Privacy Policy (Datenschutzerklärung)

We are committed to data minimization and privacy. This website operates without advertising cookies, marketing pixels, or third-party analytics. The only script is our own anonymous visitor statistics (Umami, see section 2).

1. Data Controller (Verantwortlicher)

The controller responsible for data processing on this website pursuant to Article 4 No. 7 of the EU General Data Protection Regulation (GDPR / DSGVO) is:

2. Principles of Data Processing

• No Cookies, No Third-Party Tracking: This website does not set any cookies — neither first-party nor third-party. It does not use third-party analytics services (e.g., Google Analytics), advertising pixels, fingerprinting tools, or social media plugins. No cookie consent banner is required because no cookies are used.
• Anonymous Visitor Statistics (Umami): To see which pages are read, we use Umami, open-source statistics software that we run ourselves on our own server (umami.christianstark.net). It sets no cookies and builds no profile of you. It records the page visited, the referring page, browser, operating system, device type, screen size, language, and your country and region. Your IP address is not stored; it is used only to derive the country and region and an anonymous, non-reversible visitor code. Legal basis: our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR). You may object at any time (Art. 21 GDPR) by contacting us, or switch it off by enabling “Do Not Track” in your browser, which we respect.
• Self-Hosted Assets: All stylesheets and visual assets are served directly from our own infrastructure. No connection is established to external font libraries, script CDNs, or third-party asset servers.
• Content Delivery: Cloudflare, Inc. acts as a CDN and reverse proxy in front of this website. Cloudflare processes request data (including your IP address) in order to deliver the site, provide DDoS protection, and route traffic to our origin server. Cloudflare acts as a data processor on our behalf. The data processing agreement with Cloudflare includes EU standard contractual clauses. Cloudflare may process data on servers in the EU and in other countries. For details, see Cloudflare's Privacy Policy.

3. Server Log Files

When you access TokenRestake.com, the web server automatically records technical log entries transmitted by your browser. This processing is technically necessary to deliver the requested web pages securely and reliably.

The processed data includes:

• IP address of the requesting device (anonymized or truncated where standard configuration permits)
• Date and timestamp of the access request
• Target URL and file requested
• HTTP status code returned by the server
• Volume of data transferred (in bytes)
• Referrer URL (if transmitted by your browser)
• Browser type, version, and operating system

Legal Basis: The processing of server log data is grounded in Article 6 Paragraph 1 Point (f) GDPR (legitimate interest) for operational security, attack prevention, error analysis, and technical stability of the website.

Hosting: The website files are served from a server operated by the controller in Germany. Cloudflare processes incoming requests before forwarding them to the origin server (see Section 2 above).

Storage Duration: Server log files on the origin server are retained for a maximum of 14 days and then deleted automatically, unless retention is necessary to investigate abuse or unauthorized access.

4. Inbound Email Contact

If you contact us directly via email (info@tokenrestake.com), your email address, name (if provided), and the contents of your message are processed solely for the purpose of handling and responding to your inquiry.

Legal Basis: Article 6 Paragraph 1 Point (f) GDPR (legitimate interest in processing inbound correspondence) or Article 6 Paragraph 1 Point (b) GDPR if the communication relates to pre-contractual matters. Email correspondence is deleted once the subject matter has been conclusively resolved and no statutory retention obligations apply.

5. No Automated Decision-Making or Profiling

We do not use automated decision-making processes or profiling pursuant to Article 22 Paragraphs 1 and 4 GDPR.

6. Your Rights as a Data Subject

Under the GDPR, you have the following statutory rights regarding personal data concerning you:

• Right of Access (Art. 15 GDPR): You may request confirmation as to whether your personal data is being processed and obtain a copy.
• Right to Rectification (Art. 16 GDPR): You may request the correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data under the conditions of Art. 17 GDPR.
• Right to Restriction of Processing (Art. 18 GDPR): You may request the limitation of processing under statutory conditions.
• Right to Object (Art. 21 GDPR): You have the right to object to data processing based on legitimate interests (Art. 6(1)(f) GDPR) at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The competent supervisory authority for the controller is:
  Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (https://www.ldi.nrw.de).