Privacy Policy – Data Protection

Controller

Sven Ramuschkat
c/o tecRacer Germany GmbH
Vahrenwalder Str. 156
30165 Hannover, Germany

Email: sven@svenesis.org

Data Processing

Web Hosting (AWS)

When you visit this website, your IP address (truncated), timestamp, page requested, browser, and operating system are recorded in server log files. Data is deleted once it is no longer needed for IT security and troubleshooting. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Google Analytics (GA4)

With your consent, we use Google Analytics 4 for pseudonymous usage analysis. IP addresses are automatically anonymised. Provider: Google Ireland Limited, Dublin; parent company Google LLC, USA. Legal basis: consent (Art. 6(1)(a) GDPR, Section 25(1) TTDSG). Retention periods follow our GA4 configuration; details in Google’s privacy policy. Opt-out: Cookie Settings or the Google Analytics Opt-out Add-on.

Cookies & localStorage

Technically necessary: language preference (lang) and cookie consent (cookieConsent) stored in localStorage – without consent (Section 25(2) TTDSG). Analytics cookies are only set after consent.

External content

Some pages embed content from third parties. It is loaded when the page in question is opened or – where stated below – only once you use a particular feature, and your IP address may be transmitted to the respective provider. It serves presentation only; no analysis of your browsing behaviour takes place through it.

Buy Me a Coffee. On the Siril Scripts, Unicode Security Analyzer, Portfolio Wizard and Monte Carlo Simulation pages, an external script from cdnjs.buymeacoffee.com is loaded (Buy Me a Coffee, Inc., USA). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Provider’s privacy policy.

jsDelivr. On the Portfolio Wizard and Monte Carlo Simulation pages, the video-player library hls.js is loaded from the content delivery network cdn.jsdelivr.net (operator: Prospect One, Kraków, Poland; delivered from globally distributed server locations). The video files themselves are hosted on download.svenesis.org, an own host within the same AWS infrastructure. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Provider’s privacy policy.

Open-Meteo. On the Astro Weather page your browser requests weather and aerosol data from api.open-meteo.com and air-quality-api.open-meteo.com (OpenMeteo GmbH, Bürglen, Switzerland) – only once you click “Load forecast” there. On the Astro Weather History page your browser also requests archived forecasts from previous-runs-api.open-meteo.com, run by the same provider, as soon as the page is opened. Your IP address and the chosen coordinates are transmitted. According to the provider, server logs are deleted after 90 days and not shared with third parties. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Provider’s terms and privacy notes.

Iowa Environmental Mesonet. On the Astro Weather History page the reported cloud values of the nearby airports (METAR) can be fetched from mesonet.agron.iastate.edu (Iowa State University, Ames, Iowa, USA) – only once you click “Add the airport reports” there. Your IP address and the station codes requested are transmitted; no personal data beyond that is passed on. Third country: the data are processed in the USA, for which no adequacy decision exists in favour of this provider. Legal basis: legitimate interest (Art. 6(1)(f) GDPR); the request is made solely on your explicit action. Iowa State University privacy notice.

CDS Strasbourg (sky photographs). On the Observing Planner page your browser loads sky images (Digitized Sky Survey, or Pan-STARRS or 2MASS if chosen) as image tiles from alasky.cds.unistra.fr (Centre de Données astronomiques de Strasbourg, Université de Strasbourg / CNRS, Strasbourg, France) – only once you zoom into the star map; in the full view no connection to CDS is made. Your IP address, the requested image tiles and technical details of your browser are transmitted; the page address and the coordinates of your location are not. No cookies are set. The “Sky photos” switch under the map turns the loading off at any time. Legal basis: legitimate interest in showing real sky images (Art. 6(1)(f) GDPR). Provider’s legal notice.

meteoblue. The Astro Weather page can embed a weather map from meteoblue (meteoblue AG, Greifengasse 38, 4058 Basel, Switzerland). It is only loaded once you click “Load map from meteoblue” there; without that click no connection to meteoblue is made. After the click your browser loads the map from www.meteoblue.com and static.meteoblue.com and transmits your IP address and the coordinates of the chosen location. Unlike the other content listed here, meteoblue sets cookies in your browser – a session cookie (mb) and two cookies lasting one year (locale for the language setting, and ab) –, and the widget loads the Cloudflare Web Analytics statistics service from static.cloudflareinsights.com (Cloudflare, Inc., USA). Legal basis: your consent given by the click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The consent applies to that page view only; after reloading the page the map is not loaded again until you click once more. Cookies already set can be deleted in your browser. Provider’s privacy policy.

Plotly. The Astro Image Showcase page embeds two interactive 3D scenes that load the plotly.js library from cdn.plot.ly (Plotly, Inc., Canada). Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Provider’s privacy policy.

Data Transfers to the USA

AWS and Google: Data transfers to the USA are based on the EU–US Data Privacy Framework (adequacy decision of 10 July 2023) and supplementary Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Buy Me a Coffee: The transfer is governed by the provider’s privacy policy. DPF certification is not currently confirmed.

Plotly: The provider is based in Canada, for which the EU Commission has issued an adequacy decision covering organisations subject to PIPEDA.

Open-Meteo: The provider is based in Switzerland, for which the EU Commission has issued an adequacy decision. The provider does not state where its servers are located.

meteoblue: The provider is based in Switzerland, for which the EU Commission has issued an adequacy decision. The statistics service loaded inside the widget comes from Cloudflare, Inc. (USA); according to Cloudflare, it participates in the EU–US Data Privacy Framework.

jsDelivr: The operator is based in the EU. Delivery, however, uses a globally distributed network, so a request may be served from a location outside the EU.

Your Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You may withdraw consent at any time with effect for the future (Art. 7(3) GDPR). You may also lodge a complaint with a supervisory authority of your choice (Art. 77 GDPR).

Contact: sven@svenesis.org