Privacy Policy
1. Controller
The controller for this website is the netcupgutscheine.com project.
Privacy contact: [email protected]
2. Hosting, CDN and server logs
The site runs on a self-operated Dokploy VPS and uses Cloudflare as CDN/security proxy. These providers process technically necessary connection data such as IP address, timestamp, requested URL, user agent and status code.
The legal basis is our legitimate interest in a secure, stable and fast website (Art. 6(1)(f) GDPR). Data processing agreements and third-country transfer safeguards are used where required.
The application does not write its own access logs to a database. Infrastructure logs are processed by the hosting/CDN provider only as long as necessary for operation and security.
3. Voucher API and rate limiting
When a voucher is claimed, the server processes the request and a shortened/derived IP address in memory only, to prevent abuse and bulk extraction of the voucher pool. The IP address is not written to the voucher lock file.
The legal basis is the security of our service and the prevention of abusive requests (Art. 6(1)(f) GDPR). Rate-limit data expires after the configured window.
4. Latency check and language suggestion
The latency check runs automatically when the page loads and then refreshes periodically. Our server in Nuremberg connects via ICMP to fixed Netcup test IPs. Your IP address is not transmitted to Netcup for this check.
The values shown are reference measurements from our test node, not a measurement from your browser. For a measurement from your own connection, we link to the official Netcup Looking Glass; that external link is subject to Netcup’s privacy notice.
For the language suggestion, our server reads the Cloudflare country code (e.g. “DE”) and returns it to the browser. The country code is not stored permanently and no location cookie is set.
To prevent automated abuse, our server processes your IP address briefly in memory (rate limit). It is not passed to Netcup and is not stored permanently.
5. Cookies, local storage and tracking
This application does not use marketing, analytics or profiling cookies. Language and tax region are selected via the URL/local page state; no persistent preference cookie is stored.
Cloudflare may set technically necessary security cookies (e.g. __cf_bm) to prevent bots and attacks.
6. Recipients and third-country transfers
Recipients may include Cloudflare (CDN/security), the VPS/hosting provider (operations) and netcup (only when the visitor opens the external Looking Glass link or completes checkout at Netcup).
Where data is transferred outside the EU/EEA, appropriate safeguards (e.g. EU Standard Contractual Clauses) and supplementary measures are used.
7. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, data portability and object to processing based on legitimate interests.
You may also lodge a complaint with a data protection supervisory authority, usually the authority at the controller’s seat.
8. Changes
We may update this policy if the legal framework, hosting or services change. The version published on this page applies.