Privacy Policy

1. Data Controller

You can find information about the data collector in our Imprint.

2. Purpose of Data Processing

We collect and process your personal data solely for the purpose of reviewing and handling reports of allegedly illegal content in accordance with Art. 16 of the EU Regulation 2022/2065 (Digital Services Act - DSA).

3. Data Collected

When submitting a report, we may collect the following information, depending on what you provide:

4. Legal Basis

The legal basis for this processing is Art. 6(1)(c) GDPR (legal obligation under the DSA) and Art. 6(1)(f) GDPR (legitimate interest in handling and documenting illegal content reports).

5. Retention Period

Your data will be stored for up to 6 years unless longer legal retention periods apply. Earlier deletion will occur if the data is no longer needed for processing purposes.

6. Data Recipients

The collected data will only be processed internally and will not be shared with third parties unless legally required or mandated by authorities.

7. Use of Cloudflare Turnstile CAPTCHA

To protect our website forms from automated abuse and spam (e.g., bots), we use Cloudflare Turnstile, a privacy-focused security service provided by Cloudflare, Inc. When you interact with a form on our website, Turnstile performs a non-interactive challenge to verify that you are not a bot. This process involves a connection to challenges.cloudflare.com, a third-party service operated by Cloudflare.

Data Processed: Turnstile may process certain technical data, such as your IP address and browser information, to perform the verification. This data is used solely for the purpose of ensuring the security and functionality of our forms and is considered essential for the operation of our website.

Cookies: Cloudflare Turnstile does not set cookies or use tracking technologies for non-essential purposes, such as advertising or analytics.

Legal Basis: The use of Turnstile is based on our legitimate interest in protecting our website from automated abuse, in accordance with Art. 6(1)(f) GDPR. As an essential service, it does not require user consent under the EU ePrivacy Directive or Germany’s TTDSG.

Data Transfers: As Cloudflare is a U.S.-based company, data processed by Turnstile may be transferred to the United States. Cloudflare complies with GDPR through a Data Processing Agreement (DPA) and Standard Contractual Clauses (SCCs) to ensure adequate protection of your data. For more details, please see Cloudflare’s Privacy Policy at https://www.cloudflare.com/privacypolicy/.

8. Your Rights

You have the right to request:

To exercise your rights, please contact us here.

9. Voluntary Information

You may submit reports anonymously. Providing your name and email address is optional. However, without an email address, we will not be able to send you a confirmation or decision regarding your report.

10. Data Security

We use appropriate technical and organizational measures to protect your data from unauthorized access, loss, or tampering.