Last updated: September 2026

This policy explains what happens to personal data when you visit betacodex.org. It is written to comply with Art. 13 and 14 of the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

The controller responsible for data processing on this website is:

BetaCodex GmbH c/o Niels Pflaeging Gustav-Freytag-Strasse 6 65189 Wiesbaden Germany

Phone: +49 173 6821315 Email: contact@noSpam.nielspflaeging.com

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR.

2. What we do and do not collect

This website is an information site. It has no user accounts, no login area, no shop, no contact form and no newsletter registration. We do not sell personal data, we do not use it for advertising, and we do not carry out profiling or automated decision-making within the meaning of Art. 22 GDPR.

What remains are four things: the log files our server writes, a cookie that stores your consent decision, our own self-hosted visitor statistics, and whatever you choose to activate yourself — an embedded video, a link to an external platform, an email to us.

3. Hosting and server log files

This website is hosted by Mittwald CM Service GmbH & Co. KG, Königsberger Strasse 4–6, 32339 Espelkamp, Germany. Mittwald processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time a page is requested, the web server automatically records:

  • the IP address of the requesting device
  • date and time of the request
  • the page or file requested and the amount of data transferred
  • the HTTP status code
  • the referring URL, if your browser transmits one
  • browser type, version and operating system

This data is technically necessary to deliver the page and to keep the service secure and stable. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, reliable operation of the website and in the detection and investigation of attacks. Log data is stored for a short period only and is then deleted automatically. We do not merge it with other data sources, and we do not use it to identify individual visitors.

4. Cookies and consent management

We use the consent banner to obtain and document your decision about non-essential cookies.

Consent cookie (cookie_consent). Stores which categories you have accepted, so that you are not asked again on every page. Lifetime: 1 year. This cookie is technically necessary to honour your choice; it is set on the basis of § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR and does not require consent.

Statistics cookies. Set only if you accept the "Statistics" category. See section 5.

Video cookie. Set only if you actively start an embedded video, in order to remember that decision for later visits. See section 7.

You can change or withdraw your decision at any time via the cookie settings on this website, or by deleting the cookies in your browser. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Web analytics with Matomo

We use Matomo, an open-source analytics tool, to understand how our site is used. Matomo runs on our own server at betacodex.org/matomo. No usage data is transmitted to Matomo or to any other third party, and none leaves the EU.

Nothing is transmitted to Matomo until you have consented to statistics cookies. Until then the tracker sits idle: no page view is recorded, no cookie is set, and no data about your visit reaches our analytics server.

If you consent, Matomo processes:

  • pages viewed, time of access and time spent
  • the referring website
  • your approximate location, derived from a shortened IP address
  • device type, screen resolution, browser and operating system
  • search terms you enter in the site search
  • links you click

Cookies used by Matomo:

  • _pk_id — distinguishes returning from new visitors, lifetime up to 13 months
  • _pk_ses — groups requests into a visit, lifetime 30 minutes
  • _pk_ref — records which website you arrived from, lifetime 6 months

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time in the cookie settings; Matomo will then stop collecting data and the analytics cookies will no longer be used.

6. Site search

If you use the search function, your search term is stored together with the time of the search, the number of results and the language version — without your IP address and without any identifier that would link the search to you. We use these statistics to find out what people are looking for and do not need on our site. Legal basis: Art. 6(1)(f) GDPR.

7. Embedded videos

Some of our pages show videos from our YouTube channel. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you open a page that contains our video gallery, your browser establishes a connection to Google's servers. Google receives your IP address, the address of the page you are viewing and information about your browser. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in presenting our video library.

When you start a video, Google may in addition set cookies on your device or read existing ones. If you are signed in to a Google account at that moment, Google can assign your viewing behaviour to that account. The legal basis is your consent under Art. 6(1)(a) GDPR, which you give by starting the video. Your decision is stored in a cookie so that videos load directly on later visits; you can undo this by deleting the cookies for this website in your browser.

Data may be transferred to servers in the United States. Google relies on the EU Standard Contractual Clauses and on its certification under the EU-U.S. Data Privacy Framework. Details are set out in Google's privacy policy: https://policies.google.com/privacy

8. Links to external platforms

We link to our presences on LinkedIn, YouTube, Mastodon, X and Substack, and to other external websites. These are plain links. No data is transmitted to the operators of those platforms until you click.

Once you follow such a link, you leave this website and the privacy policy of the respective provider applies. We have no influence over, and no knowledge of, what those providers do with your data.

9. Contacting us by email

If you write to us at the address above, we process your email address, your message and any other information you choose to include, in order to answer you. The legal basis is Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where your enquiry concerns a contract. We keep such correspondence for as long as it is needed to deal with the matter and to comply with statutory retention obligations, and delete it thereafter.

Please note that unencrypted email cannot be protected against unauthorised access in transit.

10. Fonts

The typeface used on this site is stored on our own server and loaded from there. No connection to Google Fonts or any other external font service is established, and no data is transmitted to such a provider.

11. Encryption

This website uses TLS encryption (recognisable by "https://" and the padlock in your browser) to protect the transmission of data between your browser and our server.

12. Recipients of your data

We pass personal data to third parties only where this is necessary and legally permitted. In practice, this concerns our hosting provider as a processor under Art. 28 GDPR (section 3), Google in connection with the video gallery (section 7), and the operators of services you choose to open yourself (section 8). Beyond that, we may be legally obliged to disclose data to public authorities.

We do not transfer personal data to a third country outside the EU/EEA on our own initiative.

13. Your rights

Under the GDPR you have the right to:

  • Access (Art. 15): to be told whether and which data concerning you we process
  • Rectification (Art. 16): to have inaccurate data corrected
  • Erasure (Art. 17): to have your data deleted, unless we are required to keep it
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20): to receive data you provided in a structured, machine-readable format
  • Object (Art. 21): to object, at any time and on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR
  • Withdraw consent (Art. 7(3)): at any time, with effect for the future

To exercise any of these rights, write to the contact address in section 1.

14. Right to lodge a complaint

If you believe we process your data unlawfully, you may lodge a complaint with a supervisory authority — in particular in the Member State of your residence, place of work, or the place of the alleged infringement. The authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit Gustav-Stresemann-Ring 1 65189 Wiesbaden Germany https://datenschutz.hessen.de

15. Changes to this policy

We update this policy when our website or the legal situation changes. The version published here is the one that applies.