The responsible party within the meaning of the data protection laws, in particular the EU General Data Protection Regulation (DSGVO), is:
waldhacker UG (haftungsbeschränkt)
c/o Ralf Zimmermann
You can exercise the following rights at any time using the contact details provided for our data protection officer:
- Information about your data stored by us and its processing (Art. 15 DSGVO),
- Correction of incorrect personal data (Art. 16 DSGVO),
- deletion of your data stored by us (Art. 17 DSGVO),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
- objection to the processing of your data by us (Art. 21 DSGVO) and
- Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us consent, you can revoke this at any time with effect for the future.
You may at any time submit a complaint to a supervisory authority, e.g. the competent supervisory authority in the federal state of your residence or the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with address can be found at:
Collection of general information when visiting our website
Nature and purpose of the processing:
When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected.
This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.
In particular, they are processed for the following purposes:
- Ensuring that the website connection is established without any problems,
- Ensuring a smooth use of our website,
- Evaluation of system security and stability, and
- to optimize our website.
We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated anonymously by us, if necessary, in order to optimize our Internet presence and the technology behind it.
Legal basis and legitimate interest:
The processing is carried out pursuant to Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website.
Recipients of the data may be technical service providers who act as order processors for the operation and maintenance of our website.
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.
In the case of storage of data in log files, this is the case after 14 days at the latest. Storage beyond this period is possible.
In this case, the IP addresses of the users are anonymized, so that an assignment of the calling client is no longer possible.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required.
However, without the IP address, the service and functionality of our website is not guaranteed.
In addition, individual services and services may not be available or may be limited. For this reason, an objection is excluded.
Our hoster collects the following data in so-called log files, which your browser transmits:
IP address, the address of the previously visited website (referer request header), date and time of the request, time zone difference from Greenwich Mean Time, content of the request, HTTP status code, amount of data transferred,
Website from which the request comes and information about the browser and operating system.
This is necessary to display our website and to ensure stability and security. This corresponds to our legitimate interest within the meaning of Art. 6 para. 1 p. 1 lit. f DSGVO.
There is no tracking and we do not have direct access to this data, but only receive an anonymized statistical summary.
This includes the address of the previously visited page, the frequency of each page viewed and the number of unique visitors.
We do not merge this data with any other data.
We use the following hoster for the provision of our website:
88 Colin P Kelly Jr St
San Francisco, CA 94107
This is the recipient of your personal data. This corresponds to our legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f DSGVO, not to have to maintain a server on our premises ourselves. The server is located in the USA.
For more information on opt-out and removal options against GitHub, please visit: https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-privacy-statement#github-pages
You have the right to object to the processing. Whether the objection is successful is to be determined within the framework of a balancing of interests.
The data will be deleted as soon as the purpose of the processing ceases to apply.
The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.
GitHub has implemented compliance measures for international data transfers.
These apply to all global activities where GitHub processes personal data of individuals in the EU.
These measures are based on the EU Standard Contractual Clauses (SCCs).
For more information, please visit: https://docs.github.com/en/free-pro-team@latest/github/site-policy/github-data-protection-addendum#attachment-1–the-standard-contractual-clauses-processors
In principle, an order processing contract must be concluded with the hoster.
The Bavarian State Office for Data Protection Supervision has made an exception for hosting purely static websites.
In the event that the website is used for self-expression, e.g. by associations or small businesses, no personal data flows to the operator and no tracking takes place, there is no commissioned processing.
It goes on to say:
„Die Tatsache, dass auch beim Hosting von statischen Webseiten zwangsläufig IP-Adressen, d.h. personenbezogene Daten, verarbeitet werden müssen, führt nicht zur Annahme einer Auftragsverarbeitung.
Das wäre nicht sachgerecht.
Die (kurzfristige) IP-Adressenspeicherung ist vielmehr noch der TK-Zugangsvermittlung des Website-Hosters nach dem TKG zuzurechnen und dient in erster Linie Sicherheitszwecken des Hosters.“
We assume that this exception applies to GitHub Pages.
Use of web analytics tools
In order to understand the use of our website and improve it, we use the web analytics tool Plausible Analytics.
Plausible does not set cookies, does not store any information in the browser, and generally does not collect any personal data.
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Information about your right to object according to Art. 21 DSGVO
Right to object on a case-by-case basis
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you,
which is carried out on the basis of Art. 6 para. 1 lit. f DSGVO (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing,
which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
Recipient of an opposition
Ralf Zimmermann (email@example.com)
We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration.
Questions for the data protection officer
If you have any questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organization directly:
Ralf Zimmermann (firstname.lastname@example.org)