Animated Political Rhythm Logo

Privacy Policy

As of September 5, 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Dr. Alfred Huber
Bichelackerstr. 9
87480 Wengen
Germany

Phone: +49 176 63343593
Email: info@alfredhuber.eu

2. General Information on Data Processing

We only process personal data to the extent necessary to provide this website, process inquiries, send the newsletter, or for the purposes described below. The respective affected types of data, purposes, legal bases, recipients, and storage criteria are explained in the following sections.

In particular, the legal bases that may be considered are your consent (Art. 6 (1) (a) GDPR), the performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), legal obligations (Art. 6 (1) (c) GDPR), and our legitimate interests (Art. 6 (1) (f) GDPR).

We only store personal data for as long as is necessary for the respective purpose. They will then be deleted or anonymized, unless statutory retention obligations, the documentation of given consents, or the establishment, exercise, or defense of legal claims require further, possibly restricted storage. To the extent that no fixed period can be specified, the duration of storage is determined in particular by the continued existence of the purpose, legal obligations, and limitation periods.

3. Hosting and Server Log Data

This website is hosted by helloly GmbH, Rainerstraße 25, 4020 Linz, Austria. When visiting the website, the hosting provider processes technically required connection and log data. This may include, in particular, the IP address, date and time of access, accessed address, amount of data transferred, HTTP status, referrer address, browser type, and operating system.

Processing is necessary to deliver the website, ensure its stability and security, and investigate misuse or technical malfunctions. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable, and abuse-protected operation of our online service. helloly receives the data as the hosting service provider we use.

Log data is deleted or anonymized as soon as it is no longer required for operations and security. In the event of specific security incidents, affected data may be retained until final clarification and within the scope of applicable retention and statute of limitations periods.

For more information on data processing by helloly, please refer to the helloly Privacy Policy.

4. Encrypted transmission

This website uses TLS encryption. This protects data that you transmit to us from being read or modified by unauthorized parties during transport. You can generally recognize an encrypted connection by the address in your browser starting with „https://“.

5. Cookies, Similar Technologies, and Consent Management

When visiting this website, information may be stored in or retrieved from your terminal equipment, such as in cookies or local browser storage.

We base technically strictly necessary processes on Section 25 (2) No. 2 of the German Digital Products and Data Protection Act (TDDDG). The associated processing of personal data is carried out—depending on the purpose—pursuant to Article 6 (1) (b), (c), or (f) of the GDPR. Our legitimate interest lies in particular in the secure provision of the website and the reliable storage of your privacy preferences.

All non-essential access to your terminal equipment occurs only with your prior consent pursuant to Section 25 (1) TDDDG. To the extent that personal data is processed in the process, Article 6 (1) (a) GDPR is the legal basis. Consent is voluntary and can be revoked or changed at any time with effect for the future via the privacy settings accessible on the website. The lawfulness of the processing carried out until the revocation remains unaffected.

Consent management with Complianz

We use the WordPress plugin Complianz to obtain required consents, store your choices in technically necessary cookies, and implement them across the services used. Storage on your end device is required pursuant to Section 25(2)(2) TDDDG. Insofar as the selection can be attributed to an individual, processing is carried out to fulfill data protection accountability and organizational obligations pursuant to Article 6(1)(c) GDPR; in addition, there is a legitimate interest in reliable consent management pursuant to Article 6(1)(f) GDPR.

The saved selection is retained until the validity period provided for this purpose ends, you delete the browser data in question, or you make a new selection. Insofar as data is required as proof of consent, it will furthermore only be stored until the relevant reasons for proof and statute of limitations cease to apply. The specific validity period of the cookies and storage objects used is specified in the privacy settings, which can be accessed at any time.

6. Contact

If you contact us by email, telephone, or via a contact form, we process the data you provide and the metadata associated with the request in order to process your inquiry and answer any follow-up questions if necessary.

If the request is aimed at a contract or pre-contractual measures, the legal basis is Art. 6 para. 1 lit. b GDPR. In other cases, the processing is based on our legitimate interest in proper communication and processing of the request pursuant to Art. 6 para. 1 lit. f GDPR or – if requested – on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

The data will be deleted once the request has been fully processed and no statutory retention obligations or legal claims require further storage. Recipients may include technical service providers used for email, website, and hosting, insofar as this is necessary for processing.

7. Newsletter with MailerLite

Registration and double opt-in

You can voluntarily subscribe to our newsletter. We need your email address to send it; additional information is voluntary unless marked as required in the form. To confirm your registration, we use the double opt-in procedure: after submitting the form, you will receive an email with a confirmation link. The registration only becomes effective after you click on it.

To document consent, we process in particular your email address as well as the time, IP address, and technical information regarding the registration and confirmation. Before submitting, you must explicitly consent to the sending of the political-content newsletter, the performance measurement described below, and the associated processing. Since the registration and usage may allow conclusions to be drawn about political interests, we additionally base any processing of special categories of personal data on your explicit consent pursuant to Art. 9(2)(a) GDPR. The legal basis for sending and registration is otherwise Art. 6(1)(a) GDPR in conjunction with Section 7(2)(2) of the German Fair Trading Act (UWG). The logging of the double opt-in and the retention of the proof are carried out to fulfill our accountability and proof obligations on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 5(2) and Art. 7(1) GDPR.

Shipping service provider

For registration, delivery, and analysis, we use MailerLite, a service provided by MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland. MailerLite processes the data required for this purpose in order to provide the newsletter service commissioned by us. The data processed includes, in particular, your email address, any profile data provided voluntarily, as well as registration, confirmation, delivery, and analysis data.

MailerLite may use sub-processors. To the extent that personal data is processed in a country outside the European Union or the European Economic Area, the transfer will only take place if the requirements of Art. 44 et seq. GDPR are met, in particular on the basis of an adequacy decision pursuant to Art. 45 GDPR or appropriate safeguards such as the standard contractual clauses pursuant to Art. 46 GDPR. Further information can be found in the MailerLite Privacy Policy.

Open and click tracking

The newsletters contain functions for measuring openings and link clicks. For this purpose, MailerLite uses tracking pixels and individualized or redirected links in particular. In the process, the time of access, IP address, browser and device data, as well as delivery, opening, and click events, can be processed and assigned to the respective recipient profile. The purpose is the statistical evaluation and improvement of the newsletter's content and delivery times.

The measurement of success is part of the newsletter consent explained during registration. The legal basis is Art. 6 para. 1 lit. a GDPR. Insofar as information is stored in your terminal equipment or read from it during the measurement, this is additionally based on your consent pursuant to Section 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future.

Cancellation and retention period

You can revoke your newsletter consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter email or by sending a message to us. After unsubscribing, delivery and personal performance measurement will end. The delivery and evaluation data will then be deleted or anonymized, unless statutory or legal reasons prevent this. Information required to prove consent given previously may be stored in a restricted manner until the relevant proof and limitation periods expire. Where necessary, the email address can also be stored on a blocklist to ensure that the revocation is permanently observed; the legal basis for this is Art. 6 para. 1 lit. c GDPR, insofar as this serves the fulfillment of legal obligations, otherwise Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the reliable observance of the revocation.

8. Audience measurement with Google Analytics

Following your consent to the „Statistics“ category, we use Google Analytics 4, an analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The technical integration is carried out via the WordPress plugin MonsterInsights.

Google Analytics processes usage and event data, technical information about the browser and device, approximate location, referrer, accessed content, and pseudonymous identifiers. The IP address is also processed when establishing the connection. The purpose is to evaluate the reach and usage of our service and to improve the website.

The legal basis is your consent in accordance with Art. 6 (1) (a) GDPR. Insofar as cookies or similar technologies store information on your terminal equipment or retrieve information from it, this is additionally based on § 25 (1) TDDDG. Google Analytics will only be activated after the corresponding consent has been given. You can revoke your consent at any time with effect for the future in the privacy settings.

The recipients of the data are Google Ireland Limited and, where applicable, affiliated companies and processors. Processing by Google LLC or other recipients in the USA and other third countries cannot be ruled out. To the extent that a third-country transfer takes place, it is governed by Art. 44 et seq. GDPR, in particular by an applicable adequacy decision pursuant to Art. 45 GDPR or appropriate safeguards pursuant to Art. 46 GDPR. We delete or anonymize the analytical data within our control if you withdraw your consent or if the data is no longer required for the purpose of the analysis. For data within Google's control, the retention and deletion rules depend on the configuration you have chosen.

For further information, please refer to the Google's Privacy Policy.

9. Usage analysis with Microsoft Clarity

Following your consent to the „Marketing“ category, we use Microsoft Clarity. The providers are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, and for individuals in the European Economic Area, Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Clarity helps us understand how visitors use our website. For this purpose, pseudonymous session recordings, heatmaps, and statistics on page views, clicks, scrolling and mouse movements, as well as navigation can be created. In the process, pseudonymous identifiers, IP address, approximate location, date and time, accessed content, as well as browser, device, and operating system data are processed in particular.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR. Insofar as cookies or similar technologies store information on your terminal equipment or retrieve information from it, this is additionally based on Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Insofar as usage data allow conclusions to be drawn about political opinions and thus special categories of personal data are processed, your explicit consent pursuant to Art. 9(2)(a) GDPR is also required. The Clarity loading code is only activated after marketing consent has been given. You can revoke your consent at any time with effect for the future in the privacy settings.

Microsoft processes the data obtained via Clarity under its own responsibility in accordance with Microsoft's privacy policy; Microsoft is not merely our data processor in this respect. The own purposes mentioned therein may include the provision and improvement of the services, security and performance analyses, as well as profiling and advertising. Recipients are Microsoft Ireland Operations Limited and, where applicable, affiliated companies and service providers, in particular Microsoft Corporation in the USA. Insofar as a transfer to a third country takes place, it is governed by Art. 44 et seq. GDPR, in particular by an applicable adequacy decision or appropriate safeguards.

We delete or anonymize the analytical data within our control if you withdraw your consent or if the data is no longer required for the purpose of the analysis. According to current information from Microsoft, playback data is regularly stored for 30 days, click and heatmap data as well as flagged or favorited sessions are regularly stored for nine months and then deleted, including backup copies.

For further information, please refer to the Microsoft Privacy Statement and the Microsoft Clarity Terms of Use.

10. Google Tag Manager, Google Ads, and Enhanced Conversions

Following your consent to the „Marketing“ category, we load the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the container GTM-K4FDXZS5 exclusively for controlling marketing tags for Google Ads. The Tag Manager is not used for the statistical processing described in Section 8 and is only loaded itself after your marketing consent.

The Google Ads tag with the ID is via the Tag Manager AW-17360848455 triggered. This allows us to track whether a visit after clicking or viewing a Google ad led to a defined action on the website. In the process, Google may process, in particular, IP address, timestamp, pages visited, referrer, browser and device data, cookies or comparable identifiers, as well as information about the executed conversion. The purpose is conversion measurement, attribution of advertising success, and optimization of our ads.

Enhanced conversions with hashed email address

In the current configuration, conversions can be triggered after a dwell time of 45 seconds and upon a form submission. If you perform an action defined as a conversion after granting marketing consent and provide your email address in the process, it can be automatically detected for „enhanced conversions.“ Phone numbers as well as name and address are currently not activated for this. The email address is normalized before transmission and hashed using SHA-256. The hash value remains personal or pseudonymous data and can be matched by Google with account data available there.

The legal basis for Google Tag Manager, Google Ads, and enhanced conversions is your consent pursuant to Art. 6(1)(a) GDPR. Insofar as information is stored in or accessed from your terminal equipment in the process, this is additionally based on Section 25(1) TDDDG. Insofar as a conversion allows conclusions to be drawn about political opinions and thus special categories of personal data are processed, your explicit consent pursuant to Art. 9(2)(a) GDPR is additionally required. You can revoke your consent at any time with effect for the future in the privacy settings.

Recipients of the data are Google Ireland Limited as well as affiliated companies and processors, in particular Google LLC in the USA. To the extent that a transfer to a third country takes place, it is governed by Art. 44 et seq. GDPR, in particular by an applicable adequacy decision or appropriate safeguards. We delete or anonymize the conversion data within our control if you withdraw your consent or if they are no longer required for measurement and verification. For data within Google's control, the product- and configuration-dependent retention and deletion rules apply.

For further information, please refer to the Google's Privacy Policy.

11. Embedded YouTube videos

Videos from YouTube may be embedded on individual pages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Before you consent to the „Marketing“ category, we only show a placeholder; a connection to YouTube is only established once you enable the marketing category.

After approval, in particular your IP address, date and time, page visited, browser and device data, as well as information about your interaction with the video, may be transmitted to Google. If you are signed in to Google, Google may associate this usage with your account.

The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR. Insofar as Google stores information on your terminal device or reads information from it, § 25 (1) TDDDG also applies. You can revoke your consent at any time with effect for the future via the privacy settings.

Recipients are Google Ireland Limited as well as affiliated companies and processors, if applicable. Processing in the USA or other third countries cannot be ruled out. The requirements of Art. 44 et seq. GDPR apply to this, in particular an applicable adequacy decision or appropriate safeguards. We have only limited influence on further processing and the storage period at Google. Further information can be found in the Google's Privacy Policy.

12. Links to Facebook and Instagram

Our website contains simple links to our presences on Facebook or Instagram. As long as you do not click on such a link, no connection to Meta is established by the link alone. Only when you access the linked platform do you leave our area of responsibility; the data protection regulations of the respective provider apply there. The provider of Facebook and Instagram in the European Economic Area is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Further information can be found in the Meta Privacy Policy.

13. Locally hosted fonts

The website fonts embedded by the theme and by Elementor are provided by our own web server. When loading these fonts, no connection to Google Fonts is established in the tested configuration.

14. Recipients and third-country transfers

Within our area of responsibility, only those persons and entities receive access to personal data who require it for the stated purposes. In addition, we may transfer data to technical service providers, hosting, email, newsletter, analysis, and marketing providers, as well as to authorities, courts, or other entities, if this is necessary for the performance of a contract, based on consent, to protect legitimate interests, or to fulfill a legal obligation.

A transfer to countries outside the European Union and the European Economic Area only takes place if this is described in the respective section and the requirements of Art. 44 et seq. GDPR are met. Depending on the recipient, the transfer may be based in particular on an adequacy decision by the European Commission or on standard contractual clauses and necessary supplementary protective measures. You can request a copy of the relevant safeguards or information on their availability from us.

15. Your Rights

Subject to statutory requirements, you have in particular the following rights:

  • Information regarding your processed personal data (Art. 15 GDPR),
  • Rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),
  • Deletion of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Objection to processing based on Article 6(1)(e) or (f) GDPR for reasons relating to your particular situation (Article 21 GDPR), and
  • Revocation of a given consent at any time with effect for the future (Art. 7 para. 3 GDPR).

To exercise your rights, a message to the contact details provided in Section 1 is sufficient. In addition, pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. You can contact the supervisory authority responsible for us in particular:

Bavarian Data Protection Authority
Promenade 18
91522 Ansbach
Germany
Website: www.lda.bayern.de

16. Obligation to provide data

The use of our website is generally possible without the active provision of personal data; however, technically necessary connection data is generated when visiting the page. Information provided in contact or newsletter forms is voluntary. Without the information marked as required in each case, we cannot process the request or send the newsletter.

17. Automated Decisions

Solely automated decision-making including profiling pursuant to Article 22 GDPR does not take place.

18. Updates to this privacy policy

We will update this privacy policy if the services used or legal requirements change. The current version is available on this website.