Privacy Policy
1. Privacy at a Glance
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified. Detailed information on the subject of data protection can be found in our full privacy policy listed below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the “Information Regarding the Responsible Party” section of this privacy policy.
How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can be, for example, data that you enter into a contact form.
Other data is collected automatically or after your consent when you visit the website by our IT systems. These are mainly technical data (e.g., internet browser, operating system, or time of the page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Part of the data is collected to ensure error-free provision of the website. Other data can be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right to receive information about the origin, recipient, and purpose of your stored personal data free of charge at any time. You also have a right to request the rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time for the future.
In addition, you have the right to request the restriction of the processing of your personal data under certain circumstances, as well as the right to lodge a complaint with the competent supervisory authority.
2. Hosting and Third-Party Tools
External Hosting (Febas)
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, website access, and other data generated via a website.
The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).
We use the following hoster:
Febas – Inh. Roman Baumgärtner
Ostlandstraße 5D
49565 Bramsche
Germany
Data Processing Agreement (DPA): We have entered into a data processing agreement with the provider mentioned above. This is a contract required by data protection law, which ensures that they process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
Wordfence Security Plugin
We use the “Wordfence Security” plugin on this website to defend against cyber attacks, viruses, and malware. The provider is Defiant Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA.
The plugin sets cookies to recognize whether the visitor is a human or a robot. In addition, IP addresses are processed on Wordfence’s servers to block attacks (such as DDoS or brute-force attacks). The use of this plugin is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the most secure use possible and defense against harmful access. The “Live Traffic View” option is turned off to reduce data processing to the bare minimum.
Since data is transferred to the USA, standard contractual clauses (SCCs) have been concluded or the data transfer is based on the EU-US Data Privacy Framework.
3. General Notes and Mandatory Information
Information Regarding the Responsible Party (Controller)
The responsible party for data processing on this website is:
Jürgen Zuberer
Wormser Straße 17A
68309 Mannheim
Germany
Email: webmaster@kythira.info
Phone: +49(0)15228546999
The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (e.g., names, email addresses, etc.).
Storage Duration
Unless a more specific storage period has been specified within this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion takes place after these reasons no longer apply.
Note on Data Transfer to the USA
Tools from companies based in the USA are integrated into our website, among other things. When these tools are active, your personal data may be transferred to the US servers of the respective companies. We point out that the USA is not a third country with a level of data protection equivalent to that of the EU, unless an adequacy decision (such as the EU-US Data Privacy Framework) exists or standard contractual clauses have been concluded. US authorities (e.g., secret services) could process your data for surveillance purposes without you, as an EU citizen, having effective legal remedies.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. If processing has been restricted, this data – apart from its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
The supervisory authority responsible for the operator is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Information, Erasure, and Rectification
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipient, and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data.
4. Data Collection on This Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Host name of the accessing computer (IP address)
- Time of the server request
This data is technically necessary to display the website stably and securely. The processing is carried out on the basis of Art. 6(1)(f) GDPR, as the website operator has a legitimate interest in the technically error-free presentation and optimization of his website.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser bar.
Contact Form / Email Inquiries
If you send us inquiries via the contact form or email, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We do not pass on this data without your consent.
The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR if your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested.
Integration of Third-Party Services and Content
Our website occasionally includes content, services, and features from other providers. Examples of this include maps provided by Google Maps, GPS tracks from Wikiloc, YouTube videos, as well as graphics and images from other websites. In order for this data to be retrieved and displayed in the user’s browser, transmitting the IP address is technically necessary. Consequently, these providers (hereinafter referred to as “third-party providers”) will receive the respective user’s IP address.
While we strive to only use third-party providers that require the IP address solely to deliver the content, we have no control over whether they might store the IP address. In such cases, this process is typically used for statistical purposes, among other things. Should we become aware that an IP address is being stored, we will inform our users.
5. Consent Management, Plugins, and Performance Tools
Complianz Cookie Consent Plugin
This website uses the Privacy Suite for WordPress from Complianz to collect and record browser and device-based consents. For this function, your IP address is anonymized and stored in our database. This service does not process any personally identifiable information for marketing purposes and does not pass on any data to the service provider. The processing is carried out to fulfill a legal obligation (Art. 6(1)(c) GDPR in conjunction with the German TDDDG).
Jetpack Boost
We use the WordPress plugin “Jetpack Boost” on this website to optimize the loading speed and performance of our online offer. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA.
Jetpack Boost optimizes, among other things, CSS structures (Critical CSS), defers the loading of non-essential JavaScript, and enables the lazy loading of images. To provide these optimizations, especially for the cloud-based calculation of critical CSS, technical data (e.g., your IP address and server metadata) are transmitted to Automattic’s servers.
The use of Jetpack Boost is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in a technically optimized, fast, and user-friendly provision of the web portal. Since data can be transferred to the USA, the provider relies on the EU-US Data Privacy Framework or uses standard contractual clauses.
Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses cookies that enable an analysis of your use of the website. The processing takes place exclusively on the basis of your consent via the cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can revoke your consent at any time via the cookie settings on our website. We use Google Analytics exclusively with activated IP anonymization, so that your IP address is shortened by Google within member states of the EU or the EEA before being transmitted to the USA.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The Google Tag Manager is an auxiliary service that does not set cookies or evaluate user profiles itself, but exclusively controls the loading of other components (tags). These components may collect data to which the Tag Manager does not access.
Google Maps
This website uses the mapping service Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To ensure data protection on this website, Google Maps is deactivated by default. A connection to Google’s servers is only established if you actively agree to the activation via the cookie banner. The legal basis for processing your data is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG).
YouTube with Extended Data Protection
We embed videos from the YouTube platform. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in extended data protection mode. According to YouTube, this means that no information about visitors to this website is stored before they watch the video. As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. The loading and the associated data transmission are carried out on the basis of your consent via the cookie banner (Art. 6(1)(a) GDPR and § 25(1) TDDDG).
Changes to our privacy policy
To ensure that our privacy policy always complies with current legal requirements, we reserve the right to make changes at any time. This also applies if the privacy policy needs to be adapted due to new or revised services, such as new service offerings. The new privacy policy will then apply to your next visit to our website.
