Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

Andre Schmidt
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
E-mail: cc.tdimhcserdna@toolenotsyek

2. Hosting (Railway)

This website is hosted by Railway Corp. When the pages are accessed, the host processes technically necessary data on our behalf (including IP address, date/time, requested resource, browser type). The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place.

3. Cloudflare (CDN & proxy)

To deliver, secure and accelerate the website we use the content delivery network and reverse proxy of Cloudflare, Inc. All traffic between your browser and our server is routed through Cloudflare’s servers. In doing so, Cloudflare processes technically necessary data such as your IP address in order to route requests, mitigate attacks (e.g. DDoS) and cache content. For this purpose Cloudflare may set technically necessary cookies (e.g. “__cf_bm” for bot detection). The legal basis is our legitimate interest in secure, performant and available operation (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place; a transfer to the USA is possible and is safeguarded by the EU Standard Contractual Clauses.

4. Server log files

The provider automatically collects information in so-called server log files that your browser transmits automatically. This data cannot be attributed to specific individuals and is not merged with other data sources. It is deleted after a short period unless required to investigate misuse or technical faults.

5. Cookies and local storage

Without your consent this website sets no cookies for analytics or advertising. What you allow is your choice, made in the consent banner; that choice is kept in your browser's local storage under “kl-cookie-consent” and never leaves your device. The “Cookie settings” link in the footer lets you change or withdraw it at any time. Alongside it there is a technically necessary cookie called “kl-lang”. It contains nothing but the language code (“de” or “en”), allows no conclusions about you as a person, and is used solely to greet you in the same language on your next visit. The legal basis is our legitimate interest in a working language switch (Art. 6(1)(f) GDPR). You may delete the cookie in your browser at any time; the site remains fully usable.

6. Analytics

For analytics we use Google Analytics 4 (Google Ireland Limited). No IP addresses are stored; an address serves only to determine the country you are in and is discarded afterwards. The script is only loaded after you have consented to the “Analytics” category in the consent banner; without that consent no measurement takes place and no connection to Google is made. The legal basis is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with future effect via “Cookie settings” in the footer. A transfer to the USA is possible.

7. Google AdSense

This site embeds Google AdSense (Google Ireland Limited) and is funded by it. Ads are shown either way. Your consent decides only whether they may be personalised. Without consent to the “Personalised ads” category you will see non-personalised ads only, based on the content of the page. The legal basis for personalisation is your consent (Art. 6(1)(a) GDPR); for serving non-personalised ads it is our legitimate interest in funding the site (Art. 6(1)(f) GDPR).

8. Wowhead tooltips

To display item icons and tooltips we embed a script from Wowhead (Zam Network LLC) from the domain wow.zamimg.com. When this script loads and tooltips are shown, your IP address is transmitted to the provider. The legal basis is our legitimate interest in an informative presentation of item data (Art. 6(1)(f) GDPR). A transfer to the USA is possible.

9. Fonts

The fonts used are served locally from our own server (self-hosted). No connection to Google servers is established when the page loads.

10. Your rights

You have the right at any time to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may revoke consent given at any time with future effect. To do so, please use the contact details above.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence or of the alleged infringement.