Privacy policy

Effective: 2026-10-20 · Covers the website fundstelle.online, the FUNDSTELLE channels and the FUNDSTELLE Hub · The German version is binding

1. Controller

Alwin Aab
Marktplatz 10B
83607 Holzkirchen
Germany
Email: fundstelle.news@gmail.com

2. In short

• This website sets no cookies, stores nothing in your browser and does not measure visits. No tracking, no ads, no profiles.
• It loads nothing from third-party servers: fonts, images, scripts and videos are served from this domain. No embedded YouTube, Instagram, TikTok or other content.
• There are no forms and no sign-up. The newsletter is a placeholder and collects nothing.

3. Hosting and server logs

The website is delivered by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). On each request Cloudflare processes technically necessary connection data: IP address, date and time, requested URL, amount of data, user agent, referrer (if sent) and data needed to fend off attacks. Purpose: delivering the site securely; legal basis Art. 6(1)(f) GDPR. Cloudflare acts as our processor (Art. 28 GDPR, Cloudflare Data Processing Addendum). Transfers to the USA may occur; Cloudflare, Inc. is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). We do not analyse these logs or keep our own access logs. Your browser may receive a Network Error Logging rule from Cloudflare and keep it for up to 7 days.

4. Videos on this website

Our videos are hosted on this domain and load only when you click “play”. We do not embed third-party video players; if that ever changes, only with a two-click solution and an updated policy.

5. Cookies and device storage

We do not store or read any information on your device (§ 25 TDDDG): no cookies, no local or session storage, no tracking pixels. Therefore there is no consent banner. Details: cookie policy.

6. Contact by email

If you write to us, we process your email address, name (if given) and message to answer you (Art. 6(1)(f) GDPR; for contract enquiries Art. 6(1)(b) GDPR). Our mailbox is operated by Google (Gmail, Google Ireland Limited); transfers to the USA may occur (Data Privacy Framework, Art. 45 GDPR). We delete messages once settled, at the latest 12 months after the last contact, unless legal retention applies.

7. Our channels and platform links

This site contains plain links (no plugins) to our channels on YouTube, Instagram, TikTok, Telegram and Facebook. When you use our channels there, the platforms process your data under their own responsibility; we see what you post publicly and receive aggregated statistics. For the statistics of our Facebook page and Instagram account we are joint controllers with Meta Platforms Ireland Limited (Art. 26 GDPR, Page Controller Addendum). Platform policies: Meta, Google/YouTube, TikTok, Telegram.

8. FUNDSTELLE Hub

The FUNDSTELLE Hub is the non-public editorial software FUNDSTELLE uses to check, schedule and publish its own videos to its own channels. It runs on our own server in Germany and has no third-party users and no sign-up.

• Access tokens of our own Instagram, Facebook, YouTube, TikTok and Telegram accounts, obtained when the channel operator signs in on the platform’s own page. The Hub never sees or stores passwords. Tokens are stored encrypted (AES-256-GCM).
• Account data returned by the platform: account name, account ID, page ID, granted permissions, token expiry.
• Post data: the uploaded video, title, caption, AI disclosure, the post ID assigned by the platform, and its status.

The Hub currently does not process data of viewers (see section 10 for a planned change). Purpose and legal basis: publishing our own videos to our own channels, Art. 6(1)(f) GDPR, and Art. 6(1)(b) GDPR where the operator’s own data is concerned. Videos and captions go only to the platform where they are published. The Hub uses YouTube API Services: the YouTube Terms of Service and the Google Privacy Policy apply; revoke access at security.google.com/settings/security/permissions. Tokens and account data are kept until the channel is disconnected, then deleted immediately; post IDs and status are kept as a publishing log while the channel is operated.

9. Data deletion

1. Revoke access in the platform: Facebook/Instagram under Settings, “Apps and websites”, remove “FUNDSTELLE Hub”; Google at security.google.com/settings/security/permissions; TikTok under Settings and privacy, Security and permissions, Apps and services.
2. Or email fundstelle.news@gmail.com with the subject “Deletion”. We delete all related tokens, account data and other data within 30 days and confirm the deletion.

10. Planned: AI replies to comments

Not in operation. This section will be completed (provider, data, retention, objection) before the feature starts.

We plan to answer public questions in the comments of our channels with AI assistance, processing the public comment text, public user name and comment ID to draft a reply from our checked statements. Every reply would be labelled as an AI reply. Legal basis would be Art. 6(1)(f) GDPR, with a right to object under Art. 21 GDPR.

11. Your rights

You have the right of access, rectification, erasure, restriction and portability (Art. 15 to 20 GDPR) and the right to object to processing based on legitimate interests (Art. 21 GDPR). Write to fundstelle.news@gmail.com. No automated decision-making or profiling takes place.

12. Supervisory authority

You may lodge a complaint with any data protection authority. Competent for us: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

13. Security, obligation, changes

The site is served only via HTTPS/TLS. You are not obliged to provide any data. We update this policy when the website, channels or Hub change.