1. data controller :: this newsletter is operated by Dennis P Paul. contact: newsletter@dennisppaul.de
  2. what is stored :: your mail address, the display name your mail was sent with, the date you asked to subscribe, the date you confirmed, and the message id of the confirming mail. the last two are kept as evidence that consent was given (art. 7(1) gdpr).
  3. legal basis :: consent, art. 6(1)(a) gdpr. it is confirmed by a reply from the address itself (double opt-in), so nobody can be added by someone else.
  4. images and server logs :: issues are html mail and load images from https://newsletter.dennisppaul.de. opening one therefore reaches our web server, which logs an ip address, the time, and the file requested ( deleted after 14 days ) — the same log every visit to the website produces. no tracking pixels, no open or click tracking, no third-party analytics, no external fonts.
  5. sending :: mail is sent through strato, our mail provider, which processes the address for the purpose of delivery. no mailing-list service, no marketing platform.
  6. retention :: rows are kept as long as the newsletter runs. an unsubscribe marks the row rather than deleting it — that is what stops the address being re-added by accident and what preserves the record that consent was withdrawn. ask and the row will be deleted outright.
  7. your rights :: access, correction, deletion, restriction, portability, and objection. to exercise any of them, write to the address in 1.
  8. withdrawing consent :: use the unsubscribe link in any issue, your mail client’s unsubscribe button, or send a mail with the subject unsubscribe to newsletter@dennisppaul.de. it takes effect on the next sync and costs nothing.
  9. changes :: we may update this notice occasionally. the latest version will always be available on this page.