What doesn’t happen here.
This site was built by someone who audits data protection for a living. The list is correspondingly short. First things first:
This is a translation. The binding version is the German original at vatersorgen.de/chronik/datenschutz.html.
1 · Controller
Article 4(7) GDPR.
Dirk Peter
dirk@vatersorgen.de
No home address is published, for reasons of the controller’s own personality rights; it is supplied on request and to supervisory authorities and courts. No data protection officer has to be appointed (Article 37 GDPR, § 38 of the German Federal Data Protection Act).
2 · Visiting the site
Server log.
When a page is requested, the web server processes technically necessary information: IP address, date and time, the file requested, the volume of data transferred, the status code, the referrer and the browser identification.
- Purpose delivering the page, stability, defense against attacks
- Legal basis Article 6(1)(f) GDPR — legitimate interest in secure operation
- Retention 7 days, then deleted automatically
- Recipients none; the logs never leave the server
2a · Audience measurement
Without cookies, without recognition, without third-party services.
This site measures which sections are read, for how long, and what is clicked. The reason is not advertising but a simple question: which part of this chronicle is actually of interest to the press, to professionals and to politics. The answer is used, with evidence, in talks and panel discussions.
Nothing is stored on your device and nothing is read from it — no cookies, no local storage. That is why no consent is required (§ 25(1) of the German TDDDG does not apply) and there is no consent banner.
Your IP address is not stored. It is used once, in memory, to determine country, region, city and network operator, and to form a non-reversible checksum using a secret key that changes daily. Only that checksum is kept; it groups the requests of a single day. The daily key is deleted after two days — after that, even we cannot technically make the connection.
- Processed time spent per section, scroll depth, documents and proceedings opened, country, region, city, network operator, device type, browser, browser language, language of the version opened (German or English), referring website (its domain only)
- Not processed IP address, search terms, form input, cross-device recognition
- Legal basis Article 6(1)(f) GDPR — legitimate interest in designing this service to meet demand and in reliable figures on its reception
- Retention individual sessions 90 days. After that only daily totals remain (date, section, country, source), with no personal reference whatsoever
- Recipients none. The measurement runs on the same server; no data is transmitted to third parties and no third-party services are loaded
- Objection a “Do Not Track” signal set in your browser is respected — no measurement then takes place. You can also object informally at any time: dirk@vatersorgen.de
A locally stored database is used to determine location (DB-IP Lite, CC-BY 4.0). No query is made to any third party.
3 · Hosting
Processing on behalf of the controller.
The site runs on a rented server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data center in Germany. A data processing agreement under Article 28 GDPR is in place. Hetzner has no access to content for its own purposes.
The original documents are stored outside the web directory and cannot be retrieved through a URL.
4 · Access to the file
The form in front of the document.
The original documents are not served anonymously. Anyone opening them first gives their name, their newsroom or organization, an email address and, optionally, the purpose. In addition, the time, IP address, browser identification and the identifier of the document retrieved are logged.
- Purpose a record of who inspected the file — it contains information about a child and about third parties
- Legal basis Article 6(1)(f) GDPR — legitimate interest in controlled, non-anonymous inspection
- Retention 12 months from retrieval
- Voluntary? The information is required for access. Without it the chronicle itself remains fully readable.
A session cookie (PHPSESSID) remembers the access
granted for the duration of the visit. It is technically necessary
(§ 25(2) no. 2 TDDDG) and is deleted when the browser is closed.
5 · What stays in the browser
Local storage instead of a cookie.
The appearance you choose — light or dark — is stored in the
browser’s localStorage under the key
chronik-theme. This value is never transmitted and can be
deleted at any time through your browser settings. No further entry is
created.
6 · Contact by email
If you write.
If you send a message to dirk@vatersorgen.de, the sender details and the content are processed in order to reply. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR where a contract is being initiated. The message is deleted once the matter is settled and no retention obligation stands in the way.
7 · Content of the chronicle
Personal data in the presentation itself.
The chronicle contains personal data from family court proceedings. It is processed for journalistic and documentary purposes; to that extent the media privilege under § 23 of the German Interstate Media Treaty in conjunction with Article 85 GDPR applies. Otherwise the processing is based on Article 6(1)(f) GDPR.
- Removed the mother’s name and address — in titles, full text and in the PDF files
- Shortened the parents’ dates of birth; day and month are redacted, the year remains legible
- Named places, courts, case numbers, and public officials and appointed experts in their professional capacity — that is, in the social sphere
- The child appears by first name only; information about his health is limited to what is necessary to understand the proceedings
Anyone named here who considers a statement to be incorrect will get an answer — see the legal notice.
8 · Your rights
Chapter III GDPR.
- Access Article 15 — what data is held about you
- Rectification Article 16 — correcting inaccurate information
- Erasure Article 17 — unless an obligation stands in the way
- Restriction Article 18 — pausing processing for the time being
- Portability Article 20 — release in a common format
- Objection Article 21 — against processing under (f), at any time and on grounds relating to your particular situation
An informal email is enough. You will receive a reply within one month (Article 12(3) GDPR).
9 · Complaints
Article 77 GDPR.
You have the right to lodge a complaint with a supervisory authority. The competent authority is
Der Landesbeauftragte für den Datenschutz und die
Informationsfreiheit Baden-Württemberg
(State Commissioner for Data Protection and Freedom of Information,
Baden-Württemberg)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
baden-wuerttemberg.datenschutz.de
For journalistic and editorial processing, supervision is limited under § 23 of the Interstate Media Treaty.
10 · Changes
Version of this notice.
This notice applies from 6 August 2026. If anything changes in the processing, the notice will be adapted — the version in force at any given time appears here.