Mobile History
DEENFR

Privacy policy

Translation for your convenience. The German version is the legally binding one: German version

1. Controller

The controller for the processing of personal data on this service is:
e-Networkers GmbH
Löbstedter Straße 47a, 07749 Jena
Telephone: +49 3641 554000 · Email: info@e-networkers.de

Data protection officer:
André Stämmler c/o Landgraf Datenschutz UG (haftungsbeschränkt)
Markt 22, 07743 Jena · dsb@landgraf-datenschutz.de

2. Hosting & infrastructure

The front end and the programming interfaces are hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) and delivered via their content delivery network. The database, user management (authentication) and file storage (object images) are operated with Supabase in a data centre in the EU (Frankfurt am Main). For sending system emails (e.g. invitations, password resets) we use Resend (EU region). Data processing agreements pursuant to Art. 28 GDPR are in place with these processors; the transfer to the USA (Vercel) is safeguarded by appropriate guarantees (EU standard contractual clauses and the EU-US Data Privacy Framework). Legal basis: Art. 6 (1) (f) GDPR.

3. Access data / server log files

When you visit the pages, access data transmitted by your browser is processed automatically: IP address, date and time of access, page or file requested, volume of data transferred, browser type and operating system. This data serves to establish a secure connection, to maintain system security and to analyse errors, and is not combined with other data sources. The legal basis is our legitimate interest in stable and secure operation (Art. 6 (1) (f) GDPR).

4. Cookies

We use strictly necessary cookies only: for signed-in users we set a session cookie to maintain the login (Supabase Auth).

No cookies are set for tracking or advertising purposes. Legal basis: § 25 (2) TDDDG (technically necessary) in conjunction with Art. 6 (1) (f) GDPR.

5. User account and personal list

You may optionally create an account. In doing so we process your email address and a password (stored encrypted). As a signed-in user you can save sites, mark them as “visited” and store private notes; this information is visible to you alone. The legal basis is the performance of the user relationship (Art. 6 (1) (b) GDPR). You may have your account and the associated data deleted at any time.

6. Newsletters to account holders and click measurement

If you have an account, we occasionally send you news about the service (“newsletters”). They are sent via Resend (Resend, Inc.; processing in the EU region eu-west-1, data processing agreement concluded). We process your email address and — where provided — language and country, in order to narrow down the group of recipients. You may object at any time: via the unsubscribe link at the end of every newsletter (no login required), via the one-click unsubscribe function of your mail programme, or under “Mail and language” in your account. Legal basis: Art. 6 (1) (f) GDPR (informing our own users) in conjunction with § 7 (3) UWG. We log which address a newsletter was sent to and whether it could be delivered; undeliverable addresses are blocked in order to protect deliverability.

To measure success, we rewrite the links in newsletters. A click first leads to an address under /r/… and from there immediately to the actual destination. In doing so we store solely which link in which newsletter was clicked by which account. We do not store the IP address, browser or device. We deliberately do not use a tracking pixel; opens are not measured. Nor is a behavioural profile built across several newsletters — evaluation is per newsletter. Legal basis: Art. 6 (1) (f) GDPR (interest in addressing users appropriately); no access to your terminal equipment within the meaning of § 25 TDDDG takes place, since the request is only triggered by your click. You can object to this measurement by unsubscribing from the newsletters.

None of this affects account emails (password resets, purchase confirmations, invoices). These are necessary for the performance of the user or contractual relationship (Art. 6 (1) (b) GDPR) and continue to be delivered even after you unsubscribe from newsletters.

7. Reach measurement (Vercel Analytics & Speed Insights)

To improve our service we use Vercel Web Analytics and Vercel Speed Insights. These collect aggregated usage and performance data (e.g. page views, loading times) without cookies and without creating personal profiles; no cross-device tracking takes place. Legal basis: Art. 6 (1) (f) GDPR.

8. Map display (MapLibre / OpenFreeMap)

The map view is based on MapLibre GL with vector map tiles from OpenFreeMap (data source: OpenStreetMap). When the map loads, your IP address is necessarily transmitted to the map tile server for technical reasons. No Google services are used for the map display. Legal basis: Art. 6 (1) (f) GDPR.

9. Fonts

The fonts used (Inter, Fraunces) are delivered locally from our own server (self-hosting). No connection to Google Fonts or other external providers takes place.

10. Content from Wikipedia / Wikimedia Commons

Part of the site descriptions and images is obtained from Wikipedia or Wikimedia Commons and reproduced under the licences applicable there (e.g. CC BY-SA) with attribution. No personal data of our users is transmitted to Wikimedia in this process.

11. Your rights

Under the GDPR you have the right to:

  • access to the data we process about you (Art. 15),
  • rectification (Art. 16) and erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interests (Art. 21),
  • withdraw consent given, with effect for the future (Art. 7 (3)).

You also have the right to lodge a complaint with a supervisory authority, for example the Thüringer Landesbeauftragter für den Datenschutz und die Informationsfreiheit (TLfDI), Häßlerstraße 8, 99096 Erfurt.

12. Data security

Transmission is encrypted via TLS/SSL (HTTPS). We take technical and organisational measures to protect your data against unauthorised access and loss.

13. Currency of this policy

This privacy policy is adapted when the services or the legal situation change. The version published on this service applies in each case.