furtka/website/content/datenschutz.md
Daniel Maksymilian Syrnicki 2fbafd5c77
Some checks failed
CI / test (push) Waiting to run
Build ISO / build-iso (push) Successful in 18m1s
CI / lint (push) Successful in 24s
CI / markdown-links (push) Successful in 18s
CI / validate-json (push) Successful in 21s
Deploy site / deploy (push) Has been cancelled
feat(website): logo poll at /logo/ with cookie-free vote counter
Two marks (M and R) side by side, EN + DE, with the site-header and real
16 px favicon context for each. Votes go to ops/poll/pollsvc.py, a stdlib
Python service behind nginx at /api/poll/ (SQLite, systemd DynamicUser,
rate-limited). Devices are counted once via a salted hash of IP + user
agent; the privacy pages document it.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MScAinbyMdeNc7H2BZdnnG
2026-08-26 12:57:23 +02:00

95 lines
2.9 KiB
Markdown

---
title: "Privacy"
translationKey: "privacy"
url: /privacy/
sitemap:
priority: 0.2
---
### In short
This website sets **no cookies**, loads **no third-party fonts or
scripts**, embeds **no analytics or tracking services**, and contains
**no external embeds** (YouTube, Maps, social buttons, …). The only
technical data collected is short-lived server access logs — plus, while
the [logo poll](/logo/) is running, one salted hash per vote (see below).
### Controller
<address>
Daniel Maksymilian Syrnicki<br>
Hauptstraße 35<br>
55569 Monzingen<br>
Germany<br>
Email: <a href="mailto:hallo@furtka.org">hallo@furtka.org</a>
</address>
### Server logs
When you load a page, your browser sends technically necessary data to
the server, which stores it in log files:
- Date and time of the request
- IP address (in shortened form)
- Requested URL
- HTTP status code and bytes transferred
- Referrer (if sent by the browser)
- User-agent string
**Purpose:** serving the website and defending against abusive traffic.
**Legal basis:** Art. 6(1)(f) GDPR — legitimate interest in operation
and security.
**Retention:** up to 30 days, then automatically deleted.
**Recipients:** none. The site runs on our own infrastructure; no
external processor is involved.
**Transfers outside the EU/EEA:** none.
### Logo poll
The page [/logo/](/logo/) lets you vote between two logo proposals. So
that each device is counted once without a cookie, the poll server stores
a **salted SHA-256 hash of your IP address and browser identification**
together with your choice and the time of the vote. The hash cannot be
turned back into the address; the salt never leaves the server.
**Purpose:** counting votes once per device.
**Legal basis:** Art. 6(1)(f) GDPR — legitimate interest in an honest
tally; voting is voluntary.
**Retention:** until the poll is closed, then the database is deleted.
**Recipients:** none.
### Cookies and tracking
None. No cookies are set, no localStorage or sessionStorage is used, and
no tracking or analytics services are embedded. Because of this, no
consent under § 25 TDDDG (German implementation of the ePrivacy
directive) is required.
### Your rights
You have the right at any time to:
- Information about the data stored about you (Art. 15 GDPR)
- Correction of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
Send requests to hallo@furtka.org.
### Right to complain
You have the right to file a complaint with a data protection
supervisory authority. The competent one is:
**Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Rheinland-Pfalz**
Hintere Bleiche 34, 55116 Mainz, Germany
Website: <https://www.datenschutz.rlp.de>
### Last updated
This statement was last updated on 2026-08-26.
The German version of this privacy statement is the legally binding one.