1. Controller
[NAME / COMPANY]
[ADDRESS]
Email: [EMAIL]
2. In short
- No tracking, no advertising, no analytics services, no content from third-party servers (fonts and scripts are hosted on our own server).
- We only store what the service needs.
3. Hosting and server logs
The site is hosted by [HOSTING PROVIDER]. When you visit, the server processes technically necessary data (e.g. IP address, time, requested address, browser) in log files, which are deleted after [DAYS] days. Legal basis: Art. 6 (1) (f) GDPR (secure operation).
4. Cookies
- Session cookie (WA_SESS): technically necessary for login, forms and security; deleted when you close your browser.
- Language cookie (wa_lang): remembers your chosen language, for at most 1 year.
There are no cookies for advertising or analytics.
5. Account
For an account we store username, display name, email address, company/club if given, password (only as an encrypted hash), language, plan and the time of your last login. Legal basis: Art. 6 (1) (b) GDPR (contract).
To protect against attacks we briefly remember failed login attempts – the IP address only as a non-reversible checksum; entries expire after 24 hours at the latest.
6. Your content
We store albums, images, texts and your profile page so you can manage them and – if you choose – publish them. Private is the default. Public content can be seen by anyone with the link; search engines only if you allow it.
When uploading, we remove sensitive image information by default (e.g. location, serial number). Profile and cover images are stored without any image information.
7. Visitor counter
We count views of public albums without cookies and without IP addresses – only the numbers (per day and per image) are stored. To avoid counting a reload twice, only your browser remembers until the tab is closed that it has already been counted (sessionStorage); nothing about this is sent to us.
8. Emails
We only send emails when necessary (account request, activation, forgotten password). Sent via [MAIL SERVER / SERVICE].
9. Support access
To help with questions, an administrator can view your area read-only for 30 minutes. Every access is logged and visible in your account under “Account & security”.
10. Retention and deletion
Deleted items first go to the trash and are permanently deleted when the period ends (depending on your plan; accounts [DAYS] days). If you delete your account, we remove all related data and files.
11. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). Write to [EMAIL]. You may also lodge a complaint with a data protection supervisory authority, e.g. [SUPERVISORY AUTHORITY].
