Privacy Policy

Last updated: Apr 30, 2026

1. Scope and Definitions

This Privacy Policy explains how elNino0916 (the "Site", "I", "me", or "my") processes personal data when you use https://elnino0916.de, accounts.elnino0916.de, and the subdomain share.elnino0916.de. Personal data means any information relating to an identified or identifiable natural person.

2. Controller

Controller within the meaning of the GDPR:
elNino0916
Email: admin@elnino0916.de

3. Purposes and Legal Bases

Personal data is processed only where necessary. Key purposes and legal bases are:

  • Website delivery and security: Article 6(1)(f) GDPR (legitimate interests in stable and secure operation), and where terminal equipment storage/access is technically necessary, Section 25(2)(2) TTDSG.
  • Providing and administering user accounts on accounts.elnino0916.de: Article 6(1)(b) GDPR.
  • Handling inquiries (e.g., email): Article 6(1)(b) GDPR (contractual/pre-contractual) or Article 6(1)(f) GDPR.
  • Abuse prevention and incident response: Article 6(1)(f) GDPR.
  • Compliance with legal obligations: Article 6(1)(c) GDPR.

4. Categories of Data Processed

Depending on use, the following categories may be processed:

  • Connection and usage data (IP address, date/time, requested URL, referrer, user agent, security-relevant technical data)
  • Account data for registration and use of accounts.elnino0916.de (in particular email address, password or credential data, profile details, and permission labels)
  • Uploaded profile pictures and related technical metadata
  • Communication data (email address, message content, and optionally name)
  • File metadata in the sharing service (filename, file type, technical scan markers)
  • Technically necessary browser storage values (e.g., LocalStorage/SessionStorage preferences)

5. Hosting, Service Providers, and Recipients

The Site is operated using the following providers:

  • Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hosting).
  • Cloudflare, Inc. (CDN, DDoS protection, static delivery). Cloudflare may process connection data as an independent controller: Cloudflare Privacy Policy.

Where required, data processing agreements under Article 28 GDPR are in place. Data is disclosed to other recipients only where legally required or necessary for legal enforcement.

6. International Data Transfers

If personal data is transferred outside the EU/EEA, such transfer occurs only under Articles 44 et seq. GDPR, including adequacy decisions and/or appropriate safeguards such as EU Standard Contractual Clauses.

7. Server Log Files

Server log files are processed automatically for technical operation and security. Legal basis: Article 6(1)(f) GDPR and, where applicable, Section 25(2)(2) TTDSG. Logs are generally retained for up to 14 days unless longer retention is needed to investigate specific security incidents.

8. Accounts and File/Image Sharing (accounts.elnino0916.de / share.elnino0916.de)

User accounts can be created via accounts.elnino0916.de. To operate registration, sign-in, account management, security, and abuse prevention, the account system stores the account data you provide as well as uploaded profile pictures on a secured server.

share.elnino0916.de can only be used with an account that has had the required permission manually added. Uploaded files are stored to provide retrievable links. Downloads may be accessible without a password, and shared content may therefore become publicly accessible. Uploads are scanned automatically for malware. Legal bases are Article 6(1)(b) and Article 6(1)(f) GDPR.

You are responsible for ensuring that uploaded content is lawful and that you hold all required rights and permissions.

9. Cookies, LocalStorage, and SessionStorage

No tracking or marketing cookies are used. Technically necessary storage technologies are used, including:

  • cookieConsent (banner preference)
  • perf-mode (performance mode preference)

Legal basis: Article 6(1)(f) GDPR; for necessary terminal equipment storage/access, Section 25(2)(2) TTDSG.

10. Third-Party Resources

Third-party resources (for example, CDN assets or fonts) may be loaded where technically or functionally required. This may involve transmission of your IP address to the provider. Legal basis: Article 6(1)(f) GDPR and, where applicable, Section 25(2)(2) TTDSG.

11. Retention and Deletion

Personal data is retained only as long as necessary for the stated purposes or to satisfy statutory retention obligations. Data is then deleted or anonymized.

12. Data Subject Rights

Subject to legal requirements, you have rights to:

  • Access (Article 15 GDPR)
  • Rectification (Article 16 GDPR)
  • Erasure (Article 17 GDPR)
  • Restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection (Article 21 GDPR)
  • Withdrawal of consent with future effect (Article 7(3) GDPR)

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority under Article 77 GDPR, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

Competent authority in Rhineland-Palatinate: State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.

14. Obligation to Provide Data

Provision of certain technical data is required to deliver the Site. Without such data, the Site may not function in whole or in part.

15. Automated Decision-Making

No solely automated decision-making, including profiling within the meaning of Article 22 GDPR, is carried out.

16. Security Measures

Appropriate technical and organizational safeguards are implemented, including TLS encryption and access controls where applicable. Absolute security of internet transmission cannot be guaranteed.

17. Changes to this Privacy Policy

This Privacy Policy may be updated to reflect legal, technical, or operational changes. The current version published on this page applies.

18. Contact

For privacy-related requests, please contact admin@elnino0916.de.