Controller
Akram Selo
Knesestraße 16
27318 Hoya
Germany
Phone: 0176 12748240
Email: info@genz-regelt.de
1Hosting
This website is hosted by Hostinger. The provider is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. When you visit our website, the data listed under “Server log files” is processed on Hostinger's servers.
We have concluded a data processing agreement with Hostinger in accordance with Art. 28 GDPR. Hostinger only processes the data on our instructions. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing our website securely, quickly and reliably. You can find more information in the privacy policy of Hostinger.
Fonts, images and scripts are loaded directly from this website. Content from Google or other third parties is only loaded if you allow Google Analytics (see “8. Google Analytics”). When you submit the contact form, your message is sent to the Web3Forms service (see “Contact form and email”).
2Server log files
When you visit the website, the hosting provider may process technical data such as IP address, date and time, browser, operating system and pages visited. This serves the secure and technically smooth operation of the website.
3Your “I'm in” sign-up
When you tap “I'm in” for a city, we store your sign-up. This way everyone sees live how many people are joining in each city. Each device counts only once. We store:
- Device ID: a random ID signed by the server that your device receives with the first sign-up. It does not reveal who you are.
- Your sign-up: the chosen city and your number in that city. No name, no email address, no phone number.
- Count: a total per city, without reference to individual persons.
The sign-up is voluntary, the website also works without it. Because signing up for a protest can reveal a political opinion, we only store it with your consent, which you give by tapping (Art. 6 (1) (a) and Art. 9 (2) (a) GDPR). You can withdraw your consent at any time: open your ticket and tap “Withdraw sign-up”. The entry is then deleted immediately.
The data is stored in a database on this website's web space at Hostinger (see Hosting). We do not pass it on to anyone else.
4Views per city
So that cities many people are interested in appear higher up in the list, we count how often a city is opened (tapping on the map or in the list, opening an invitation link). For this, your browser only sends the name of the city to the server. So that one connection cannot count a city up any number of times, we remember for one hour that this city has already been counted from your network. For this we use the same hash as under “Protection against misuse”, not the IP address. In the end, only one number per city is stored, without reference to persons. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in a clear list.
5Contact form and email
If you write to us via the contact form, we process your name, your email address and your message in order to reply to you. For sending, we use the form service Web3Forms (web3forms.com). When you submit the form, your browser sends your name, your email address, your message and the chosen topic directly to Web3Forms. For technical reasons, Web3Forms also receives your IP address and information about your browser. Web3Forms forwards the message as an email to our mailbox info@genz-regelt.de . The message is not stored on the server of this website. Web3Forms may also process data outside the European Union, for example in the USA. There may not be a level of data protection there that corresponds to that of the EU. More in the privacy policy of Web3Forms.
If you email us directly, the email reaches our mailbox via Hostinger's mail server (see Hosting), without Web3Forms.
The legal basis is your consent, which you give with the checkbox in the form (Art. 6 (1) (a) GDPR). Insofar as data is transferred to a country outside the EU, this is also based on your consent (Art. 49 (1) (a) GDPR). You can withdraw it at any time by emailing us. Please do not send us particularly sensitive information via the form, for example about your health.
Against spam, the form contains a field invisible to humans and checks that it was not submitted too quickly. In addition, at most 5 messages per hour are possible from one network. For this, we count the messages under the hash from “Protection against misuse”, not under the IP address.
6Protection against misuse
So that nobody can manipulate the numbers with scripts, we limit how often votes can come from one network. For this, we create a hash from your IP address (for IPv6, from the first 64 bits) with a secret key, from which the address cannot be read. With it we count the votes per minute, the new devices per day, the views per city and hour and the messages from the contact form per hour. We do not store the IP address itself. The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in tamper-proof counting and protection against spam.
7Cookies and similar technologies
This website only uses technically necessary technologies. They are only used when you tap “I'm in”:
- the cookie
wp_devicewith your device ID, - the same ID in your browser's storage (
wp-device-token) in case your browser does not keep the cookie.
This is the only way the website recognises that your device has already signed up. No consent is required for this (§ 25 (2) no. 2 TDDDG). We also store your choice in the cookie notice in your browser's storage (gz-consent). We do not use advertising cookies.
Only if you choose “Accept” in the cookie notice does Google Analytics also set its own cookies (for example _ga and _ga_HGM8XLH70T), see “Google Analytics”.
8Google Analytics
With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics shows us how visitors use the website, for example which pages and sections are viewed, for how long and from which device type, browser and country. For this, Google Analytics sets cookies and processes your shortened IP address, information about your device and browser and your usage behaviour on this website. We only receive aggregated reports from which no individual persons can be identified.
Google Analytics is only loaded when you choose “Accept” in the cookie notice. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). Google may also process data in the USA. Google is certified under the EU-US Data Privacy Framework, for which the EU Commission has adopted an adequacy decision (Art. 45 GDPR). The data collected by Google Analytics is deleted after 14 months. More in the privacy policy of Google.
You can withdraw your consent at any time with effect for the future: . Then choose “Only necessary”. You can delete cookies already set by Google Analytics in your browser.
9Donations via GoFundMe and PayPal
On our donation page you can support us via GoFundMe or PayPal. The buttons are simple links. Only when you tap them does the page of the respective provider open. Before that, no data is transferred to GoFundMe or PayPal.
- GoFundMe: The provider for donors in Europe is GoFundMe Ireland Ltd., 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. More in the privacy policy of GoFundMe.
- PayPal: The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. More in the privacy policy of PayPal.
To donate, you enter your data, for example name, email address and payment details, directly with the respective provider. The provider itself is responsible for this. We do not see your payment details such as account or card number. We only receive the information belonging to the donation from the provider, such as amount and date and, depending on your settings, your name, your email address and a message. On GoFundMe you can also donate anonymously. GoFundMe and PayPal may also process data outside the EU, for example in the USA.
We only use this information to assign donations, to say thank you and to document our income transparently. The legal basis is Art. 6 (1) (b) GDPR (processing your donation) and Art. 6 (1) (f) GDPR. Our legitimate interest lies in using donations transparently. We do not pass the data on.
10External links and documents
The links to Google Maps, WhatsApp, Telegram, GoFundMe, PayPal and social networks only open third-party services when you tap them. Only then is data transferred to these providers and their privacy policies apply. The PDF documents for download are hosted on this website itself.
11Legal bases
Personal data is processed on the basis of Art. 6 (1) (a) and Art. 9 (2) (a) GDPR (your sign-up), Art. 6 (1) (a) GDPR (contact form and Google Analytics, together with § 25 (1) TDDDG), Art. 6 (1) (b) GDPR (donations), Art. 6 (1) (f) GDPR (hosting, server log files, views per city, protection against misuse and documentation of donations) and § 25 (2) no. 2 TDDDG (device ID in your browser).
12Storage period
Personal data is only stored for as long as is necessary for the respective purpose.
- We delete your sign-up and your device ID as soon as you withdraw the sign-up, otherwise automatically on 14 November 2026, two weeks after the protest. Later sign-ups are deleted after one day.
- The cookie expires at the same time. The ID in your browser's storage is deleted on your next visit after that. You can remove both yourself at any time by deleting the website data in your browser.
- The counters for protection against misuse are deleted after two minutes (votes per minute), after one hour (views per city, messages from the contact form) and after 25 hours (new devices per day). We delete the number of views per city together with the sign-ups on 14 November 2026.
- We delete emails and messages from the contact form as soon as your request has been dealt with and no statutory retention obligations prevent this.
- We keep information about donations for as long as it is needed to document our income. After that we delete it. GoFundMe and PayPal also apply their own retention periods.
13Your rights
In particular, you have the right to:
- Access
- Rectification
- Erasure
- Restriction of processing
- Data portability
- Objection
- Withdrawal of consent given
You can send requests to info@genz-regelt.de . As we do not know who you are, we can only find your sign-up via the ID on your device. The quickest way is to delete it yourself via “Withdraw sign-up”.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
