Privacy Policy

1. Controller

MOJM — Owner: Oliver Terp
Heinrich-Lübke-Str. 16, 42579 Heiligenhaus, Germany
Phone: +49 151 23317432
Email: [email protected]

No data protection officer has been appointed; the legal requirements for a mandatory appointment are not met. Please send any questions about data protection to the address above.

2. Principles

We process personal data only to the extent necessary for a functioning website and for our content and services. This website sets no cookies of its own, embeds no analytics or tracking services and delivers all files, including fonts and videos, from this domain. The exception is the upstream service Cloudflare, see section 3.

On your first visit, the language of the site follows the language setting of your browser; nothing is stored for this. If you choose a language yourself in the language menu, your browser remembers this choice in its local storage (entry mojm-lang) so that the site greets you in that language on your next visit. The entry never leaves your device, is not transmitted to us and can be deleted at any time in your browser settings. It is strictly necessary for the language selection you requested and therefore does not require consent (§ 25 (2) no. 2 TDDDG).

3. Hosting and server log files

This website is operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Falkenstein and Nuremberg. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

The following data is automatically stored in server log files with every request:

• IP address of the requesting device
• date and time of access
• name and URL of the file requested
• amount of data transferred and whether the request succeeded
• previously visited page (referrer), browser and operating system

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable operation of the website and in investigating misuse. The log files are deleted after seven days at the latest unless they are needed to investigate a specific incident.

Cloudflare

Every request to this website passes through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare protects the site against attacks and delivers it. In doing so, Cloudflare processes connection data such as your IP address and the requested address on our behalf. The basis is Cloudflare’s Data Processing Addendum, which includes the EU Standard Contractual Clauses for transfers to the USA; more in Cloudflare’s privacy policy. The legal basis is our legitimate interest in protecting the website against attacks and misuse (Art. 6 (1) (f) GDPR).

To tell humans from automated access, Cloudflare may store the cookie __cf_bm in your browser. It expires after 30 minutes of inactivity, only Cloudflare can read its encrypted content, and it is not linked to any account or identifier on this website. If Cloudflare shows you a security check, passing it stores the cookie cf_clearance so that the check does not appear again. Neither cookie is used for analytics or advertising; both are strictly necessary to protect the website and therefore do not require consent (§ 25 (2) no. 2 TDDDG).

4. Waitlist (newsletter)

Using the form on the home page, you can join the waitlist for the launch of Tackbook. The only required information is your email address. We also store which language version of the site you signed up on, so that our messages reach you in that language.

Double opt-in procedure

After submitting the form, you receive an email asking you to confirm your sign-up. Only when you click the confirmation link is your address added to the waitlist. If you do not confirm, the sign-up is discarded after 30 days at the latest. To be able to prove your consent, we log the time of the sign-up and of the confirmation as well as the IP address used for each.

Storage and sending

We store your address on our own server in Germany. Confirmation and notification emails are sent by our own mail server. No email service provider is involved; your address is not passed on to any third party.

We do not track whether or when you opened a message or clicked a link. Our messages contain no tracking pixel, and the links in them lead directly to their destination without passing through a tracking service.

Legal basis, duration and withdrawal

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can withdraw it at any time with effect for the future — via the unsubscribe link in every message or informally to [email protected]. After withdrawal, we delete your address from the waitlist. We keep the records of sign-up and confirmation for as long as necessary to defend against claims; the legal basis for this is Art. 6 (1) (f) GDPR.

Protection against automated sign-ups

To prevent misuse of the form, we limit the number of sign-ups per IP address. For this purpose, your IP address is held only in our server’s memory and discarded after one hour at the latest. It is not stored permanently. The legal basis is Art. 6 (1) (f) GDPR.

5. Contacting us

If you contact us by email or phone, we process your details to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR insofar as the enquiry relates to entering into a contract, and Art. 6 (1) (f) GDPR otherwise. We delete the data once the enquiry has been fully dealt with and no statutory retention periods apply.

6. Fonts

Text appears in the fonts already installed on your device. Only the large headings use the Newsreader typeface; it is hosted on our own server and loaded from this domain. No connection to Google Fonts or any other external provider is made.

7. Your rights

You have the following rights towards us at any time:

• access to the data stored about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR) and
• the right to object to processing based on a legitimate interest (Art. 21 GDPR).

You can withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen), Kavalleriestr. 2–4, 40213 Düsseldorf, Germany.

8. Changes to this policy

We will update this privacy policy as soon as the processing described changes — for example when Tackbook is released. The version published on this page applies.