Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Melissa Lohmann
Alemannenstraße 25
01309 Dresden
Germany
Email: melissalohmann97@gmail.com

The muDDi Club Dresden is a private, volunteer-run initiative and not a registered association. The controller is therefore the person named above. When we say "we" in this policy, we mean her and the muDDi Club team who support her.

We have not appointed a data protection officer because we are not legally required to do so. For any questions about data protection, you can reach us at muddiclubdresden@gmail.com.

This privacy policy explains which personal data we process when you visit our website muddi.club or get in touch with us, what we need it for and what rights you have.

• We do not use cookies or tracking for visitors. That is why there is no cookie banner.
• We do not embed content from other providers, so no Instagram posts, maps, videos, Google Fonts or captchas. Fonts, images and scripts are served from our own server.
• Our visitor statistics run on our own server, without cookies and without storing IP addresses.
• Whatever you send us via a form is used only for your request and deleted automatically after 12 months.
• You only receive the newsletter after confirming your subscription by email. You can unsubscribe at any time.
• Weather data, map data and content from our Instagram account are retrieved by our server only. No data about you is transmitted in the process.
• We use an AI service to detect meetup dates, for image descriptions and for translations. We only send our own content there, no data about you.
• We do not sell data and do not pass it on for advertising purposes.

Our website is aimed at adults. You are not obliged to provide us with personal data. Without certain details, such as your email address, we cannot reply to you, for example.

For each processing activity we state the legal basis. The most important ones are your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and our legitimate interests (Art. 6(1)(f) GDPR). Storing information in your browser and accessing it is additionally governed by the German Telecommunications Digital Services Data Protection Act (TDDDG).

Our website runs on a server that the operator named below runs for us. The server is located in a hosting provider's data centre.

Server operator: ein IT-Dienstleister aus Dresden, der den Server in unserem Auftrag betreibt (Auftragsverarbeitung nach Art. 28 DSGVO)
Data centre: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen
Server location: Deutschland (Nürnberg)

All components of the website run on this server: the website software, the content management system, the database and the visitor statistics. The operator sets up and maintains the server, the hosting provider supplies the data centre, hardware and network connection. Both can technically access the stored data but may only process it on our instructions. We have concluded a data processing agreement under Art. 28 GDPR with the operator, which covers the hosting provider as a sub-processor.

The legal basis is our legitimate interest in providing the website securely, quickly and reliably (Art. 6(1)(f) GDPR). For data you send us, for example via a form, the legal basis stated there applies.

The connection to our website is encrypted with TLS (recognisable by "https" in the address bar). Only our team has access to stored inquiries and the editorial area, each person with their own password-protected account.

We back up the database regularly so that nothing is lost in the event of a technical failure. The backups remain in Germany. Deleted data disappears from the backups as soon as they are overwritten in the regular cycle.

Each time you access our website, your browser automatically sends data to our server. The server stores the following in so-called log files:

• your IP address
• date and time of access
• the address accessed (URL)
• the page from which you came to us (referrer)
• browser and operating system (user agent)

We need this data to deliver the website, find errors and detect and prevent attacks or misuse. We do not use it for statistics and do not combine it with other data.

The legal basis is our legitimate interest in stable and secure operation (Art. 6(1)(f) GDPR).

The log files are deleted automatically after 14 days. If we need individual entries to investigate a specific security incident, we keep them until the investigation is complete.

The log files are stored on our server only. Apart from us, only our hosting provider has access, as our processor.

Our website does not set any cookies for visitors, neither our own nor those of other providers. Nor do we use any other techniques to recognise you or track you across different websites. That is why we do not need a cookie banner.

There is only one exception, and you trigger it yourself: if the website shows you the hint "Also available in English" and you close it, your browser remembers this in its local storage (localStorage) so that the hint does not reappear on every page. All that is stored is the fact that you closed the hint, without any identifier and without any link to you as a person. The information stays in your browser and is not transmitted to us. You can delete it at any time in your browser settings. The legal basis is Section 25(2) no. 2 TDDDG, because storing it is strictly necessary to provide the function you requested, namely hiding the hint permanently.

On our links page you can recommend us to friends using your device's share function. This opens your operating system's share menu; we do not learn whether or with whom you share.

For members of our team who log in to the editorial area, we set technically necessary cookies (see the section "Editorial area (team only)").

To understand which content is read and how visitors find us, we use the open-source software Umami. We run Umami ourselves on our server. The measurement runs via our own domain (under /stats), so no data is transmitted to other providers.

Umami does not set cookies, does not store anything in your browser and does not create profiles across different websites. It records:

• the page accessed and the page you came from (referrer)
• browser, operating system and device type, derived from the identifier your browser sends with every page request anyway (user agent)
• your approximate location at the level of country, region and city, derived from the IP address
• certain actions, for example a click on our Instagram or WhatsApp link or the submission of a form, without the content of what you enter

Your IP address is only processed briefly in memory and is not stored. Umami combines it with the browser identifier and a random value that changes every month to create a session identifier. This allows the page views of one visit to be grouped together without us knowing who you are and without being able to recognise you over a longer period.

We use the analyses to improve the website. We only show our partners aggregated figures, such as visits per month or clicks on their links.

Our counter does not read any properties of your device, such as screen size or language setting, and does not store anything in your browser. It only transmits the address of the page accessed, the previous page and the page title, i.e. information that arises anyway when a page is accessed. The legal basis is our legitimate interest in privacy-friendly audience measurement (Art. 6(1)(f) GDPR).

The measurement data stays on our server. We delete it after 24 months at the latest. We only keep monthly totals permanently, such as visits per month or how often a link was clicked. They do not allow any conclusions about individual people.

If you do not want to be counted, you can block requests to /stats with a content blocker or disable JavaScript. The website also works without it. As we do not store any data that identifies you, we cannot attribute individual entries to you (Art. 11 GDPR).

If you write to us using the contact form, we process the details you enter there: your name, your email address, the selected topic and your message. We also store the time of submission and the language of the page.

We use this data only to handle your inquiry and reply to you. The inquiry is stored in our content management system on our server and also forwarded by email to our inbox muddiclubdresden@gmail.com. Only our team can read it.

Please do not send us health data or other particularly sensitive information via the form that we do not need for your inquiry.

The legal basis is our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR). If your inquiry concerns a collaboration or a contract, the legal basis is Art. 6(1)(b) GDPR.

To protect against spam, the form contains an invisible field that only automated programs fill in, and we discard forms that are submitted unrealistically fast. To prevent mass use of the form, we briefly count how often submissions come from the same IP address. For this, we keep the IP address only in transformed form (as a hash value) in memory, do not store it in the database and discard it after a short time. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

We delete your inquiry automatically 12 months after receipt. If you ask us to, we delete it earlier, unless a statutory retention obligation applies. We delete the notification in our email inbox no later than after the same period. We only keep the number of inquiries per month permanently, without names or content.

Recipients: our hosting provider, Brevo for sending emails (see the section "Sending emails via Brevo") and the provider of our email inbox (see the section "Contact by email and via social networks"). We do not pass on your details to anyone else.

Companies and organisations that would like to work with us can write to us using the form on the "Become a partner" page. We process: company, name of the contact person, email address, website, industry, the annual partnership and the partnership formats you are interested in, your message and the time and language of the inquiry.

We use this data to review the inquiry, reply to you and discuss a possible collaboration. The inquiry is stored in our content management system on our server and forwarded to our inbox by email.

The legal basis is the initiation of a contract (Art. 6(1)(b) GDPR). Insofar as you act on behalf of a company, we process your data as its contact person on the basis of our legitimate interest in communicating with the company (Art. 6(1)(f) GDPR).

To protect against spam, the form contains an invisible field that only automated programs fill in, and we discard forms that are submitted unrealistically fast. To prevent mass use of the form, we briefly count how often submissions come from the same IP address. For this, we keep the IP address only in transformed form (as a hash value) in memory, do not store it in the database and discard it after a short time. The legal basis is our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR).

We delete the inquiry automatically 12 months after receipt; only the number of inquiries per month is kept permanently. If a collaboration results, we process the contact details for its duration. Documents we must keep for tax or commercial law reasons, such as invoices, are kept for as long as the law requires: invoices and accounting records for eight years, business letters and emails for six years (Section 147 of the German Fiscal Code; Art. 6(1)(c) GDPR).

Active partners receive a short monthly report by email with aggregated figures, such as how often their links were clicked. This report does not contain any data about individual visitors.

Recipients: our hosting provider, Brevo for sending emails (see the section "Sending emails via Brevo") and the provider of our email inbox (see the section "Contact by email and via social networks"). We do not pass on your details to anyone else.

If you send us an email at muddiclubdresden@gmail.com, we process your email address, your name if you provide it and the content of your message in order to reply to you. The legal basis is our legitimate interest in answering inquiries (Art. 6(1)(f) GDPR), and for inquiries about a collaboration Art. 6(1)(b) GDPR.

Our email inbox is hosted by Google (Gmail). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the emails in our inbox and may also process data on servers in the USA. For transfers to the USA, Google relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Google LLC is certified, and on standard contractual clauses. More information: policies.google.com/privacy.

We delete emails as soon as we no longer need them to deal with your request, and we review this at least every 12 months. Business emails, for example with partners, may be subject to statutory retention obligations; we keep these until the retention period has expired.

Messages via Instagram or WhatsApp

If you write to us via Instagram or WhatsApp, your messages are handled by Meta's services. We only use them to reply to you and delete conversations once they are settled and no longer needed. For processing by Meta, see the section "Instagram and WhatsApp".

With our newsletter "Post vom muDDi Club" we keep you informed about upcoming meetups, new guide articles and news from the club about once a month. It occasionally contains information about offers from our partners, which we label as advertising.

Subscription with confirmation (double opt-in)

To subscribe, we only need your email address. Optionally, you can give your first name (for a personal greeting) and your child's age group (so that we can choose content suited to the age). After submitting the form, you receive an email with a confirmation link. You are only added once you click it. This ensures that nobody subscribes with someone else's email address.

The subscription runs via our server, which passes your details directly to Brevo and does not store them itself. As proof of your consent, Brevo stores the time of subscription, the confirmation email and the time of confirmation. When you click the confirmation link, you open an address belonging to Brevo; for technical reasons Brevo receives your IP address. If you do not confirm, the link expires after 30 days and you are not added.

Email service provider Brevo

We send the newsletter via Brevo. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (a subsidiary of Sendinblue SAS, Paris). Your details are stored exclusively at Brevo, not on our server. Brevo processes them only on our behalf; we have concluded a data processing agreement with Brevo under Art. 28 GDPR for this purpose. Brevo stores the data in the EU (data centres in France and Belgium). For individual tasks such as customer support and delivery via a content delivery network, Brevo uses sub-processors, including in the USA and India. Such transfers are safeguarded by the European Commission's standard contractual clauses (Art. 46 GDPR) and in some cases additionally by the EU-US Data Privacy Framework (Art. 45 GDPR). On the free plan, every email contains a Brevo logo.

Open and click tracking

Brevo records whether a newsletter was opened and which links in it were clicked. For this purpose, the email contains a tiny image that is loaded from Brevo when the email is opened, and the links briefly pass through Brevo. We use this analysis to see which topics interest you and to give our partners aggregated open rates. If you do not want this, you can turn off automatic image loading in your email program or unsubscribe from the newsletter.

Legal basis, withdrawal and storage period

The legal basis is your consent (Art. 6(1)(a) GDPR; for open and click tracking additionally Section 25(1) TDDDG, for advertising content Section 7(2) no. 2 of the German Act against Unfair Competition, UWG). You can withdraw your consent at any time with effect for the future, most easily via the unsubscribe link at the end of every email or by email to muddiclubdresden@gmail.com. This does not affect the lawfulness of processing carried out before the withdrawal.

Your data remains stored at Brevo for as long as you are subscribed to the newsletter. After you unsubscribe, we delete your first name and age group. We keep your email address and the proof of your consent, marked as unsubscribed (block list), for up to three years so that you do not receive any further emails and so that we can prove your earlier consent if necessary (Art. 6(1)(f) GDPR). After that, we delete this entry as well.

Emails that our website sends automatically are sent via Brevo's SMTP service. These include, for example, notifications to us about new inquiries, invitations and password reset links for our team, system notices to our team and monthly reports to our partners.

In doing so, Brevo processes the sender and recipient addresses, the content of the email and technical delivery data such as time and delivery status on our behalf. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany (a subsidiary of Sendinblue SAS, Paris); a data processing agreement under Art. 28 GDPR is in place with Brevo. Brevo keeps the delivery logs for twelve months, after which they are deleted.

The legal basis is the same as for the respective reason for the email, for example our legitimate interest in handling inquiries quickly (Art. 6(1)(f) GDPR).

For our muDDi Walks, we show a weather note a few days before the date. Our server retrieves the forecast via the Bright Sky service (brightsky.dev), which provides the open data of the German Meteorological Service (Deutscher Wetterdienst, DWD). We only transmit the coordinates of the meeting point and the time of the meetup.

Your browser does not connect to Bright Sky or the German Meteorological Service, and no data about you is transmitted. We do not process any personal data in this context.

Source of the weather data: Deutscher Wetterdienst, provided via Bright Sky. All information without guarantee.

So that we can display meeting points correctly and provide information about the surroundings, such as the nearest playground, a café or the nearest public transport stop, our server queries data from the OpenStreetMap project:

• Nominatim, to convert addresses and place names of meeting points into coordinates and districts. It is operated by the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom.
• the Overpass API, to find places near a meeting point and the course of the river Elbe for our design. The instance we use, overpass-api.de, is operated by FOSSGIS e.V., Bundesallee 23, 10717 Berlin, Germany.

Only names, addresses or coordinates of public meeting points are transmitted, plus a contact address of our club as required by the usage policies. We cache the results on our server. Your browser does not connect to OpenStreetMap, and no data about you is transmitted.

Map data: © OpenStreetMap contributors, available under the Open Database License (ODbL).

On our website we show posts and photos from our own Instagram account @muddi.club as well as our number of followers. This content is not embedded: our server retrieves it via Instagram's official interface (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland), stores images, captions, publication date and link on our server and delivers them from there.

When you visit our website, your browser therefore does not connect to Instagram or Meta, and Meta learns nothing about your visit. A connection is only established when you click a link to Instagram (see the section "Instagram and WhatsApp").

Our posts may show people, such as participants in our meetups and their children. We only publish such photos with consent (see the section "Photos from our meetups"). We base their display on our website on these consents and on our legitimate interest in showing our community on our own website (Art. 6(1)(a) and (f) GDPR).

We store the content for as long as the post exists on Instagram and we show it on the website or it belongs to a meetup recap. If a post is deleted on Instagram, our website detects this at the next retrieval and hides it in the Instagram section. If someone withdraws their consent to a photo, we also delete it from our server.

Meetup dates from our Instagram posts

We announce our meetups mainly on Instagram. So that we do not have to maintain them twice, our server sends the captions and images of new posts and stories from our own Instagram account to the AI service Claude by Anthropic. The AI suggests the date, time and place of a meetup. Every suggestion is checked by a member of our team before it appears on the website. The images may show people; the AI is not used to recognise or identify people.

Translation into English

We automatically translate our German content, such as guide articles, meetup descriptions and page texts, into English using the same service. These texts may contain names and short descriptions of team members, authors or partners.

Image descriptions

So that our photos are described for people using screen readers and for search engines, our server sends photos shown on our website in reduced size to the same service. The AI suggests a short image description in German and English, which our team checks and can adjust. The photos may show people; the AI is not used to recognise or identify people and only describes them in general terms, for example as "two mums with prams".

Spell check and writing help

When our team saves texts in the editorial area or taps "Rephrase", our server sends the changed texts to the same service so that it can find typos or make a suggestion. This only concerns website content, such as meetup descriptions, page and partner texts, no inquiries and no data about visitors.

No visitor data

We do not transmit any data about visitors to our website to Anthropic: no IP addresses, no form entries and no newsletter data.

Provider, data processing agreement and third country

The provider is Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland. Anthropic processes the data on our behalf on the basis of a data processing agreement under Art. 28 GDPR, which forms part of Anthropic's contractual terms. Under these terms, Anthropic does not use the transmitted content to train its AI models and deletes it no later than 30 days after receipt. Content is only kept longer if it violates Anthropic's usage policies.

The data is also processed in the USA, among others by the parent company Anthropic PBC. Anthropic is not certified under the EU-US Data Privacy Framework. We therefore base the transfer on the EU standard contractual clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement with Anthropic.

Legal basis and storage period

The legal basis is our legitimate interest in keeping our volunteer-run website up to date with little effort and in offering it in English as well (Art. 6(1)(f) GDPR). For photos that show people, the section "Photos from our meetups" also applies.

We store the results of the analysis, i.e. detected details and suggestions, on our server for as long as the related post or meetup is stored with us. Translations are part of the respective page and are stored and deleted together with it.

At our meetups we sometimes take photos to show on our website, on Instagram, in the newsletter and occasionally in press materials what goes on at our meetups. The following applies:

• We only photograph and publish people with their consent. For children, we need the consent of the parents or all persons with parental responsibility.
• Wherever possible, we show children in a way that they cannot be recognised, for example from behind or without their face. We never publish children's names.
• If you do not want to be photographed, just let us know. That is perfectly fine and has no disadvantages for you whatsoever.
• We ask separately before passing photos on to the press.

The legal basis is your consent (Art. 6(1)(a) GDPR). For publishing photos in which you can be recognised, Section 22 of the German Art Copyright Act (KUG) also requires consent.

You can withdraw your consent at any time without giving reasons, with effect for the future, for example by email to muddiclubdresden@gmail.com or by sending us a message. We will then promptly remove the photo from our website and delete or edit the affected Instagram posts as far as we are able to. Unfortunately, we cannot retrieve anything that others have already copied, shared or printed. This does not affect the lawfulness of publication before the withdrawal.

We store photos for as long as consent exists and we use them. We keep the signed consent forms for that period and up to three years afterwards so that we can prove they existed (Art. 7(1) and Art. 6(1)(f) GDPR).

Photos published on Instagram are also processed by Meta under its own responsibility, including in the USA (see the section "Instagram and WhatsApp"). We show photos and names of our team and authors with their consent.

Links instead of embedding

On our website you will find buttons and links to our Instagram profile and our WhatsApp community. These are simple links. We do not embed any plugins, scripts or content from Instagram, WhatsApp or Meta. As long as you do not click, these services receive no data about your visit to our website.

Only when you click such a link does Instagram or WhatsApp open in your browser or app. From then on, the providers process your data under their own responsibility, such as your IP address, information about your device and, if you are logged in, your account data. The providers are Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Instagram) and WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (WhatsApp). Meta also processes data in the USA and relies on the EU-US Data Privacy Framework for this. The privacy policies of Instagram and WhatsApp apply.

If our visitor statistics are active, we count the click as an anonymous event (see the section "Visitor statistics with Umami").

Our Instagram profile

When you visit our profile @muddi.club on Instagram, Meta processes your data according to its own terms. Meta provides us with aggregated statistics, for example on reach and number of followers, which do not allow conclusions to be drawn about individuals. According to the case law of the Court of Justice of the European Union, we and Meta are jointly responsible for these statistics (Art. 26 GDPR). In an agreement, Meta has undertaken to assume primary responsibility for this and to respond to requests concerning your rights (joint controller addendum). You can also exercise your rights against us; we will then forward your request to Meta. The legal basis for our presence there is our legitimate interest in showing and reaching our community (Art. 6(1)(f) GDPR).

Our WhatsApp community

We announce our meetups in a WhatsApp community. When you join, WhatsApp processes your data under its own responsibility. As admins of the community, we see your profile name and phone number; depending on WhatsApp's settings, other members may see them too. We only use this information to organise the community and our meetups and do not transfer it to other lists or systems. The legal basis is our legitimate interest in organising the meetups (Art. 6(1)(f) GDPR).

You can leave the community at any time. If you do not want to use WhatsApp, you can also find all meetups here on the website and in our newsletter.

On our website we link to other websites, for example to press reports about the muDDi Club, to our partners, to further information in guide articles and, for meetups, to OpenStreetMap ("Plan route"). This content is not embedded. The media logos are stored on our own server.

You only leave our website when you click such a link. The operator of the target page then receives the usual data from your browser, such as your IP address, and may set its own cookies. We have no influence on this; the privacy policy of the respective website applies.

With partner and affiliate links, the target provider can recognise that you came from our website, for example via a code in the link. We do not receive any personal data about you in the process.

To take over the title, date and outlet of press reports, our server retrieves the linked pages once. No data about you is transmitted in the process. We deliver the press kit and other downloads from our own server.

If our visitor statistics are active, we count clicks on these links as anonymous events.

We maintain our content in an editorial area that is used only by members of our team with their own account. This section does not apply to visitors of the public pages.

When a team member logs in, we set a cookie containing a login token (payload-token) so that the login persists. It is only valid for the duration of the login and expires after a few hours or on logout. If a team member uses the preview for unpublished content, the website also sets a preview cookie (__prerender_bypass), which is deleted when the preview ends or at the end of the browser session. Both cookies are technically necessary (Section 25(2) no. 2 TDDDG).

For each team account, we store the name, email address and role, the password only as a non-reversible hash value, and an activity log of who changed which content and when. We send invitations and password reset links by email. The legal basis is our legitimate interest in secure and traceable editorial operations (Art. 6(1)(f) GDPR). We delete accounts when someone leaves the team; entries in the activity log are deleted automatically after one year.

You have the following rights against us with regard to your personal data:

• Access to information on whether and which data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
• Erasure of your data, unless there is an obligation to retain it (Art. 17 GDPR)
• Restriction of processing, for example while the accuracy of your data is being checked (Art. 18 GDPR)
• Data portability, i.e. to receive data you have provided to us on the basis of consent or a contract in a common, machine-readable format (Art. 20 GDPR)
• Withdrawal of consent at any time with effect for the future (Art. 7(3) GDPR)
• Objection to certain processing (Art. 21 GDPR, see below)
• Complaint to a data protection supervisory authority (Art. 77 GDPR, see the section "Right to lodge a complaint")

Simply write to us at muddiclubdresden@gmail.com. Exercising your rights is free of charge. We reply as quickly as possible and within one month at the latest. So that we do not disclose data to the wrong person, we ask for proof of your identity in cases of doubt.

Right to object (Art. 21 GDPR)

If we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If we process data for direct marketing purposes, you may object to this at any time without giving reasons. We will then no longer process the data for this purpose.

An informal message to muddiclubdresden@gmail.com is sufficient to object.

No automated decisions

We do not make any decisions about you based solely on automated processing (Art. 22 GDPR) and do not create profiles.

If you believe that we are not processing your data lawfully, you can lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR). You are of course also welcome to contact us first so that we can try to resolve the matter together.

The authority responsible for us is:

Die Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner)
Devrientstraße 5
01067 Dresden
Germany
www.datenschutz.sachsen.de

We update this privacy policy when our website, the services we use or the legal situation change. The sections are generated automatically from the services that are actually active. The version you find on this page always applies; the "last updated" date shows when it last changed.