Privacy Policy for labs.straight8.de

Controller within the meaning of Art. 4(7) GDPR:

Tom Küstner
Kiehlufer 9
D-12059 Berlin
Germany

Phone: +49 (0)30 680 7 333 8
Email: privacy@straight8.de

1. Subject of data protection

The subject of data protection is personal data. Under Art. 4(1) GDPR this means any information relating to an identified or identifiable natural person, such as name and email address, but also usage data such as your IP address.

2. Collection, processing, use and disclosure of personal data

2.1 Access data

Each time this website is accessed, data is logged in what are known as server log files. This storage serves internal system-related purposes as well as protection against misuse and attacks. The following is logged:

• name of the file retrieved
• date and time of access
• amount of data transferred
• notification of successful retrieval
• web browser and requesting domain
• IP address

2.2 Cookies and local storage

This website does not set any cookies. To store your display preference (light or dark theme) we use an entry in your browser's local storage (localStorage). This entry is purely functional, remains on your device and is not transmitted to us or to third parties. You can delete it at any time via your browser settings.

2.3 Reach measurement (GoatCounter)

For reach measurement we use the hosted service GoatCounter, operated by Martin Tournoij (Ireland). The data is processed on servers within the EU (Hetzner Online GmbH, Finland and Germany), and no transfer to a third country takes place.

GoatCounter works without cookies and without cross-device recognition. Only aggregated information is stored, such as browser, operating system, country derived from the IP address, language and screen width. The IP address itself is not stored in the database, but is held in memory only for a maximum of eight hours in order to distinguish returning visits. No data is shared with third parties. For the measurement, a counting script provided by the service is embedded in the page.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in privacy-friendly reach measurement).

2.4 Contact form

You can send us a message via the contact form. In doing so we process the email address you provide, your message and, if given, your name, for the purpose of handling your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR.

For the technical handling of form submissions we use the service Formspree (Formspree, Inc., USA). The data you enter in the form is transmitted to and processed on Formspree's servers in the USA. The transfer to the USA takes place on the basis of the Standard Contractual Clauses adopted by the EU Commission (Art. 46(2)(c) GDPR). Further information can be found in Formspree's privacy notice.

2.5 Newsletter

On labs you can subscribe to a newsletter that informs you exclusively about new research articles. No other mailings (advertising or other content) take place.

• Purpose: notification about new research articles.
• Legal basis: Art. 6(1)(a) GDPR (your consent).
• Procedure (double opt-in): After submitting the subscription form you receive a confirmation email. You are only added to the distribution list once you click the confirmation link it contains.
• Data processed: email address (required), name (optional), and, as proof of your consent, the time of subscription and your IP address.
• Sending and management: We use the self-hosted software Listmonk on our own server (accessible at newsletter.straight8.de). The actual mail delivery is carried out via the SMTP service of ALL-INKL.COM (Neue Medien Münnich GmbH) as a processor.
• No performance tracking: Our newsletters contain neither tracking pixels for open measurement nor rewritten links for click measurement.
• Withdrawal and storage period: You can withdraw your consent at any time with effect for the future, in particular via the unsubscribe link at the end of every issue. After unsubscribing, your data is removed from the distribution list. We may retain proof of the consent once given for a limited period in order to defend against legal claims.

3. Deletion periods and storage duration

• Server log files (see 2.1) are stored only for as long as necessary for the stated security and operational purposes and are deleted after 30 days at the latest.
• In reach measurement (see 2.3) the IP address is not stored permanently.
• Data submitted via the contact form is deleted once your enquiry has been conclusively handled and no statutory retention obligations apply.
• Newsletter data (see 2.5) is stored until you withdraw your consent.

4. Website hosting

Our server, located in Germany (Frankfurt am Main), is operated by Hostinger International Ltd. (61 Lordou Vironos Street, Larnaca 6023, Cyprus). When you visit our website, Hostinger records various log files including your IP address. The use of Hostinger is based on Art. 6(1)(f) GDPR. We have a legitimate interest in a reliable, fast and secure presentation of our website.

The fonts used (IBM Plex) are served from our own server. No third-party fonts (such as Google Fonts) are loaded for this purpose.

5. Rights of the data subject

5.1 Right to restriction of processing

Under Art. 18 GDPR you have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right exists in the following cases:

a) if you contest the accuracy of your stored data, for the duration of the verification.

b) if the processing is unlawful and you request restriction instead of erasure.

c) if we no longer need your data but you require it for the establishment, exercise or defence of legal claims.

d) if you have objected under Art. 21(1) GDPR, pending the balancing of interests.

5.2 Right to object under Art. 21 GDPR

You can object to the processing at any time, in particular where it is based on Art. 6(1)(e) or (f) GDPR. You can likewise object at any time to processing for the purposes of direct marketing.

5.3 Right to data portability

You have the right to receive your data in a machine-readable format or to have it transferred to another company, insofar as this is possible with reasonable effort.

5.4 Right to lodge a complaint with a supervisory authority

You have the right at any time to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

5.5 Right of access

Upon request we will be happy to inform you about all data stored about you.

6. Questions about data protection

If you have any questions or concerns about this privacy policy or about data processing, please contact: privacy@straight8.de