$ cat privacy.txt
Privacy
Protecting your personal data matters to us. Below we explain which data we process when you visit this site and use its functions.
## Controller
Wenzel Srb / Futurenaut Alter Schlachhof 5 76135 Karlsruhe Germany E-mail: lets@justbuild.it
## Access data / server log files
When you open this site, the hosting infrastructure automatically records information in server log files, in particular:
- ├─ IP address of the requesting device
- ├─ date and time of access
- ├─ name and URL of the requested page or file
- ├─ browser type and operating system
- ├─ the previously visited page (referrer), if any
Processing is based on our legitimate interest in a secure and stable operation of the site (Art. 6 (1) (f) GDPR). Log data is deleted promptly unless it is exceptionally needed longer to investigate or fend off attacks.
## Hosting
The site runs on self-managed server infrastructure in Germany. The access data listed above is processed as part of hosting. The legal basis is our legitimate interest in providing our service securely and efficiently (Art. 6 (1) (f) GDPR).
## Entries on the map
When you add yourself, we store the data you enter: name, city, what you are building, website, optional social handles, optional bio and your e-mail address. We use it to review the entry and, once approved, to show it on the map and on your profile page.
Everything except the e-mail address is published once the entry is approved. The e-mail address stays private and is only used to confirm that a real person made the entry and to handle edit or deletion requests. Legal basis is your consent given by submitting the form (Art. 6 (1) (a) GDPR) and our legitimate interest in maintaining and reviewing the directory (Art. 6 (1) (f) GDPR). You can request a change or the deletion of your entry at any time by e-mail.
## Geocoding of city names
To place a pin, the city name you enter is sent from our server to the geocoding service Nominatim, operated by the OpenStreetMap Foundation. Only the city name is transmitted, not your name, e-mail or IP address. Legal basis is our legitimate interest in a working map (Art. 6 (1) (f) GDPR). Provider information: osmfoundation.org/wiki/Privacy_Policy.
## Map tiles
The map images (tiles) load in your browser from the OpenStreetMap Foundation (tile.openstreetmap.org). Your browser transmits its IP address and the requested map section to that provider. Legal basis is our legitimate interest in displaying the map (Art. 6 (1) (f) GDPR). Provider information: osmfoundation.org/wiki/Privacy_Policy.
The 'locate me' button uses your device's location only after you allow it in your browser. The position is used locally to move the map and is never sent to our server.
## Google Analytics
If you click 'accept' in the cookie notice, we embed Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics then sets the cookies _ga and _ga_* (lifetime up to two years) to count visits and page views; we use the reports only to understand how the site is used. Before you click, no Google script is loaded and no data is sent to Google. Legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). According to Google, Google Analytics 4 does not log or store IP addresses; the data may however be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission, Art. 45 GDPR). We have concluded a data processing agreement with Google (Art. 28 GDPR). User data stored by Google Analytics is deleted after 14 months at the latest. You can withdraw your consent at any time: click 'cookies' in the status bar at the bottom and choose 'decline'. Further information: policies.google.com/privacy and support.google.com/analytics/answer/6004245.
## Cookies
This site sets three technically necessary cookies: jb_lang stores your language choice (English or German), jb_theme stores your choice of dark or light mode, jb_consent stores your decision about Google Analytics. They contain only that preference, expire after one year at the latest and are not used for advertising or tracking. Storage is required to display the site as you chose it (§ 25 (2) no. 2 TDDDG); the legal basis of processing is our legitimate interest in an appropriate presentation (Art. 6 (1) (f) GDPR). On your first visit the language is chosen from your browser's language setting; no IP-based lookup takes place. Beyond that, the site only sets the Google Analytics cookies described above, and only after your consent; it embeds no advertising networks.
## External links
This site links to external offers, in particular the websites and social profiles of the people listed. When you click such a link, the privacy policy of the respective provider applies. The link itself does not transmit any personal data to those providers.
## Your rights
Under the GDPR you have the following rights:
- ├─ access to the data stored about you (Art. 15 GDPR)
- ├─ rectification of inaccurate data (Art. 16 GDPR)
- ├─ erasure (Art. 17 GDPR)
- ├─ restriction of processing (Art. 18 GDPR)
- ├─ data portability (Art. 20 GDPR)
- ├─ objection to processing based on legitimate interest (Art. 21 GDPR)
To exercise your rights, an informal message to lets@justbuild.it is enough. You can withdraw consent at any time with effect for the future.
## Right to lodge a complaint
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. You may also contact the authority at your usual place of residence.
## Changes to this privacy policy
We update this privacy policy whenever the legal framework or the site's functions change. The version published on this page applies.