5data.de - Privacy policy

PRIVACY POLICY

Please note: This is a machine translation of the German version.

Introduction

The protection of your personal data is very important to us. Below you will find information on how we handle your data that is collected through the use of our websites. Your data is processed in accordance with the legal regulations on data protection.

Data Protection Officer

The controller within the meaning of the General Data Protection Regulation (GDPR) is 5data, represented by state-certified technician David Mohrig.

Contact details
Staatl. gepr. Tech. David Mohrig
Dannenwalder Weg 72
13439 Berlin
Germany

Mail: privacy@5data.de
Phone: +49 1578 823 6076

Data protection authority

Responsible for data prtection matters is Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany

Contact details
Mail: mailbox@datenschutz-berlin.de
Web: www.datenschutz-berlin.de

Terminology

This privacy policy is intended to be simple and understandable for everyone. Therefore, the official terms of the General Data Protection Regulation (GDPR) are generally used. The official definitions are explained in Art. 4 GDPR.

Accessing and storing information in end applications

By using our website, information (e.g., IP address) may be accessed or information (e.g., cookies) may be stored in your end applications. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to information or storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TTDSG. In cases where such access to information or storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) sentence 1, (2) no. 2 TTDSG.

In cases where such a process serves other purposes (e.g., the needs-based design of our website), it is carried out on the basis of Section 25 (1) TTDSG only with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The processing of your personal data is subject to the provisions of the GDPR and the Federal Data Protection Act (BDSG).

Further information on the processing of your personal data and the relevant legal basis in this context can be found in the following sections on the specific processing activities on our websites.

Provision of websites

The website is hosted by an external service provider (ALL-INKL.COM - Neue Medien Münnich). This website is hosted in Germany. Personal data collected on these websites is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, website accesses, and other data generated via a website.

We collect the listed data in order to ensure smooth connection to the website and technically error-free provision of our services. The processing of this data is absolutely necessary in order to make the websites available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our websites in accordance with Art. 6 (1) lit. f GDPR.

We have concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect our customers' data and not to pass it on to third parties. We have also concluded a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect our customers' data and not to pass it on to third parties.

Creation of server log files

When you visit our websites, it is technically necessary for your internet browser to transmit data to our web server. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

Date and time of access
Name of the requested file
Page from which the file was requested
Result of the access status
Used browser and version of operating system
User's full IP address
User's internet service provider
Amount of data transferred during data retrieval

The log files are used to evaluate system security and stability, as well as for administrative purposes. The legal basis for processing the data is our legitimate interest in protecting and ensuring the functionality of our websites in accordance with Art. 6 (1) (f) GDPR.

This data is not stored together with other personal data relating to the user. For technical security reasons, in particular to defend against attempts to attack our web server, we store this data for a short period of time. The data is automatically deleted after 10 days at the latest.

Cookies

Our websites use Cookies. Cookies are small text files that are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your browser automatically deletes them. These cookies are stored on the storage medium of your device and do not cause any damage there.

Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertising.

The processing of data through the use of strictly necessary cookies is based on a legitimate interest pursuant to Art. 6 (1) (f) GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing operations.

The processing of personal data through the use of other cookies is based on consent in accordance with Art. 6 (1) (a) GDPR. Consent can be revoked at any time for the future. If such cookies are used for analysis and optimization purposes, we will inform you separately in this privacy policy and obtain consent in accordance with Art. 6 (1) (a) GDPR. If you do not wish to receive cookies, you can refuse them by selecting the “No cookies” option in your browser settings.

You can configure your browser so that you

you will be informed about the setting of cookies,
only permit cookies in individual cases,
exclude the acceptance of cookies for specific cases or in general.
enable automatic deletion of cookies when closing the browser.

Cookie settings can be managed for the respective browsers at the following links:

Most browsers also offer a so-called Do Not Track function. If this function is activated, the respective browser informs advertising networks, websites, and applications that you do not want to be tracked for the purpose of behavior-based advertising and similar purposes.

Information and instructions on how to edit this function can be found under the following links, depending on the browser you are using:

You can revoke or change your cookie settings at any time. To do so, simply access the cookie settings again via our integrated Cookie Consent feature. You can find this at any time at the bottom of the respective website.

User account and/or personal profile

When you create a user account or personal profile on our platforms, we process your access data (e.g., email address, password hash, profile information (personal data, photos, audio recordings, videos, location, if applicable)) to provide you with your account. The legal basis for this is Art. 6 (1) (b) GDPR.

To secure media files, we use an internal token system that only allows temporary direct access. This system does not store any personal data.

Provision of personal photos

We process your personal photos in order to display them in an optimized form on our websites. The data is stored on our servers in Germany. There is no automated processing or transfer to third parties. We use an internal token system to allow only temporary access to the file. The system does not store any personal data. The legal basis for this is Art. 6 (1) (b) GDPR (performance of a contract), insofar as the provision of your photos is necessary for the use of our platform, and, where applicable, Art. 6 (1) (a) GDPR, insofar as you provide the photos voluntarily.

Provision of personal video recordings

We process personal video recordings exclusively for the purpose of displaying your content on our websites. The videos are stored on our servers and only played back within our platforms. There is no automated processing, analysis, or transfer to third parties. To restrict access, we use an internal token system that only allows temporary access and does not store any personal data itself. The legal basis for this is Art. 6 (1) lit. b GDPR (performance of a contract) or Art. 6 (1) lit. a GDPR (consent).

Provision of personal audio recordings

We process personal audio recordings to make them playable on our platforms. The files are stored exclusively on our servers and are only made available via secure, temporary token links. There is no automated analysis, speech recognition, or transfer to third parties. The legal basis for this is Art. 6 (1) (b) GDPR (performance of a contract) or Art. 6 (1) (a) GDPR (consent).

Location approval

If you share your location, we will only use this information to provide you with location-based features (e.g., home location detection, proximity search, or local suggestions). The location data is only processed temporarily and is not stored permanently. It is not passed on to third parties or linked to your profile. Processing is based on your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time in your browser or device settings.

Discussion-/support forum

Our forum is based on Flarum forum software and is operated on our server. When using the forum, personal data such as IP address, user name, and email address are processed to the extent necessar y for the use of the forum.

Various extensions (plugins) are used within the forum functions:

FriendsOfFlarum OAuth: You can optionally use our own OAuth provider auth.5data.de to log in to the forum. In this case, personal data (e.g., name, email address, user ID) will be transmitted by the provider. The use of this login option is based exclusively on your consent in accordance with Art. 6 (1) (a) GDPR.
FriendsOfFlarum Polls: When participating in polls, your voting data is stored internally to prevent multiple entries and to ensure that the results are displayed correctly. This data is not shared with third parties.
FriendsOfFlarum Terms: We store the time and content of your consent to our Terms of Use and Privacy Policy. This serves as proof of your consent in accordance with Art. 6 (1) (c) GDPR and to maintain the non-disclosure agreement agreed with you.

External resources (e.g., emojis, web fonts, or scripts) can be loaded via content delivery networks (CDNs). In doing so, your IP address may be transmitted to the respective provider. This is done on the basis of our legitimate interest in the secure and fast operation of the forum (Art. 6 para. 1 lit. f GDPR).

The data you have collected in the forum will remain until you delete your account. Posts/surveys and polls you have created will not be deleted and will remain in anonymized form. Only your username and any post signature you may have created will be removed.

Embedded third-party content

Spotify widget

On our websites, we use features of the music streaming service Spotify to make songs, playlists, or podcasts directly playable. The provider is Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.

When you visit a page with an embedded Spotify widget, a connection to the Spotify servers is established. Personal data such as your IP address, browser information, and usage behavior may be transmitted to Spotify. If you are logged in to Spotify, Spotify can associate this visit with your user account. If you do not wish to allow this, please do not visit the page with the embedded Spotify widget.

The integration is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time via our cookie settings.

Please note that this may involve data being transferred to third countries (USA). There is a risk that US authorities may access the data. The transfer will only take place with your express consent (Art. 49 (1) (a) GDPR).

For more information about data processing by Spotify, please refer to the

YouTube widget

Videos from the YouTube service are embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit a page with an embedded YouTube video, a connection is established to YouTube's servers. Personal data such as your IP address, device information, and usage behavior may be transmitted to YouTube or Google. If you are logged in to YouTube or Google, your browsing behavior can be directly associated with your personal profile. You can prevent this by logging out of YouTube or Google before visiting our website.

The integration is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time via our cookie settings.

Further information on data processing by YouTube can be found in the

SoundCloud widget

Our website incorporates audio content from the SoundCloud service to enable songs, playlists, or podcasts to be played directly. The provider is SoundCloud Global Limited & Co. KG, Rheinsberger Str. 76/77, 10115 Berlin, Germany.

When you visit a page with an embedded SoundCloud player, a connection is established to SoundCloud's servers. Personal data such as your IP address, device information, and usage behavior may be transmitted to SoundCloud. If you are logged in to SoundCloud, SoundCloud can associate this visit with your user account. If you do not want this, you should not use SoundCloud.

The integration is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time via our cookie settings.

Further information on data processing by SoundCloud can be found in the

Twitch widget

Our website incorporates content from the streaming service Twitch in order to make live streams or videos directly playable. The provider is Twitch Interactive, Inc., 350 Bush Street, 2nd Floor, San Francisco, CA 94104, USA.

When you visit a page with an embedded Twitch player, a connection is established to Twitch's servers. Personal data such as your IP address, device information, and usage behavior may be transmitted to Twitch. If you are logged in to Twitch, Twitch can associate this visit with your user account. If you do not wish to allow Twitch to collect your IP address, device information, and usage behavior, please do not visit pages with embedded Twitch players.

The integration is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time via our cookie settings.

Please note that when using Twitch, data may be transferred to the USA. There is currently no adequate level of data protection in the USA within the meaning of the GDPR. Your data will therefore only be processed with your express consent in accordance with Art. 49 (1) (a) GDPR. There is a risk that US authorities may access your data without you having any effective legal remedies available to you.

For more information about data processing by Twitch, please refer to the

Data transfer

Your personal data will not be transferred to third parties, except:

if we have explicitly pointed this out in the description of the respective data processing,
if you have given your express consent in accordance with Art. 6 (1) (a) GDPR,
the transfer is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding legitimate interest in the non-transfer of your data;
in the event that there is a legal obligation for disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR and
insofar as this is necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.

We also use external service providers to perform our services. We carefully select these providers, commission them in writing, and, where necessary, conclude data processing agreements with them in accordance with Art. 28 GDPR. They are bound by our instructions and are regularly monitored by us. These include service providers for hosting, sending emails and shipments, and maintaining and servicing our IT systems, etc. The service providers will not pass this data on to third parties.

Data security

In accordance with Art. 32 GDPR, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. These websites use SSL encryption for security reasons and to protect the transmission of confidential content.

Duration of storage of personal data

The duration of the storage of personal data is determined by the relevant statutory retention periods (e.g., under commercial and tax law). After the respective period has expired, the corresponding data is routinely deleted. If data is required for the fulfillment of a contract or the initiation of a contract, or if we have a legitimate interest in further storage, the data will be deleted when it is no longer required for these purposes or when you have exercised your right of revocation or objection.

Rights of affected individuals

Below you will find information on the rights that applicable data protection law grants you vis-à-vis the controller with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing, or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details.
The right to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR.
The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it for the assertion, exercise, or defense of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.
The right, pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller.
The right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office indicated above or, if applicable, that of your usual place of residence or workplace.
The right to withdraw consent granted in accordance with Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right of withdrawal or objection

If we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. If the objection is directed against the processing of personal data for direct marketing purposes, you have a general right to object without the need to specify a particular reason.

If you wish to exercise your right of withdrawal or objection, simply email datenschutz@5data.de

Legal responsibilities

The provision of personal data for the decision to conclude a contract, the fulfillment of the contract, or the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide the personal data that is necessary for the conclusion of the contract, the fulfillment of the contract, or pre-contractual measures.

Automated decision-making

Automated decision-making or profiling in accordance with Art. 22 GDPR does not take place.

Right to make changes

We reserve the right to amend or update this privacy policy as necessary in accordance with applicable data protection regulations. This allows us to adapt it to current legal requirements and take into account changes to our services, e.g., when introducing new services. The current version applies to your visit.

Status of this privacy policy: 10/28/2025