Legal notice & privacy

Legal notice

This notice provides the publisher information required by section 18(1) of the German Interstate Media Treaty (MStV) and, where applicable, section 5 of the German Digital Services Act (DDG). The person responsible for journalistic-editorial content under section 18(2) MStV is listed below with a full address.

Legal operator: Würdesache
Legal form: Association
Statutory seat: Klosterlechfeld
Serviceable address: Bachstraße 19, 86836 Klosterlechfeld, Deutschland
Representation: Represented by its Chair Maximilian Frommer; authorized to represent the association alone
Responsible for editorial content: Maximilian Frommer, Bachstraße 19, 86836 Klosterlechfeld, Germany
Email: contact@wuerdesache.org
Additional email contact: max@wuerdesache.org

What this website currently does — and does not do

The external newsletter form is loaded only after your permission in the newsletter section. You can keep it blocked without limiting access to the rest of this website. Once loaded, connections to Brevo and its abuse-protection service are established. The newsletter provisions below apply.

This website does not intentionally use analytics, advertising trackers, externally loaded fonts, maps, videos, or social-media embeds. Language selection is handled by the page address and is not stored in the browser. On this basis, no optional cookie banner is used.

The contact form prepares a message in the visitor’s own email application. The website itself does not transmit or store the entered information. The visitor’s device or mail provider may retain a local draft; normal email processing begins when the visitor sends the message.

Controller: Würdesache, Bachstraße 19, 86836 Klosterlechfeld, Germany, represented by its Chair Maximilian Frommer; contact: contact@wuerdesache.org. The hosting service processes technical connection data such as IP address, time, requested page, and browser information for secure delivery. The provider, server location, processing details, and retention periods are listed below.

Secure website delivery, availability, and defense against misuse are based on Würdesache’s legitimate interests under Article 6(1)(f) GDPR. Email inquiries are processed under Article 6(1)(b) GDPR where they concern steps requested before a possible agreement, and otherwise under Article 6(1)(f) GDPR for responsible communication and project administration.

Technical connection data is required to deliver the website securely; without it, the website cannot be provided. Information in email and newsletter inquiries is voluntary; without the relevant information, Würdesache may be unable to process the inquiry or subscription.

Privacy contact: contact@wuerdesache.org
Hosting provider: STRATO GmbH
Provider address / server location: Otto-Ostrowski-Straße 7, 10249 Berlin, Germany · Germany (data centers in Berlin and Karlsruhe)
Server logs and availability: Full visitor IP addresses for attack detection: up to seven days. Available in the customer area: anonymised access logs for six weeks and error logs for five days.
Email processing / inquiry retention: Email hosting by STRATO GmbH in Germany; encrypted IMAP and SMTP connections. · Inquiries are retained until resolved and normally deleted no later than six months afterward, unless statutory retention duties or the establishment, exercise, or defense of legal claims require longer storage.

Subscription only after a second confirmation

Brevo can record openings and link clicks in confirmation emails and newsletters and associate them with your email address for delivery and readership statistics. Anonymisation settings are enabled, but they do not reliably remove every contact-level counter. The automatic form therefore asks for a separate measurement consent before sending the confirmation email (Article 6(1)(a) GDPR and section 25(1) TDDDG where applicable). This permission is distinct from newsletter consent. You may instead subscribe to the same newsletter by emailing contact@wuerdesache.org; we confirm and serve that subscription outside Brevo without opening or click measurement. Either permission can be withdrawn by email at any time. Withdrawing measurement permission stops automated Brevo delivery; personal delivery can continue if requested. No scoring or automated decisions are based on these statistics.

Known technical limitation: in our test, Brevo continued attributing clicks in an already delivered confirmation email to the contact even after its withdrawal page confirmed that measurement consent had been withdrawn. This has not been resolved. Please also email contact@wuerdesache.org to withdraw consent so that we can stop further automated deliveries and handle your request. This does not reliably deactivate measurement links in emails already delivered. The email-based subscription above avoids Brevo measurement from the outset. This notice does not restrict your right to withdraw consent.

The Brevo sign-up form is blocked until you explicitly allow it in the newsletter section. Permission to load this external service is separate from newsletter and email-measurement consent (Article 6(1)(a) GDPR and section 25(1) TDDDG where applicable). Loading it establishes connections to Brevo and Cloudflare Turnstile for abuse prevention and transmits connection data such as your IP address and browser information, even before you submit an email address. The choice is held only in this page’s memory, not in a cookie or browser storage. You can withdraw it above the form; this removes the embedded form. Requests already in progress may still finish. Withdrawal does not undo data already transmitted or cancel a newsletter subscription. Reloading the page blocks the form again. Form entries go directly to Brevo. Your address is added to the confirmed main list and the appropriate language list only after you click the confirmation link.

The newsletter is based on consent under Article 6(1)(a) and Article 7 GDPR together with section 7 German Unfair Competition Act (UWG); technically necessary abuse prevention is based on legitimate interests under Article 6(1)(f) GDPR. Every newsletter contains a direct unsubscribe option. Consent can be withdrawn at any time without affecting earlier lawful processing.

Brevo manages the confirmed main list and the language-specific newsletter lists. We do not maintain a separate subscriber database on our webspace. Consent evidence and necessary suppression records are treated separately from active newsletter distribution.

Processor and contractual details: Brevo processes email addresses, selected languages, consent evidence, and delivery, opening and click data for the newsletter under a data-processing agreement. Brevo states that its databases are in the EU, using OVH in France/Germany and Google Cloud in Belgium; this does not exclude international processing by subprocessors. Transactional logs are retained for one month under our account settings; message previews are not stored. Active subscriptions continue until withdrawal; necessary consent evidence and suppression records are retained separately only for their evidential or suppression purpose. Email-based subscriptions and confirmations are processed in our monitored STRATO mailbox. The retention period for resolved inquiries does not apply to ongoing subscriptions.
Abuse protection: The Brevo form uses Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Bot detection processes data including IP address, browser characteristics, TLS fingerprint and form origin, not the entered form contents. Cloudflare acts as processor for abuse protection and partly as an independent controller to improve detection. Transfers to the USA and other countries are possible; Cloudflare identifies the EU-US Data Privacy Framework and standard contractual clauses as transfer mechanisms. Protection loads only when you choose to open the form. It protects against automated signups (Article 6(1)(f) GDPR); newsletter and measurement consents remain separate. Further information: https://www.cloudflare.com/turnstile-privacy-policy/

Copyright and personal rights

Documentary photographs, letters, biographies, film material, and recorded testimony are published only after the relevant copyright, licence, consent, privacy, and credit requirements have been documented for that specific use. Material supplied for project development is not treated as permission to publish it.

The association’s chair has confirmed permission to use the selected photographs and the 74-second introduction to the Avigdor project on this website. Credits accompany the media. The clip is hosted on the same website, does not autoplay, and does not use a third-party player. Loading or playing it entails ordinary requests to the hosting provider described above. Permission for this web clip is separate from licences needed to screen the full VR film in educational programs.

External references are ordinary links. A connection to the destination website is made only after the visitor follows the link; the destination provider’s privacy information then applies.

Access, correction, deletion, and objection

Visitors can contact Würdesache at the privacy address above to exercise the rights provided by the GDPR, where applicable, including access, correction, deletion, restriction, data portability, objection, and withdrawal of consent. They also have the right to complain to a competent data protection authority.

Competent supervisory authority: Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany · www.lda.bayern.de

Würdesache does not make automated decisions with legal or similarly significant effects. Cloudflare assesses technical browser and connection signals for abuse prevention and also uses such signals independently to improve its bot detection; the newsletter section explains the service.
Any future analytics or third-party embeds require a new technical and legal review before activation.