Data protection
What this site learns about you.
Information under Article 13 of the General Data Protection Regulation. The short version: analytics and conversion tracking load only after your consent; without consent no tracking request reaches the providers.
Controller
- Name
- Pierre Stephan
- Address
- Altensteiner Str. 131, 36448 Bad Liebenstein, Germany
- Data protection officer
- not appointed — the statutory conditions do not apply to this operation
Server log files
When you open a page your browser transmits technically necessary data which the server records: IP address, date and time, the requested path, the transfer status, the volume transferred and the identifier your browser reports. A page cannot be delivered without them.
Purpose: delivering the page, and keeping the service stable and secure. Legal basis: Article 6(1)(f) GDPR — legitimate interest in technically sound and secure operation. This data is not combined with other sources.
- Hosting provider
- Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland
- Content delivery network
- Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
The domain is delivered through a content delivery network. Its servers sit between your browser and this server, terminate the transport encryption and thereby process the same connection data described above — your IP address in particular. The legal basis is Article 6(1)(f) GDPR: legitimate interest in availability and in defending against attacks. Transfer to third countries is not excluded; it rests on the European Commission’s standard contractual clauses.
Cookies
Without your consent, no cookies are set on the public pages of this network. For measurement with Google Analytics and Microsoft Advertising we ask beforehand — through the bar at the bottom of the page, which appears for as long as you have not decided. Only if you agree there is the script loaded and are cookies set. If you decline, or decide nothing at all, neither happens.
One cookie exists in the editorial area under /admin and /editor: it keeps the authorised person signed in. It is set only on sign-in, is strictly necessary for that protected area (§ 25 (2) no. 2 TDDDG) and does not affect visitors to the public pages.
External services and fonts
This site loads no content from third-party servers as long as you have not agreed to audience measurement when you open it. That includes the fonts: Archivo, Inter and JetBrains Mono are downloaded when the site is built and served from our own server afterwards. No connection to Google Fonts is made, and your IP address is not transmitted there.
No advertisements, embedded videos, social media widgets or map services are loaded. Cover images are served from our own server. Google Analytics and Microsoft Advertising is used only after your consent and is described in full below. The access figures published in the next section are produced independently of it, server-side from our own log.
External offerings — music platforms, repositories, the radio directory — are linked and nothing more. A connection to those providers is made only when you click such a link. Which sources these are is listed in full in the source register.
Visitor figures
This network publishes its own access figures at Visitor figures. They come solely from the server log that accrues anyway — no cookie, no script in your browser, no tracking pixel and nothing stored on your device. These figures alone would need no consent banner: nothing is placed on or read from your device that would require consent under § 25 TDDDG. The bar at the foot of the page asks only about Google Analytics and Microsoft Advertising.
- Processed
- Time, requested path (without the query string), status code, volume, referring page and browser identifier.
- Stored
- counts per day only — no individual requests, no addresses, no browser identifiers.
- Raw log
- deleted after two days; the aggregation runs every ten minutes.
- Legal basis
- Article 6(1)(f) GDPR — legitimate interest in measuring reach without recognition.
Google Analytics
Beyond the server-side figures, this network uses Google Analytics 4 to see which pages are found and read. The tool loads a script into your browser, stores cookies on your device and transmits data to Google. This happens only after you have consented. Until then — and permanently, if you decline — the script is not loaded, no connection to Google is made and nothing is stored on your device.
- Provider
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as controller for the European Economic Area; Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA is technically involved.
- Measurement ID
G-HR4KDCK6QX— the identifier of this property. It is printed here because it is visible in the source of every page anyway, so you can check where measurement goes.
- Purpose
- Audience measurement: which pages are opened, which searches and referrals bring readers here, on what kind of device and from which region. The purpose is to make this archive findable.
- Legal basis
- Your consent — Article 6(1)(a) GDPR for the processing, and § 25 (1) TDDDG for storing and reading information on your device.
- Cookies
- After your consent Google sets the cookies _ga and _ga_<id>. They hold a randomly generated number that recognises your browser and expire after two years.
- IP address
- Google uses your IP address to derive an approximate region and, by its own account, does not store it in Google Analytics 4. For the connection itself it is unavoidable — it is the return address of every request.
- Transfer to the USA
- Processing in the United States is not excluded. It rests on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, to which Google LLC has certified, and additionally on the standard contractual clauses. A level of protection equivalent to the European one still cannot be guaranteed against access by US authorities; by consenting you knowingly accept that risk.
- Retention
- User-level data is deleted automatically at Google after the retention period set on the property; Google Analytics 4 allows two or fourteen months. Aggregated reports are unaffected, because they no longer relate to a person.
- Withdrawal
- You may withdraw your consent at any time with effect for the future — at the foot of this page, with one click. Withdrawing deletes the cookies that were set and reloads the page; the script is not loaded again afterwards. The lawfulness of processing carried out until then is unaffected.
Details of the processing by Google are set out in its privacy policy. Independently of the bar on this site you can also block collection by Google Analytics browser-wide with Google’s opt-out add-on.
Microsoft Advertising (UET)
This network uses Universal Event Tracking (UET) to attribute visits after a Microsoft ad click to conversions, evaluate campaigns and build remarketing audiences. The UET script loads only after your consent. Before that, and after a refusal, no connection to Microsoft Advertising is made.
- Provider
- Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Microsoft Corporation, One Microsoft Way, Redmond, Washington 98052, USA may be technically involved.
- UET tag ID
97270362— the public identifier of this tag; it is disclosed so the measurement destination can be verified.
- Data processed
- Page URL and title, referrer, time, browser and device data, screen details, the IP address required for the connection, the Microsoft click ID (msclkid) where present, and pseudonymous visitor and session identifiers. If enabled in the Microsoft Advertising account, UET Insights may additionally collect interaction and technical performance data.
- No enhanced conversions
- This implementation sends neither email addresses nor phone numbers nor any other content entered into the contact form to Microsoft. The optional pid snippet for enhanced conversions is not installed.
- Purpose
- Conversion attribution, campaign measurement and remarketing. Automatic SPA detection is enabled so navigation within the Next.js application is recognised as a new page view.
- Legal basis
- Your consent — Article 6(1)(a) GDPR for the processing, and § 25 (1) TDDDG for storing and reading information on your device.
- Consent mode
- UET receives ad_storage = denied first and the ad_storage = granted update only after your express agreement. Unlike Advanced Consent Mode, the Microsoft script is not loaded at all while the decision is pending or denied.
- Cookies
- After consent UET may in particular set _uetsid (session), _uetvid (pseudonymous visitor identifier) and, following an ad click, _uetmsclkid. Microsoft may also use identifiers on its own domains. Microsoft determines lifetime by identifier and purpose; _uetmsclkid is intended for up to 90 days and Microsoft describes _uetvid as lasting about 13 months.
- Transfer to the USA
- Processing in the United States is not excluded. Microsoft refers to the EU-US Data Privacy Framework and, additionally, appropriate safeguards. A level of protection equivalent to the European one still cannot be guaranteed fully against access by US authorities.
- Withdrawal
- You can withdraw consent below with one click for the future. Withdrawal sends the denied setting to an already loaded UET instance, removes accessible first-party tracking cookies and reloads the page; the scripts are not loaded afterwards.
Details are set out in the Microsoft Privacy Statement. The following decision applies to all optional analytics and conversion services named above.
Getting in touch
There are two routes: the email address and the contact form. In both cases your details are processed solely to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or its initiation, otherwise Article 6(1)(f) GDPR.
- What you enter
- Email address, subject and message; the name is optional. Attachments are not possible.
- Transmission
- Relayed by SMTP to the controller’s mailbox. Your email address is set as the reply address so an answer reaches you.
- Abuse protection
- To deter automated submissions the number of messages per sender is limited. Your IP address is not stored for this: it is held only as a checksum with a random, process-specific addition, and expires after ten minutes. Legal basis: Article 6(1)(f) GDPR.
- Logging
- Only the fact that a submission happened and whether it succeeded is recorded. Sender, subject and message text appear in no log.
- Retention
- The form stores nothing. In the mailbox, messages are deleted once they are no longer needed and no retention obligation applies.
Your rights
- Right
Access
- Right
Rectification
- Right
Erasure
- Right
Restriction
- Right
Portability
- Right
Objection
An informal message to the address above is enough to exercise these. You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The competent one is the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI), the authority for Thuringia.
Personal data in the catalogue records
This network displays bibliographic data containing personal names — creator entries from the catalogue of the German National Library in particular. Those details come from a public institutional register and are reproduced unchanged.
Name forms are not merged automatically: where it is not established that two spellings denote the same person, they are kept apart. Where that question stands is disclosed on the profile page.