Privacy Policy

What personal data EILBLICK processes, why, and what you can do about it. No advertising cookies, no tracking profiles.

Draft, not launch-ready: yellow fields must be completed with the real details and the whole text must be reviewed by a lawyer before launch.

This English version summarises our German Datenschutzerklärung, which is the legally binding text for users in Germany. Both describe the same processing. Last updated: [date of the reviewed version].

1. Controller

The controller under the GDPR is [legal name and address of the operator, as in the Impressum]. Privacy contact: [privacy e-mail address]. Data protection officer (if appointed): [name or “not required”].

2. Summary

You can read EILBLICK without an account and without giving us personal data.
We set no advertising or marketing cookies and do not sell data. Measurement through Google Analytics / Tag Manager happens only if you allow “Statistics”.
Cookie banner, pop-ups and push service run on our own server; no third-party consent platform is loaded.
Optional features (statistics, notifications, external media) work only after your explicit choice, which you can change at any time via “Cookie-Einstellungen” in the footer.

3. Visiting the website (server logs)

When you open a page, our server processes technical data such as date and time, requested page, status code and your IP address to deliver the page securely and stop abuse. Legal basis: legitimate interest in a secure and stable service (Art. 6(1)(f) GDPR). Retention: [log retention period]. Hosting: [hosting provider and location]. We use Cloudflare as a content delivery and security layer in front of the site, which processes requests as our processor ([confirm provider, contract and transfer safeguards]). Fonts, scripts and images are served from our own servers.

4. Cookie choice

One strictly necessary cookie, eb_consent, stores your choice (version, your decision and a timestamp, no identifier) for six months. To evidence consent we log the version of the banner and the options chosen, without IP address or device identifier. Legal basis: [e.g. § 25(2) TDDDG and Art. 6(1)(c)/(f) GDPR, after legal review].

5. Anonymous statistics (only with consent)

If you allow “Statistics”, we count page views anonymously and without cookies: page path, page type, date and a coarse referrer group. No identifiers, IP addresses or browser data are stored. Crawlers and our editorial back office are not counted. Legal basis: your consent. Status: [review before activation].

5a. Google Analytics and Tag Manager (only with consent)

If you allow “Statistics”, we also load Google Analytics 4 (measurement ID G-9MGXJ74CKN) of Google Ireland Limited, Ireland (Google LLC, USA) to measure which pages are read. Your IP address is transmitted to Google and cookies are set. Data scope, retention and processing agreement: [check Google Analytics settings; data retention; data processing agreement].

If you allow “Statistics”, we load Google Tag Manager (container GTM-T3R6TPDV) from servers of Google Ireland Limited, Ireland (Google LLC, USA). The tag manager runs measurement tags; the tags active in the container and the data they collect are: [list active tags, e.g. Google Analytics 4, with data scope, retention and cookies]. Your IP address is transmitted to Google and cookies or similar technologies may be set or read. Without your consent nothing is loaded from Google. You can withdraw consent at any time via “Cookie-Einstellungen” in the footer; the page then reloads without the tag manager, and you can delete existing cookies in your browser. Legal basis: your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG). [confirm transfer safeguards, e.g. EU–US Data Privacy Framework]

6. Newsletter

If you subscribe, we process your e-mail address to send the newsletter, including a daily morning digest, using double opt-in: the subscription is active only after you click the confirmation link. We store the time, the consent text version and the confirmation as proof. You can unsubscribe at any time through the link in each e-mail or your mail program’s “unsubscribe” button; addresses that bounce or are reported as spam are blocked. Legal basis: consent (Art. 6(1)(a) GDPR). Delivery is carried out by Resend (Resend, Inc., USA) as our processor. [confirm data processing agreement and transfer safeguards]. Retention: until you unsubscribe, then only the minimum needed to honour the opt-out.

7. Push notifications (only with consent)

If you enable push notifications, your browser asks for permission. Only then do we store your browser’s technical push endpoint and two encryption keys. No name or e-mail address is attached. Messages are sent from our server through your browser vendor’s push service (for example Google, Mozilla or Apple). You can switch it off at any time in the footer link or in your browser; invalid endpoints are deleted automatically. Legal basis: consent.

8. YouTube video (only with consent)

We show the newest video of our YouTube channel in a corner box. Without your consent you only see a preview image stored on our own server, and your browser does not contact YouTube or Google. A click opens the video on YouTube in a new tab, where YouTube’s terms apply. If you allow “External media (YouTube)”, your browser embeds the video in YouTube’s privacy-enhanced mode (youtube-nocookie.com) and plays it muted; your IP address is then transmitted to YouTube (Google Ireland Limited, Ireland; Google LLC, USA) and cookies or similar technologies may be set or read. You can withdraw consent at any time, which removes the embed immediately. Legal basis: your consent. [confirm transfer safeguards, e.g. EU–US Data Privacy Framework]

9. Contact and corrections

If you write to us, we process your message and address to answer it and, where relevant, to correct an article. Retention: until the matter is closed, then according to statutory retention rules.

10. Recipients and international transfers

Recipients are our processors named above (hosting and security, Resend, and, only with your consent, YouTube/Google and your browser’s push service). Where data is transferred outside the EU/EEA, we rely on an adequacy decision or standard contractual clauses. [confirm per provider] We do not sell personal data.

11. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time with effect for the future. Contact us at the address above. You may also lodge a complaint with a supervisory authority; the competent authority is [competent data protection authority].

12. Children

EILBLICK is a general news service and is not directed at children under 16. We do not knowingly collect their personal data.

13. Changes

We update this policy when features or the law change. The current version is always available at this address.