Privacy Policy
Legally binding version is the German one. This English text is a convenience translation; in case of doubt the German privacy policy prevails.
This privacy policy applies to the domains vr6syncro.de and vr6-syncro.de.
1. Controller
The controller within the meaning of the GDPR is the natural person reachable at the following
address, who operates this website privately and without any intent to make a profit:
Email: kontakt@vr6syncro.de
Name and summonable postal address are provided on request via the email address above — see also the legal notice.
2. General information on data processing
We generally process our users' personal data only to the extent necessary to provide a functional website along with our content and services. Processing regularly takes place only with the user's consent (Art. 6 (1) lit. a GDPR) or on the basis of legitimate interests (Art. 6 (1) lit. f GDPR).
3. Contact form & bot protection (Cloudflare Turnstile)
The contact form is protected against automated requests by Cloudflare Turnstile. In the process, technical data (IP address, browser properties, embedded JavaScript from Cloudflare, Inc.) is transmitted to Cloudflare in the USA. The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in spam protection). The data transfer to the USA takes place on the basis of the EU Standard Contractual Clauses and the EU-US Data Privacy Framework (Cloudflare is DPF-certified).
4. Form relay backend
Entries from the contact form are validated on the server by our
form relay service (forms.vr6-syncro.de) and forwarded by email
to
kontakt@vr6syncro.de. We do not store the entries
permanently in a database. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in
answering enquiries).
6. Admin area (Sveltia CMS & Forgejo OAuth)
The admin area (/admin/) is provided by the self-hosted
Sveltia CMS. Login takes place via OAuth against our own
Forgejo instance (forgejo.diefamiliekramer.de). In the process,
the username, email address and Forgejo user ID are processed, solely for access verification.
The CMS JavaScript has been self-hosted since Audit-v4 (no external CDN anymore).
7. External resources / CDNs
The website generally loads all assets from its own server. Only the JavaScript for Cloudflare Turnstile (see above) is loaded directly from challenges.cloudflare.com.
8. Server location & hosting
The website is operated on servers in Germany (netcup GmbH, Nuremberg). A data transfer to third countries only takes place in the exceptional case described above (Turnstile).
9. Storage period
- Contact form entries: no permanent storage, email forwarding only.
- Server logs (HTTP access logs, errors): 14 days, then automatic rotation.
10. Data-subject rights
Under Art. 15-21 GDPR you have the right to:
- Access to the processed data (Art. 15)
- Rectification of inaccurate data (Art. 16)
- Erasure (Art. 17, "right to be forgotten")
- Restriction of processing (Art. 18)
- Data portability (Art. 20)
- Objection to processing (Art. 21)
Please direct requests to kontakt@vr6syncro.de.
11. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR). The competent authority is generally the data protection supervisory authority of the federal state of the controller — we will name the specific authority on request via the email address stated under "1. Controller".
12. Status of this privacy policy
Status: 2026-05-12