Privacy Policy

I. Controller

The controller within the meaning of the GDPR for this website is:

René Alexander Klein, represented by Jacqueline Isabelle Klein
Hähn 6
51515 Kürten
Germany

Contact

Email:hello@jaklein.de

II. Your rights as a data subject

Using the contact details given above, you may exercise the following rights at any time. With regard to the data processing described below, you have the right

• to confirmation of whether data concerning you is being processed, to information about the processed data, to further information about the processing, and to copies of the data (Art. 15 GDPR);
• to correction or completion of incorrect or incomplete data (Art. 16 GDPR);
• to the prompt deletion of data concerning you (Art. 17 GDPR), or, if further processing is required under Art. 17(3) GDPR, to restriction of processing under Art. 18 GDPR;
• to receive the data concerning you that you have provided, and to have this data transferred to other controllers (Art. 20 GDPR);
• to lodge a complaint with a supervisory authority if you believe that data concerning you is being processed in violation of data protection law (Art. 77 GDPR).

In addition, under Art. 21 GDPR you have the right to object, at any time and with future effect, to processing based on my legitimate interest (Art. 6(1)(f) GDPR), and to withdraw any consent already given (Art. 6(1)(a) GDPR).

III. Hosting and server log files

When you access this website, the hosting provider automatically collects technical connection data transmitted by your browser (so-called server log files), e.g. IP address, date and time of the request, page requested, amount of data transferred, browser type and version, and the operating system used. This data is used exclusively to deliver the website reliably and to detect and defend against attacks, and is not combined with other data sources.

The legal basis is my legitimate interest under Art. 6(1)(f) GDPR in a secure and functional website. Log files are automatically deleted after a short period, unless they are needed to investigate a specific security incident.

IV. Cookies and local storage

This website uses cookies as well as your browser's localStorage to store information on your device. On your first visit, a cookie banner asks for your consent to non-essential storage; you can withdraw or change this consent at any time via the cookie icon at the bottom of the screen. A full overview of all cookies used can be found at the end of this section.

Functional cookies and localStorage (always active)

Technically necessary storage is used to store your cookie choice, basic website settings and (after sign-in) your member session. Cookie choice and website settings do not leave your browser; the sign-in session cookie is sent to our server with requests, exists only after login and is not passed on to third parties. The legal basis is Art. 6(1)(f) GDPR and Section 25(2) TDDDG.

PostHog (statistics, only with your consent)

With your consent, I use PostHog, a web analytics service by PostHog Inc., processed via PostHog's European infrastructure (eu.i.posthog.com), to understand how this website and its tools are used (e.g. sections clicked, how long individual sections were visible on screen and how long pages were actively viewed, usage of the EquinePassion Calculator). Without your consent, PostHog is technically initialized but keeps its state in memory only (no access to localStorage) and sends no data whatsoever — only once you consent does storage switch to your browser's localStorage and events actually get transmitted.

The legal basis for this processing is your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time with future effect via the cookie icon; data transmission is then stopped immediately.

YouTube videos (external media, only with your consent)

Individual blog posts may contain videos from YouTube, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Without your consent, only a static preview thumbnail is shown — no connection to YouTube's or Google's servers is made and neither cookies nor local storage are set. Only once you consent and deliberately click the thumbnail is the actual video embedded via the more privacy-friendly domain youtube-nocookie.com; Google then sets cookies (e.g. "YSC", "VISITOR_INFO1_LIVE") as well as local storage in your browser (localStorage/IndexedDB, e.g. for playback history and player settings) and may process your IP address, device and browser information, and usage behaviour, potentially transferring it to the USA.

The legal basis for this embedding is your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time with future effect via the cookie icon. Further information on Google's data processing can be found in Google's privacy policy at policies.google.com/privacy.

Overview of cookies used

V. Member account and profile

For a member account we process username, email address, display name and a password that is stored only as a cryptographic hash. Invitations are sent by email as a one-time activation link valid for 24 hours; the invited person sets the password themselves. After sign-in we set a technically necessary session cookie (see section IV). The legal basis is Art. 6(1)(b) GDPR (performance of the membership).

Voluntary profile details are profile text, profile picture, cover image, gallery (up to 10 images), platform links (e.g. Discord or Steam names) and date of birth. In addition there are team memberships, roles, awards received and a log of these changes (history). We process these details on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by changing or removing the details in your settings or profile.

Visibility: depending on your setting, your profile is public or visible only to signed-in members. We show your date of birth in the calendar to all signed-in members (as day and month only, without the year). We show it publicly, that is to guests and on your profile, only if you explicitly release it. Only signed-in members can see the history. Publicly visible details can be viewed by anyone and may also be redistributed outside this website.

Storage period and deletion: we store your data for as long as your account exists. In the settings you can change your email address and password and delete your account yourself at any time. This deletes the account, profile, gallery, platform links and assignments; we remove the associated image files from the server unless they are used elsewhere. Gallery images you remove disappear from your profile immediately; the file is permanently deleted on request. For further rights (access, rectification, portability) see section II.

VI. Links to other platforms

In your profile you can add links to other platforms (e.g. Discord, Steam, YouTube, Twitch). They appear on your profile as text or a link. When this website loads, no data is sent to these platforms and no content is embedded from them. Only when you or another person clicks such a link does the external site open, and your browser then transmits data (e.g. the IP address) to that provider. We have no influence on this; the privacy policy of the respective provider applies.

Usernames and links on other platforms can be personal data. Please only enter details you wish to show publicly, and only for your own accounts. The same applies to the Discord invitation link on the homepage: it leads to Discord without any data being sent there when you merely visit this website.