Privacy policy

This translation is provided for convenience. The German version is legally binding.

In short: this site only sets a cookie if you change the language yourself (apart from Cloudflare’s security cookies, see below). It uses no tracking and no analytics tools, has no user accounts and loads no content from third-party servers. Fonts and scripts are hosted on our own server. Personal data is only processed where it is technically unavoidable; we describe that here.

Controller

Nikolaos Kourgiantakis
Postfach 37 01 64
52035 Aachen
Germany
Email: [email protected]

We do not have a data protection officer; one is not required for this private project.

Visiting the site

When you open a page, your browser transmits technically necessary data: your IP address, the date and time, the address requested, the amount of data transferred, your browser identifier and operating system, and the previously visited page (referrer). Without this data, the site cannot be delivered.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is providing the site securely and reliably.

Hosting

The site is hosted on a server of RelAix Networks GmbH, Auf der Hüls 172, 52068 Aachen, in a data center in Germany. We have a data processing agreement with the provider under Art. 28 GDPR.

No access logs containing IP addresses are stored on the server. The IP address is only processed for the duration of the connection.

Download counter

So that we can show how often a template has been downloaded, our web server logs only requests for download files. Only technical details of the request are stored: time, file path, method, status code, file size and duration. The IP address, browser identifier and all other details of the request are removed before storage. From these entries we count the downloads per template. They cannot be linked to you personally.

Cloudflare

The network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, sits between your browser and our server. Cloudflare forwards requests, protects the site against attacks and overload, and establishes the encrypted connection. In doing so, Cloudflare processes the connection data listed above, including your IP address.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure, fast site that is protected against attacks. We have a data processing agreement with Cloudflare (Data Processing Addendum). Cloudflare is certified under the EU-US Data Privacy Framework; transfers to the USA are based on the European Commission’s adequacy decision (Art. 45 GDPR). In addition, the agreement includes the European Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Through the “Network Error Logging” feature, Cloudflare asks your browser to report connection errors to Cloudflare. Such reports contain technical details about the error and are sent directly from your browser to Cloudflare.

If Cloudflare detects suspicious traffic, it may display a security check and set a cookie for it (__cf_bm or cf_clearance). These cookies serve only to fend off automated attacks, are short-lived and are strictly necessary to protect the site (§ 25(2) no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act).

More information: Cloudflare’s privacy policy.

Language selection

The start page reads your browser’s language setting (the “Accept-Language” header) and sends browsers that are not set to German to the English version. This information is not stored.

If you change the language using the language switch, our server sets one cookie named sprache with the value de or en, so the start page remembers your choice. The cookie is our own (not a third party’s), lasts one year, is only sent over encrypted connections (Secure, SameSite=Lax) and contains nothing but the language you chose. No cookie is set unless you click the switch. You can delete it in your browser at any time.

The legal basis for the cookie is § 25(2) no. 2 TDDDG, because it is strictly necessary for a function you have explicitly requested; for the processing, it is Art. 6(1)(f) GDPR. Our legitimate interest is showing you the site in the language you want.

Contacting us by email

If you write to us, we process your email address, your name if you provide it, and the content of your message in order to reply to you. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering your inquiry. We delete the message once it has been dealt with and no further retention is required.

Submitting your own templates

If you send us a template for publication, we publish it with the name you give us for that purpose. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by email; we will then remove your name or the template from the site. The withdrawal applies to the future.

Support (tips) via Stripe

The “Say thanks” link leads to a payment page by Stripe. The provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Data is only transmitted to Stripe once you click the link.

For the payment, Stripe processes your email address, payment details (for example card details), depending on the payment method your name and billing address, the amount, and technical data such as your IP address and device data, among other things for fraud prevention. From Stripe we receive the amount, time, email address and, where applicable, name and country. We do not see full card details. We use this information only to match and document the payment.

The legal basis is Art. 6(1)(b) GDPR, and for fraud prevention Art. 6(1)(f) GDPR. Stripe is in part independently responsible for payment processing, for example for statutory verification obligations and fraud prevention. Data may also be transferred to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework and has additionally agreed to the European Commission’s Standard Contractual Clauses. We keep payment information only as long as necessary for documentation purposes.

More information: Stripe’s privacy policy.

Encryption

The connection to this site is encrypted with TLS. You can tell by the “https://” in the address bar.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw any consent you have given at any time (Art. 7(3)). Just send us an email.

Right to object (Art. 21 GDPR): Where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf.

Other information

You are not obliged to provide us with personal data. Without the connection data, however, the site cannot technically be delivered. No automated decision-making or profiling takes place.

Last updated: October 2026