Privacy policy

Controller

The controller responsible for data processing on this website is Phillip Wagner, Friedensstraße 116, 63165 Mühlheim am Main, Germany, email: info@akitoitashi.de.

No data protection officer has been appointed, as there is no legal obligation to do so.

Overview

The departure monitor can be used without registration. There are no user accounts and no advertising. Data are only disclosed to the hosting provider named below, acting as processor. The website sets no cookies for analytics or advertising. Fonts and icons are delivered from our own server.

Visiting the website and hosting

The website’s address points to a server that the controller rents from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. This server accepts your connection and forwards it unchanged to a server owned by the controller in Germany, on which the website runs. The content of the connection is neither decrypted nor analysed on the Hetzner server; no connection data are stored there.

In doing so, Hetzner necessarily processes your IP address in order to deliver the connection. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner.

The forwarding runs through an encrypted tunnel of the Tailscale software (end-to-end WireGuard encryption). The provider Tailscale cannot decrypt the transmitted data, even if data packets pass through its relay servers. Tailscale therefore receives no data about you and is not a recipient.

During forwarding the sender address is replaced: your IP address never reaches our own server. The website and the visitor statistics only see the internal address of the forwarding server.

The web server does not log requests. It only writes operational and error messages to a log file. If an error occurs during your request, the message may contain details of the request: date and time, requested address and the information sent by your browser such as browser and operating system (user agent), previously visited page (referrer) and language. Your IP address is not included. The log is used for troubleshooting and is deleted automatically after 14 days.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure and functional operation of the website on our own hardware.

Timetable data

When you search for a stop or open a monitor, the website’s server queries the timetable service (TRIAS interface) of the Verkehrsverbund Oberelbe (VVO). Only the search term or stop ID and the requested language are transmitted. Your IP address and other data about you are not passed on to the VVO; the VVO only sees the address of this website’s server.

Cookie and local storage

The website only stores data in your browser that is strictly necessary for a function you have chosen:

The legal basis is Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) in conjunction with Art. 6(1)(f) GDPR. The entries are not used to recognise you. You can delete them at any time in your browser settings.

• Cookie “NEXT_LOCALE”: chosen language (en or de). Only set when you switch the language. Storage period: 1 year.
• Local storage “settings”: chosen appearance (light or dark). Only set when you switch the appearance. Storage period: until you delete it.
• Local storage “tianji.disabled”: your objection to visitor statistics (see below). Only set when you object. Storage period: until you delete it.

Visitor statistics with Tianji

To analyse which pages are used and how often, the website uses the open-source software Tianji. Tianji is self-operated (insights.akitoitashi.de) and runs on our own hardware in Germany; requests reach Tianji the same way as the website (see “Visiting the website and hosting”). No cookies are set and no user profiles are created.

For each page view the following data are processed: browser, operating system and device type (from the user agent), screen size, browser language, requested address and page title, previously visited page (referrer) and date and time. Tianji does not receive your IP address, only the internal address of the forwarding server. No location is therefore determined.

Storage period: 180 days; older data are deleted automatically every day.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is to understand how the website is used and to improve it.

You can object to the statistics at any time: if “Do Not Track” is enabled in your browser, nothing is recorded. In addition, you can switch off statistics for this browser with the following switch.

Visitor statistics are active in this browser.

Contact by email

If you send an email, your email address and the information in your message are processed to answer your request. The legal basis is Art. 6(1)(f) GDPR. The data are deleted once your request has been dealt with, unless statutory retention obligations apply.

Recipients and third countries

The only recipient of personal data is Hetzner Online GmbH as processor (see “Visiting the website and hosting”). Beyond that, no data are disclosed to third parties. No data are transferred to countries outside the European Union. There is no automated decision-making or profiling.

Your rights

You have the following rights towards the controller. An informal message to info@akitoitashi.de is sufficient.

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR). The competent authority is: The Hessian Commissioner for Data Protection and Freedom of Information, Wilhelmstraße 7, 65185 Wiesbaden, Germany, poststelle@datenschutz.hessen.de, https://datenschutz.hessen.de

Encryption

The website is delivered exclusively via encrypted HTTPS (TLS).