Privacy

Detailed privacy information

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Leonid Levyatov
ZEITUNG.IO / 77L MEDIA GROUP
Am Sonnenhang 25
34346 Hann. Münden
Germany

E-mail: press@zeitung.io

2. Hosting and server log files

ZEITUNG.IO is hosted using infrastructure provided by lima-city / TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany.

When the website is accessed, technical data required for delivery, security and fault analysis may be processed. This can include the IP address, date and time of access, requested domain and URL, HTTP method and version, response status, transferred data volume, browser/User-Agent information, technical request data and security or abuse-prevention information.

The purpose is the secure, stable and technically correct operation of the website and protection against attacks and misuse.

The legal basis for processing by ZEITUNG.IO is Art. 6(1)(f) GDPR. The legitimate interests are secure website operation, system stability, error analysis and prevention of misuse.

According to the hosting provider's current information, technical access and security logs may be retained for up to 90 days.

3. Technically necessary session functions

ZEITUNG.IO may use a technically necessary server session, in particular to protect forms against cross-site request forgery (CSRF) and to maintain security functions.

Such session functionality is not used by ZEITUNG.IO for advertising profiling. Its purpose is the secure provision of the expressly requested website function.

The processing is based on Art. 6(1)(f) GDPR. Access to or storage of information on the user's device is carried out, where applicable, on the basis of § 25(2) TDDDG insofar as it is strictly necessary for the requested service.

4. Contact form

When the contact form is used, ZEITUNG.IO processes the information entered by the user. Depending on the form submission, this includes name, e-mail address, subject, message, referenced URL, language and the time of the request.

For security and abuse documentation, the contact archive also stores a SHA-256 hash value derived from the request IP address. The contact archive created by this form does not store the raw IP address in that record. The hash is treated as pseudonymous technical data.

These data are used exclusively to receive, document and respond to the respective inquiry and to deal with editorial tips, correction requests, cooperation requests or technical enquiries.

For general editorial and organisational communication, processing is based on Art. 6(1)(f) GDPR. ZEITUNG.IO has a legitimate interest in receiving and answering enquiries.

If the communication concerns the conclusion or performance of a contract or steps requested before entering into a contract, Art. 6(1)(b) GDPR may additionally apply.

Contact data are retained only for as long as necessary to process and document the request. They may be retained for a longer period where statutory retention duties or legitimate interests in the establishment, exercise or defence of legal claims require this.

5. Newsletter

When subscribing to a ZEITUNG.IO newsletter, the e-mail address, selected sections, selected delivery frequency and the technical data required to administer and verify the subscription are processed.

ZEITUNG.IO uses a Double-Opt-In procedure. The subscription becomes active only after confirmation via the confirmation link sent to the supplied e-mail address.

The legal basis is the subscriber's consent pursuant to Art. 6(1)(a) GDPR.

Consent can be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

After unsubscribing, the address is removed from the active mailing process. Data required to demonstrate that consent was lawfully obtained may be retained for as long as this is necessary for legal documentation or the defence of legal claims.

6. Recipients and technical service providers

Personal data are disclosed only where this is necessary for the stated purposes, where a processor or technical service provider is involved, where there is a legal obligation, or where the data subject has consented.

Possible recipient categories include hosting, infrastructure and e-mail service providers as well as authorised public authorities where disclosure is legally required.

Personal data from contact or newsletter forms are not sold to advertisers.

7. Rights of data subjects

Subject to the statutory requirements, data subjects have in particular the rights of access under Art. 15 GDPR, rectification under Art. 16 GDPR, erasure under Art. 17 GDPR, restriction of processing under Art. 18 GDPR, data portability under Art. 20 GDPR and objection under Art. 21 GDPR.

Where processing is based on consent, consent may be withdrawn at any time pursuant to Art. 7(3) GDPR.

Requests concerning data protection can be sent to press@zeitung.io .

8. Right to lodge a complaint

Data subjects have the right to lodge a complaint with a competent data protection supervisory authority.

For a controller established in Lower Saxony, the competent supervisory authority is in particular:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany

www.lfd.niedersachsen.de

9. Automated decision-making

No automated individual decision-making within the meaning of Art. 22 GDPR is carried out in connection with the contact and newsletter functions described above.

10. Changes to this privacy information

ZEITUNG.IO updates this privacy information when technical functions, service providers or legal requirements change.

Last updated: 25 August 2026