Privacy

Controller

Hosting

The website runs on a virtual server of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The server is located in an IONOS data centre in Spain, within the European Union. IONOS processes the data on my behalf (Art. 28 GDPR).

Server log

For security and troubleshooting, the server logs each request: date and time, the address requested, the request method, the status code, the amount of data and the processing time, and the TLS version. Your IP address is truncated before it is stored (IPv4 to its first three blocks, IPv6 to its first 48 bits), so it can no longer be linked to you. The browser identification, the referrer and other request headers are not stored.

The legal basis is Art. 6 (1) (f) GDPR: my legitimate interest in running the website securely and without errors. The log is limited in size (at most 30 MB) and overwritten continuously.

Contact by email

If you write to me, I process your address and your message to reply (Art. 6 (1) (b) GDPR for licence enquiries, otherwise (f)). My mailbox is hosted by OVH SAS, 2 rue Kellermann, 59100 Roubaix, France. I delete messages once they are settled and no retention obligation applies.

Downloads and source code on GitHub

The program files and the source code of vinyl-check are hosted on GitHub (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA). This website embeds nothing from GitHub. Only when you follow a link there does your browser connect to GitHub, and GitHub's privacy statement applies. GitHub is certified under the EU-US Data Privacy Framework.

Vinyl-Mind (api.vinylcheck.net)

Through Vinyl-Mind, vinyl-check stations learn together. The service runs on the same server and is only used if you explicitly switch on participation in your station; a station can only join with an invitation code.

• Station: public key and its fingerprint, status, when it joined, was approved and was last seen, the invitation used. Kept until the station leaves.
• Contributions: per turntable profile a random profile ID, model coefficients, counts and check results, versions and a coarse class of the chain (USB turntable or turntable with interface; MM, MC or unknown). Kept until the station replaces or withdraws them, or leaves.
• Access log: time, IP address, the station's key (for signed requests), method, path without query and status. It serves to keep out abuse and is deleted automatically after 14 days.

Recordings, titles, Discogs data, notes, names of people or places and device names are never transferred. When a station leaves, it and its contributions are deleted; global models already computed are averages over several stations and cannot be traced back to one. The legal basis is Art. 6 (1) (b) GDPR (the service you switched on), and (f) for the access log (protection against abuse).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) (Art. 21). Write topietzsch@michaelpietzsch.de.

You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.