Privacy Policy

1. Overview

What this page covers

This policy explains how personal data is processed when you visit differencemedia.de. Personal data is any information that can be used to identify a natural person.

What data is collected

When you visit this website, technical connection data is processed automatically by the infrastructure that delivers it. If you contact us by email, the data you provide is processed to respond to your inquiry. No contact form exists on this site.

Your rights

You have the right to access, correct, or request deletion of personal data we hold about you. You may also object to processing or request restriction. To exercise any of these rights, contact us at hi@differencemedia.de. You also have the right to lodge a complaint with the competent supervisory authority.

2. Responsible party

The party responsible for data processing on this website is:

Daniel Rotter
difference?! media
Tonweg 6
71397 Leutenbach
Germany
Email: hi@differencemedia.de

Storage period

Personal data is retained only as long as necessary for the purpose for which it was collected, or as required by applicable legal retention obligations.

3. Hosting and infrastructure

Railway (application hosting)

This website runs as a server-side application on Railway, a platform provided by Railway Corp., 548 Market St PMB 87112, San Francisco, CA 94104, USA. Incoming requests are processed on Railway's infrastructure. This involves technical connection data including IP addresses and request timestamps.

The legal basis is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in operating the website reliably. A data processing agreement is in place with Railway Corp. Data transfers to the USA are conducted on the basis of applicable transfer mechanisms. Privacy policy: railway.com/legal/privacy

Cloudflare (DNS and content delivery)

All traffic to this website is routed through Cloudflare's network. Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, provides DNS resolution, SSL/TLS termination, DDoS protection, and content delivery. Connection data including IP addresses is processed within Cloudflare's infrastructure as part of this.

The legal basis is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in delivering the website securely and reliably. Cloudflare participates in the EU-US Data Privacy Framework. A data processing agreement is in place. Privacy policy: cloudflare.com/privacypolicy

4. Analytics

Umami

This website uses Umami, a privacy-focused analytics tool. The analytics script is loaded from Umami's cloud service at cloud.umami.is, operated by Umami Software Inc., USA.

Umami does not use cookies. It collects aggregated, anonymized usage data: page views, referrer, country of origin derived from an anonymized IP address, browser type, device type, and operating system. IP addresses are not stored in identifiable form. No user profiles are created and no cross-site tracking takes place.

The integration is configured to respect the browser Do Not Track signal. If DNT is enabled in your browser, no data is collected by Umami.

Because no cookies are set and no identifiable personal data is retained by the analytics system, we rely on Art. 6 para. 1 lit. f GDPR as the legal basis. Our legitimate interest is understanding how the website is used in aggregate in order to improve it.

When your browser loads the analytics script, a connection to Umami's servers is established and standard connection data including your IP address is transmitted in transit to their infrastructure in the USA. This data transfer is subject to Umami's data processing terms. Privacy policy: umami.is/privacy

5. Contact by email

If you contact us by email, the data you provide (email address, name if given, and the content of your message) will be stored and used solely to process and respond to your inquiry. This data will not be shared with third parties without your consent.

The legal basis is Art. 6 para. 1 lit. b GDPR if the inquiry relates to a contract or pre-contractual matter. In other cases, the basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries). Data is retained until the purpose is fulfilled or you request deletion, subject to applicable retention obligations.