Privacy policy (Datenschutzerklärung)

Who is responsible

Tobias Florek
Liningtr. 65, 12359 Berlin, Germany
Email: diyster+spam@ibotty.nt

In short

DIYster has no accounts, no analytics and no advertising. The camera picture never leaves your device. Music players from YouTube, Bandcamp or Apple are loaded only after you allow it.

Hosting

This site is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. To deliver the site, the server necessarily processes your IP address while handling your request, but it keeps no logs: neither your IP address nor any other request data is stored. Legal basis: legitimate interest, Art. 6 (1) (f) GDPR. Hetzner processes the data on our behalf, under a data processing agreement (Art. 28 GDPR).

Camera

To scan the QR codes on the cards, the site asks your browser for camera access. The picture is decoded on your device only; it is neither stored nor sent anywhere. You can revoke the permission in your browser's settings at any time.

Storage on your device

The site stores one entry in your browser's local storage: whether you allowed the music players (see below), so you're not asked again. It's needed to remember your choice (§ 25 (2) TDDDG) and is never sent to anyone.

The songs play in their providers' players. Loading a player connects your browser to the provider, which receives your IP address and technical data about your browser and may set cookies or similar storage. We load them only after you allow it (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can withdraw your consent here at any time; withdrawal doesn't affect anything done before it.

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loaded in YouTube's privacy-enhanced mode (youtube-nocookie.com), which still receives your IP address and may store data in your browser once a video plays. Data may be transferred to Google LLC in the USA. Privacy policy
Bandcamp: Bandcamp, Inc., USA. Privacy policy
Apple (song previews, looked up via the iTunes API): Apple Distribution International Ltd., Hollyhill Industrial Estate, Cork, Ireland; data may be transferred to Apple Inc. in the USA. Privacy policy

Transfers to the USA are based on the EU-US Data Privacy Framework, where the recipient is certified under it, and otherwise on the EU standard contractual clauses.

Your current choice: …

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interest (Art. 15–21 GDPR). Just write to the email address above. You can also complain to a data protection supervisory authority, e.g. the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.