Privacy policy

Who we are

Suggested text: Our website address is: https://www.carteblanche-ffm.de.

Comments

Suggested text: When visitors leave comments on the website, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string, to help detect spam.

An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to check whether you use it. The Gravatar service’s privacy policy is available at https://automattic.com/privacy/. Once your comment has been approved, your profile picture is visible to the public alongside your comment.

Media

Suggested text: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors can download images from the website and extract any location data they contain.

Cookies

Suggested text: If you leave a comment on our website, you may opt in to saving your name, email address and website in cookies. These are for your convenience, so that you do not have to enter these details again when you leave another comment. These cookies are stored for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we will set several cookies to save your login information and display preferences. Login cookies expire after two days, and display preference cookies after one year. If you select “Remember me” when logging in, your login will remain active for two weeks. Logging out of your account removes the login cookies.

If you edit or publish an article, an additional cookie will be stored in your browser. This cookie contains no personal data and simply identifies the post ID of the article you have just edited. It expires after one day.

Website Security with Wordfence

We use the Wordfence security plugin provided by Defiant Inc., 1700 Westlake Ave N, Suite 200, Seattle, WA 98109, USA. It protects our website against unauthorized access, malicious requests and attacks.

For this purpose, IP addresses and technical information relating to security-related requests and login attempts are processed. This processing is based on our legitimate interest in maintaining a secure website pursuant to Article 6(1)(f) GDPR. Under the current configuration, local Live Traffic security logs are retained for a maximum of 30 days.

Wordfence uses security cookies for the administration area, which is exclusively intended for internal use. wfwaf-authcookie-* identifies logged-in administrators and their permissions and expires after twelve hours. wf_loginalerted_* supports security alerts when administrators log in from new devices and expires after one year. These cookies are not set for ordinary website visitors.

To determine the approximate geographical location associated with security-related IP addresses, Wordfence may transmit these addresses to its servers. This may involve processing in the United States. Further information is available in Defiant’s Privacy Policy.

Embedded content from other websites

Suggested text: Posts on this website may include embedded content, such as videos, images or articles. Embedded content from other websites behaves in exactly the same way as if the visitor had visited the other website.

These websites may collect data about you, use cookies, embed additional third-party tracking services and monitor your interaction with the embedded content, including your interaction if you have an account and are logged in to that website.

Who we share your data with

Suggested text: If you request a password reset, your IP address will be included in the reset email.

How long we retain your data

Suggested text: If you leave a comment, the comment and its metadata are retained indefinitely. This allows us to recognise and approve follow-up comments automatically rather than holding them in a moderation queue.

For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, edit or delete their personal information at any time, except that they cannot change their username. Website administrators can also view and edit this information.

Your rights over your data

Suggested text: If you have an account on this website or have left comments, you can request an export of the personal data we hold about you, including any data you have provided to us. You can also request that we erase any personal data we hold about you. This does not include data we are required to retain for administrative, legal or security purposes.

Where your data is sent

Suggested text: Visitor comments may be checked through an automated spam detection service.