Privacy

1. Overview

This privacy policy explains how FrontWatch (operated by Tim Geithner, sole proprietorship, Scheuerfelder Straße 33, 96450 Coburg, Germany) collects, uses, and protects your personal data when you use our website at front-watch.net.

We take data protection seriously and comply with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG).

Data controller:
Tim Geithner
Scheuerfelder Straße 33
96450 Coburg, Germany
Email: info@konfliktradar.de

2. Data We Collect

2.1 Server Log Files

When you visit our website, our hosting provider automatically collects:

IP address (anonymized)
Date and time of access
Pages visited and referrer URL
Browser type and operating system

This data is processed based on Art. 6(1)(f) GDPR (legitimate interest in ensuring website security and stability). Log files are deleted after 30 days.

2.2 User Accounts

When you create an account, we collect:

Email address
Display name
Optional profile information (bio, location, organization)

This data is processed based on Art. 6(1)(b) GDPR (contract performance). Your account data is stored until you request deletion.

2.3 Comments and Forum Posts

When you post comments or forum content, we store:

Your user ID and display name
The content of your post
Timestamp of submission

This data is processed based on Art. 6(1)(b) GDPR. You can request deletion of your posts at any time.

2.4 Contact Forms

When you contact us, we collect your name, email address, and message content. This data is processed based on Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries) and stored until the inquiry is resolved.

2.5 Newsletter

If you subscribe to our newsletter, we store your email address based on Art. 6(1)(a) GDPR (consent). You can unsubscribe at any time using the link in each email.

3. Cookies and Consent

We use a cookie consent system that lets you choose which cookies to accept:

Necessary cookies: Required for the website to function (session management, security). Legal basis: Art. 6(1)(f) GDPR.
Functional cookies: Enable enhanced features such as saved preferences. Legal basis: Art. 6(1)(a) GDPR (consent).
Analytics cookies: Help us understand how visitors use our site. Legal basis: Art. 6(1)(a) GDPR (consent).
Marketing cookies: Used for advertising purposes. Legal basis: Art. 6(1)(a) GDPR (consent).

You can change your cookie preferences at any time through the cookie settings accessible from the footer of every page. Your consent choices are stored in our database and in your browser's local storage.

4. Analytics

4.1 Google Analytics 4

With your consent, we use Google Analytics 4 (provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to analyze website usage.

Google Analytics uses cookies and collects:

Pages visited and time spent
Device and browser information
Approximate geographic location (country/city level)
Referral sources

We have enabled IP anonymization. Data is processed based on Art. 6(1)(a) GDPR (your consent). Google Analytics data is automatically deleted after 14 months.

Google may transfer data to servers in the United States. Google is certified under the EU-US Data Privacy Framework.

You can opt out at any time by adjusting your cookie settings or by installing the Google Analytics Opt-out Browser Add-on.

Google's privacy policy: https://policies.google.com/privacy

4.2 Internal Analytics

We collect anonymized usage statistics (page views, content engagement) for editorial purposes. This data cannot be linked to individual users and is processed based on Art. 6(1)(f) GDPR.

5. Advertising

5.1 Google AdSense

With your consent, we display advertisements through Google AdSense (provided by Google Ireland Limited). Google AdSense may use cookies and similar technologies to serve personalized ads based on your browsing behavior.

Data collected by Google AdSense may include:

Pages visited on our site
Interaction with ads
Device and browser information

This data is processed based on Art. 6(1)(a) GDPR (your consent). You can withdraw consent at any time through your cookie settings.

Premium subscribers do not see advertisements.

6. Third-Party Services

6.1 Supabase (Hosting and Authentication)

We use Supabase for database hosting, user authentication, and file storage. Supabase processes data in accordance with GDPR. Their privacy policy is available at https://supabase.com/privacy.

6.2 Stripe (Payments)

If you purchase a premium subscription, payment processing is handled by Stripe, Inc. We do not store your payment card details. Stripe's privacy policy: https://stripe.com/privacy.

6.3 Resend (Transactional Emails)

We use Resend to deliver account-related emails (verification, password reset, notifications). Resend processes your email address on our behalf. Their privacy policy: https://resend.com/legal/privacy-policy.

6.4 Hado SEO (Prerendering)

We use Hado SEO to serve prerendered pages to search engine crawlers. This service does not process personal user data.

6.5 Leaflet / OpenStreetMap

Our interactive maps use Leaflet with OpenStreetMap tile servers. Map tile requests transmit your IP address to OpenStreetMap servers. OpenStreetMap's privacy policy: https://wiki.osmfoundation.org/wiki/PrivacyPolicy.

7. Data Retention

Server logs: 30 days
User accounts: Until deletion is requested
Comments and forum posts: Until deletion is requested
Cookie consent records: 12 months
Analytics data: 14 months (Google Analytics), 90 days (internal)
Newsletter subscriptions: Until unsubscription
Contact messages: Until inquiry is resolved, maximum 12 months

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15 GDPR): Request information about your stored data.
Right to rectification (Art. 16 GDPR): Request correction of inaccurate data.
Right to erasure (Art. 17 GDPR): Request deletion of your data.
Right to restriction (Art. 18 GDPR): Request restricted processing of your data.
Right to data portability (Art. 20 GDPR): Receive your data in a machine-readable format.
Right to object (Art. 21 GDPR): Object to processing based on legitimate interest.
Right to withdraw consent (Art. 7(3) GDPR): Withdraw previously given consent at any time.

To exercise these rights, contact us at info@konfliktradar.de or use the data request form on our website.

You also have the right to lodge a complaint with a supervisory authority. The responsible authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

TLS/SSL encryption for all data in transit
Row-level security policies in our database
Role-based access controls for administrative functions
Regular security audits

10. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact

For privacy-related inquiries:

Tim Geithner
Scheuerfelder Straße 33
96450 Coburg, Germany
Email: info@konfliktradar.de