Privacy Policy
This website is a private, non-commercial demonstration and test project (see Legal Notice). The General Data Protection Regulation (GDPR) applies in full even to non-commercial, publicly accessible websites: the so-called "household exemption" (Art. 2(2)(c) GDPR) does not apply, per European Court of Justice case law, to content that is publicly accessible on the internet. This policy therefore explains how personal data is processed, despite the private nature of the site.
1. Data controller
The data controller within the meaning of the GDPR is the person named in the Legal Notice.
2. Contact form
This website includes a contact form (name, email, message). This is a non-functional demo: on submission, the entered data is not sent anywhere, not transmitted to any server, and not stored. It stays entirely local in the user's browser and is discarded when the page is reloaded.
3. Server log files (hosting)
This website is hosted free of charge by lima-city.de. As with virtually any web hosting, the hosting provider automatically processes technical connection data (including IP address, date and time of access, file requested, browser used) in server log files when the site is accessed. This serves the secure and stable operation of the website (Art. 6(1)(f) GDPR) and is not combined with other data sources.
[Details on the exact retention period and, if applicable, a data processing agreement with lima-city should be requested from the hosting provider and added here]
4. Employee Workspace (login area)
A password-protected internal area, for employees only, is available at /mitarbeiter.php. Logging in sets a technically necessary session cookie that contains only a random session identifier and is deleted on logout or when the session ends. It is used solely to recognize a logged-in person during their session (Art. 6(1)(f) GDPR, legitimate interest in operating a protected area) and is not used for analytics or tracking purposes. The session ends automatically after 10 minutes of inactivity.
Content entered in this area (calendar entries, news posts, brainstorm ideas) is stored together with the email address or display name of the person who entered it, and the time of entry, so that all employees can see who made which entry. This data is visible only to logged-in employees, not to the public.
5. No cookies for visitors, no tracking, no third parties
The public area of this website (everything except the Employee Workspace) sets no cookies and uses no analytics or tracking tools. Fonts are also self-hosted locally (no Google Fonts etc.): no requests are made to third-party servers outside of lima-city when the page is loaded. This also applies to the Employee Workspace: no third-party content (e.g. Google, external cloud providers) is embedded there either.
6. Your rights
Under the GDPR, you generally have the right to:
- Access to the personal data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)
Since the public website does not permanently store any personal data (see point 2), these rights in practice mainly concern the hosting provider's server log data and, for employees, the content entered in the Employee Workspace.