Privacy

Hosting and server logs

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

Every time a page is called up, the server logs technically necessary details: IP address, time, the address called up, the amount of data transferred, the status code and the browser and operating system. We need these logs to keep the site running and to fend off attacks (Art. 6(1)(f) GDPR). They are deleted automatically as soon as they are no longer needed for that.

Cookies and embedded services

This website sets no advertising cookies and embeds no advertising or social media services. Fonts and pictures come from our own server; nothing is fetched from third parties. Our server sets cookies only on the sign-in pages, and only those signing in needs (see “Signing in”). Apart from that, the only thing stored is your decision about the usage statistics – without it we could not honour that decision.

Usage statistics

If you agree, we count anonymously which pages are opened, where a visit came from and roughly what kind of device is used. For this we use Umami, open-source software running on our own server in Germany. No cookies are set, your IP address is not stored, and none of it is passed to third parties or combined with other data.

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without it no script is loaded and nothing is counted. Your decision is remembered by your browser on your device – which is necessary to honour it at all.

You can withdraw your consent at any time with effect for the future. The lawfulness of processing carried out until then is unaffected.

Contact form and email

If you write to us through the form, we process your email address, your message and – if you give it – your name in order to reply to you (Art. 6(1)(b) and (f) GDPR). The message is not stored in a database; it is sent as an email to our mailbox at ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf (processor). We delete it there as soon as your enquiry is settled. The same applies if you write to us by email directly.

Before the message goes off, your browser solves a small computing task (ALTCHA) that slows spam programs down. Both the task and the check come from our own server – without cookies, without tracking and without a third-party provider.

Signing in

On the pages “Log in”, “Forgot password”, “Set a new password” and – while it is open – “Create account”, your browser sends what you enter directly to our server api.dozenti.de (Hetzner, Germany). We process your email address and password to sign you in, and for “Forgot password” your address to send you the link (Art. 6(1)(b) GDPR). What happens to your account and your worksheets is described in the editor’s privacy policy.

Only on these pages does our server set cookies: one for the session, one against forged requests (XSRF-TOKEN) and, once you are signed in, one that keeps you signed in. They apply to all Dozenti addresses under dozenti.de, so that you are signed in to the editor, the library and Dozenti Scan. They are technically necessary for signing in (§ 25(2) no. 2 TDDDG) and are deleted when you log out; the session cookie also expires with the session.

If you sign in with Google, Microsoft or Apple, your browser is sent to that provider, where its own privacy policy applies. From it we receive only your name, your email address and an identifier of your account – no password and no access to your account.

For users in the EU, “Sign in with Apple” is provided by Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (a company of Apple Inc., USA). Apple sends us a pseudonymous identifier that applies to Dozenti only, your email address and – only on your first sign-in and only if you share it – your name. If you choose “Hide My Email” at Apple, we receive a random relay address from Apple (…@privaterelay.appleid.com) instead of your address; Apple forwards our emails to that address to you.

Source and answer pages for worksheets

Addresses such as dozenti.de/q/7F3KX9M lead to the sources and licences of a worksheet. Such a page exists only if the person who made the sheet switches it on in the editor. It shows what would otherwise be in small print on the sheet – including their name if they chose an open licence. When they switch the link off, we delete the page at once.

These pages set no cookies, load nothing from third parties and are closed to search engines. Visiting one is covered by the section on hosting and server logs above. So that nobody can try out codes, we count visits and failed attempts per IP address; this counter expires after ten minutes at the latest (Art. 6(1)(f) GDPR).

Addresses like dozenti.de/l/4M2WPQD lead to a worksheet's answer page: for every task the hints first, then the answer. It, too, exists only if the person who made the sheet creates it in the editor, and it shows nothing until they release it. It names the sheet's title, but no name. Cookies, search engines and the counting of failed attempts work as described above; once the person deletes the page, it is gone at once.

The editor

A privacy policy of its own applies to working in the editor and is linked there. It describes what happens to your account and your worksheets.

The editor's privacy policy

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). An email to us is enough.

You can also lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

Changes

If this website changes, we adapt this statement. The version published here is the one that applies.