Privacy Policy
1. Overview
This privacy policy explains how Krafteq GmbH (“we”, “us”, “our”) processes personal data when you visit our blog. We take the protection of your personal data seriously and treat it confidentially in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.
Controller:
Krafteq GmbH
Marie-Curie-Str 8
51377 Leverkusen, Germany
Email: info@krafteq.de
Phone: +49 217 14014311
2. Data We Collect
2.1 Server Log Files
When you access our blog, our hosting server automatically collects and stores information in server log files, which your browser transmits to us. This includes:
- IP address of the requesting device
- Date and time of access
- URL of the requested page
- HTTP status code
- Amount of data transferred
- Referrer URL (previously visited page)
- Browser type and version
- Operating system
This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the stable and secure operation of our website. Log data is automatically deleted after 14 days unless retention is required for security investigations.
2.2 Cookies
Our blog does not set any cookies. Theme preferences are stored exclusively in your browser's local storage, which is not transmitted to our servers. We do not use any analytics, advertising, or tracking technologies.
3. Third-Party Services
3.1 Comments (Giscus / GitHub)
Our blog uses Giscus for the comment section. Giscus is a free, open-source commenting system that stores comments as GitHub Discussions in a public GitHub repository.
To post a comment, you must authenticate with your GitHub account. When you use the comment feature:
- You interact directly with GitHub's services
- GitHub processes your data according to their own privacy policy
- Your comment, GitHub username, and avatar are publicly visible
- We have no control over the data GitHub collects during authentication
Krafteq GmbH is not the data controller or processor for any personal data handled through the Giscus comment system. GitHub, Inc. (or GitHub B.V. for EU users) is the independent data controller for that data.
Using the comment feature is entirely voluntary. You can read all blog content without authenticating or providing any personal data.
3.2 Content Delivery
We may serve static assets (fonts, icons) from third-party CDNs. When your browser requests these resources, the CDN provider may receive your IP address. This is necessary for content delivery and processed on the basis of Art. 6(1)(f) GDPR.
4. Data Transfers Outside the EU
GitHub, Inc. is based in the United States. Data transfers to GitHub (when using the comment feature) are covered by GitHub's compliance with applicable data transfer mechanisms, including the EU-U.S. Data Privacy Framework. For details, see GitHub's privacy documentation.
5. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR) — request information about your stored data
- Right to rectification (Art. 16 GDPR) — correct inaccurate data
- Right to erasure (Art. 17 GDPR) — request deletion of your data
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR) — object to data processing based on legitimate interest
To exercise these rights regarding server log data, contact us at info@krafteq.de.
For data related to comments, please contact GitHub directly, as they are the data controller for that information.
You also have the right to lodge a complaint with a supervisory authority. The responsible authority for Krafteq GmbH is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf, Germany
https://www.ldi.nrw.de
6. Changes to This Policy
We may update this privacy policy from time to time. The current version is always available on this page.
Last updated: February 2026