Privacy Policy

How we process personal data submitted through the DSA notice form.

1. Data Controller

You can find information about the data controller in our Imprint.

2. Purpose of Data Processing

We collect and process your personal data solely for the purpose of reviewing and handling reports of allegedly illegal content in accordance with Art. 16 of the EU Regulation 2022/2065 (Digital Services Act – DSA).

3. Data Collected

When submitting a report, we may collect the following information, depending on what you provide:

• Report message (text)
• Location of reported content (e.g., URL)
• Your name (optional)
• Your email address (optional)
• Your IP address
• Language of the report

4. Legal Basis

The legal basis for this processing is Art. 6(1)(c) GDPR (legal obligation under the DSA) and Art. 6(1)(f) GDPR (legitimate interest in handling and documenting illegal content reports).

5. Retention Period

Your data will be stored for up to 6 years unless longer legal retention periods apply. Earlier deletion will occur if the data is no longer needed for processing purposes.

6. Data Recipients

The collected data will only be processed internally and will not be shared with third parties unless legally required or mandated by authorities.

7. CAPTCHA

To protect our forms from automated abuse and spam, we use our own, server-rendered image CAPTCHA. No data is shared with third parties.

Data Processed: When you load the form, a random code is generated on our server, rendered as an image, and sent to your browser together with a short-lived signed token (valid for up to 5 minutes). When you submit the form, your answer is checked against the token. No cookies are set and no tracking technologies are used.

Legal Basis: The use of the CAPTCHA is based on our legitimate interest in protecting our forms from automated abuse, in accordance with Art. 6(1)(f) GDPR.

8. Your Rights

You have the right to request:

• Access to your stored data (Art. 15 GDPR)
• Correction of inaccurate data (Art. 16 GDPR)
• Deletion (Art. 17 GDPR), unless legally required to retain it
• Restriction of processing (Art. 18 GDPR)
• Objection to processing (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)

To exercise your rights, please contact us here.

9. Voluntary Information

You may submit reports anonymously. Providing your name and email address is optional. However, without an email address, we will not be able to send you a confirmation or decision regarding your report.

10. Data Security

We use appropriate technical and organizational measures to protect your data from unauthorized access, loss, or tampering.