in accordance with the legal regulations, also by means of the privacy settings of their browser.

Processed data types: Meta, communication, and procedural data (e.g., IP addresses, time specifications, identification numbers, involved persons).

Data subjects: Users (e.g., website visitors, users of online services).

Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR). Consent (Art. 6 (1) (1) (a) GDPR).

Further information on processing operations, procedures, and services:

Processing of cookie data on the basis of consent: We use a consent management solution in which the consent of the users for the use of cookies or for the procedures and providers mentioned in the framework of the consent management solution is obtained. This procedure serves to obtain, log, manage, and withdraw consents, in particular regarding the use of cookies and comparable technologies used to store, read, and process information on users‘ terminal devices. Within the framework of this procedure, the consents of the users for the use of cookies and the associated processing of information, including the specific processing and providers mentioned in the consent management procedure, are obtained. Users also have the option to manage and withdraw their consents. The declarations of consent are stored in order to avoid a renewed query and to be able to provide proof of consent in accordance with legal requirements. Storage takes place on the server side and/or in a cookie (so-called opt-in cookie) or by means of comparable technologies in order to be able to assign the consent to a specific user or their device. Unless specific details on the providers of consent management services are available, the following general notes apply: The duration of the storage of consent is up to two years. In the process, a pseudonymous user identifier is created, which is stored together with the time of consent, details on the scope of consent (e.g., relevant categories of cookies and/or service providers) as well as information about the browser, the system, and the terminal device used; Legal bases: Consent (Art. 6 (1) (1) (a) GDPR).

Presences in Social Networks (Social Media)
We maintain online presences within social networks and process user data in this context to communicate with the users active there or to offer information about us.

We point out that user data may be processed outside the area of the European Union. This may result in risks for users, because it could, for example, make the enforcement of user rights more difficult.

Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on user behavior and resulting interests of the users. The latter may in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. For this purpose, cookies are usually stored on the users‘ computers, in which the usage behavior and interests of the users are stored. In addition, data can also be stored in the usage profiles independently of the devices used by the users (in particular if they are members of the respective platforms and logged in there).

For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the privacy policies and details of the operators of the respective networks.

Also in the case of requests for information and the assertion of data subject rights, we point out that these can be asserted most effectively with the providers. Only the latter have access to the user data in each case and can directly take corresponding measures and provide information. Should you nevertheless need help, you can contact us.

Processed data types: Contact data (e.g., postal and email addresses or phone numbers); content data (e.g., text or image messages and contributions as well as information relating to them, such as details on authorship or time of creation). Usage data (e.g., page views and duration of stay, click paths, intensity and frequency of use, types of devices and operating systems used, interactions with content and functions).

Data subjects: Users (e.g., website visitors, users of online services).

Purposes of processing and legitimate interests: Communication; feedback (e.g., collecting feedback via online form); public relations.

Retention and erasure: Erasure in accordance with the specifications in the section „General Information on Data Storage and Erasure“.

Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR).

Further information on processing operations, procedures, and services:

LinkedIn: Social network – Together with LinkedIn Ireland Unlimited Company, we are responsible for the collection (but not the further processing) of data from visitors used to create the „Page Insights“ (statistics) of our LinkedIn profiles. This data includes information about the types of content users view or interact with, as well as the actions they take. In addition, details about the devices used are recorded, such as IP addresses, operating system, browser type, language settings, and cookie data, as well as information from user profiles, such as job function, country, industry, hierarchy level, company size, and employment status. Data protection information on the processing of user data by LinkedIn can be found in LinkedIn’s privacy notice: https://www.linkedin.com/legal/privacy-policy. We have concluded a special agreement with LinkedIn Ireland („Page Insights Joint Controller Addendum“, https://legal.linkedin.com/pages-joint-controller-addendum), which regulates in particular which security measures LinkedIn must observe and in which LinkedIn has agreed to fulfill the rights of data subjects (i.e., users can, for example, direct access or erasure requests directly to LinkedIn). The rights of users (in particular the right to access, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with LinkedIn. The joint responsibility is limited to the collection and transfer of data to LinkedIn Ireland Unlimited Company, a company based in the EU. The further processing of the data is the exclusive responsibility of LinkedIn Ireland Unlimited Company, in particular as regards the transfer of data to the parent company LinkedIn Corporation in the USA; Service provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6 (1) (1) (f) GDPR); Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Basis for third-country transfers: Data Privacy Framework (DPF), Standard Contractual Clauses (https://www.linkedin.com/legal/privacy-policy). Option for objection (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data Protection Information for Whistleblowers
In this section, you will find information on how we handle data from persons who provide reports (whistleblowers), as well as from affected and involved parties within the framework of our whistleblower procedure. Our goal is to provide an uncomplicated and… [Note: Text area blurred in source due to missing license / premium text content].

Legal bases (Germany): Insofar as we process data to fulfill our statutory obligations in accordance with the Whistleblower Protection Act (HinSchG), the legal basis for processing is Article 6 (1) (1) (c) GDPR and, in the case of special categories of personal data, Art. 9 (2) (g) GDPR, § 22 BDSG, each in conjunction with § 10 HinSchG. This refers to the obligation to establish and operate an internal whistleblower reporting office, the fulfillment of its statutory tasks and, in the case of using the data collected in the reporting procedure, taking further… [Note: Text area blurred in source due to missing license / premium text content].

Processed data types: Within the scope of receiving and processing reports as well as in the subsequent whistleblower procedure, we can collect various data. These include, in particular, the data provided by a whistleblower, such as: name, contact details, and location of the person providing the report, names and data regarding potential witnesses or persons affected by the report, names and data regarding the persons against whom the report is directed, data on the alleged misconduct, other relevant details, provided that… [Note: Text area blurred in source due to missing license / premium text content].

Special categories of personal data: It may happen that we collect special types of personal data within the scope of our activities, in particular if these are communicated by a whistleblower. These include: health-related data of a person, data on racial or ethnic origin… [Note: Text area blurred in source due to missing license / premium text content].

Use of our online forms: Please note that there is the possibility to submit reports anonymously. In order to ensure the security of your data when using our online forms, we recommend accessing them in the so-called ‚incognito mode‘ of your browser. How to open an incognito window: a) On a Windows PC: Open your browser and press Ctrl+Shift+N; b) On a Mac: Open your browser and press Command+Shift+N; c) On mobile devices: Switch to private mode via the tab menu. When accessing our website in normal mode, your… [Note: Text area blurred in source due to missing license / premium text content].

Indication of names: You have the option to submit reports anonymously. Unless prohibited by national legislation, we recommend, however, providing your name and contact details. This enables us to follow up on the report more effectively and, if necessary, contact you directly. If you provide your name and contact details, your identity will be kept strictly confidential… [Note: Text area blurred in source due to missing license / premium text content].

Provision of data to third parties: Data related to the submitted reports will only be passed on by us to third parties under certain circumstances. This happens either a) if you have given us your explicit consent to do so, or b) if there is a legal obligation to pass on the data. Potential third parties include public authorities, government, regulatory, or tax authorities, if the transfer is necessary to fulfill a legal or regulatory obligation. In addition, we may commission lawyers and other professional advisers within the scope of legal regulations. These are authorized to investigate alleged misconduct and take necessary measures following an investigation, such as initiating disciplinary or legal proceedings. In addition, service providers carefully selected and monitored by us may receive data for these purposes (for example, operators of a web-based reporting system). However, these service providers are contractually obliged to comply with applicable data protection regulations within the scope of a data processing agreement.

Data retention and erasure: Personal data will only be processed for as long as is necessary to fulfill the processing purposes described above. If this data is no longer necessary for the stated purposes, it will be deleted. In certain situations… [Note: Text area blurred in source due to missing license / premium text content].

Technical and organizational measures: We have implemented the necessary contractual, technical, and organizational measures to ensure the security of all data processed by us. This data is processed exclusively for the specified purposes. Incoming reports are processed by… [Note: Text area blurred in source due to missing license / premium text content].

Processed data types: Inventory data (e.g., full name, residential address, contact information, customer number… [blurred premium content]); employee data (information on employees and other persons in an… [blurred premium content]); contact data (e.g., postal and email addresses or… [blurred premium content]); content data (e.g., text or image messages and contributions as well as information relating to them, such as details on authorship… [blurred premium content]); usage data (e.g., page views and duration of stay, click paths, intensity and frequency of use, types of devices and operating systems used, interactions with… [blurred premium content]).

Data subjects: Employees (e.g., employees, applicants, temporary staff, and other… [blurred premium content]); third parties; whistleblowers.

Purposes of processing and legitimate interests: Whistleblower protection.

Retention and erasure: Erasure in accordance with specifications in the section „General Information on Data Storage and Erasure“.

Legal bases: Consent (Art. 6 (1) (1) (a) GDPR); Legal obligation (Art. 6 (1) (1) (c) GDPR); Legitimate interests (Art. 6 (1) (1) (f) GDPR).

Changes and Updates
We ask you to inform yourself regularly about the content of our privacy policy. We adapt the privacy policy as soon as changes to the data processing operations carried out by us make this necessary. We will inform you as soon as the changes require a cooperative action on your part (e.g., consent) or other individual notification becomes necessary.

Insofar as we provide addresses and contact information of companies and organizations in this privacy policy, please note that the addresses may change over time and we ask you to check the details before contacting them.

Definitions of Terms
In this section, you will find an overview of the terminology used in this privacy policy. Insofar as the terms are legally defined, their legal definitions apply. The following explanations, on the other hand, are intended primarily for better understanding.

Employees: Employees are persons who are in an employment relationship, whether as staff members, employees, or in similar positions. An employment relationship is a legal relationship between an employer and an employee, established by an employment contract or agreement. It includes the obligation of the employer to pay remuneration to the employee, while the employee performs his or her work. The employment relationship comprises various phases, including the establishment, in which the employment contract is concluded, the performance, in which the employee exercises his or her work activity, and the termination, when the employment relationship ends, whether by dismissal, termination agreement, or otherwise. Employee data is any information relating to these persons and standing in the context of their employment. This includes aspects such as personal identification data, identification numbers, salary and bank details, working hours, holiday entitlements, health data, and performance appraisals.

Inventory data: Inventory data comprises essential information required for the identification and management of contractual partners, user accounts, profiles, and similar allocations. This data may include, among other things, personal and demographic details such as names, contact information (addresses, phone numbers, email addresses), dates of birth, and specific identifiers (user IDs). Inventory data forms the basis for any formal interaction between persons and services, institutions, or systems by enabling unambiguous allocation and communication.

Firewall: A firewall is a security system that protects a computer network or an individual computer from unwanted network access.

Content data: Content data comprises information generated in the course of creating, editing, and publishing content of all kinds. This category of data can include texts, images, videos, audio files, and other multimedia content published on various platforms and media. Content data is not only limited to the actual content itself, but also includes metadata that provides information about the content itself, such as tags, descriptions, author information, and publication dates.

Contact data: Contact data is essential information that enables communication with persons or organizations. It includes, among other things, phone numbers, postal addresses, and email addresses, as well as means of communication such as social media handles and instant messaging identifiers.

Meta, communication, and procedural data: Meta, communication, and procedural data are categories containing information about the way data is processed, transmitted, and managed. Meta-data, also known as data about data, includes information describing the context, origin, and structure of other data. It can include specifications on file size, creation date, the author of a document, and modification histories. Communication data records the exchange of information between users via various channels, such as email traffic, call logs, messages in social networks, and chat histories, including the persons involved, timestamps, and transmission paths. Procedural data describes the processes and procedures within systems or organizations, including workflow documentation, logs of transactions and activities, as well as audit logs used to track and review operations.

Usage data: Usage data refers to information recording how users interact with digital products, services, or platforms. This data includes a wide range of information showing how users utilize applications, which features they prefer, how long they stay on certain pages, and via which paths they navigate through an application. Usage data can also include the frequency of use, timestamps of activities, IP addresses, device information, and location data. It is particularly valuable for analyzing user behavior, optimizing user experiences, personalizing content, and improving products or services. In addition, usage data plays a crucial role in detecting trends, preferences, and potential problem areas within digital offers.

Personal data: „Personal data“ means any information relating to an identified or identifiable natural person (hereinafter „data subject“); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g., cookie), or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

Log data: Log data is information about events or activities logged in a system or network. This data typically contains information such as timestamps, IP addresses, user actions, error messages, and other details about the use or operation of a system. Log data is often used to analyze system problems, for security monitoring, or to generate performance reports.

Controller: „Controller“ means the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processing: „Processing“ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers practically any handling of data, whether collecting, evaluating, storing, transmitting, or erasing.

Created with the free Datenschutz-Generator.de by Dr. Thomas Schwenke