Impressum & Privacy Policy

Impressum (§ 5 DDG, § 18(2) MStV) and Data Controller:
Paul Schwandes, C/O www.impressum-ohne-adresse.de, Wernher-von-Braun-Str. 5-7, 69214 Eppelheim.
(Impressum ohne Adresse wird zur Verfügung gestellt von Antavi IT Solutions GmbH.)
Email: paul@schwandes.de / Phone: (+49) 01577-4465389
Statutory contact details. Use unrelated to this service is prohibited.

Contact: You can contact me via email to paul@schwandes.de or via phone at (+49) 01577-4465389. If you contact me, your data (e.g. email sender address, phone number, metadata, content) is processed based on the nature of your request. For Legal/GDPR Rights Requests, I process your data to fulfill my legal obligations to respond to your request (Art. 6(1)(c) GDPR). These records are retained for 3 years to demonstrate compliance (Art. 5(2) GDPR). For General Inquiries, I process your data to facilitate communication based on my legitimate interest in running this website (Art. 6(1)(f) GDPR). These inquiries are deleted once resolved.

Your rights: You have the right to access your data (Art. 15), rectify your data (Art. 16), erase your data (Art. 17), restrict your data (Art. 18), port your data (Art. 20), and to withdraw any given consent at any time (Art. 7(3)) via email. You have the right to lodge a complaint with the supervisory authority (Art. 77). You have the right to object to the processing of your data at any time for reasons arising from your particular situation (Art. 21 GDPR).

Hosting and Security: I host this site via netcup GmbH. To protect your data, a Data Processing Agreement (DPA) is in place, and all traffic is SSL/TLS encrypted. Browser and connection metadata (e.g., IP address, time of request, browser type, operating system, referrer URL) are stored based on my legitimate interest (website stability, Art. 6(1)(f) GDPR) and retained for 7 days. Cookies are set only on internal pages based on technical necessity (§ 25(2) TDDDG) and legitimate interest (access control, Art. 6(1)(f) GDPR), retained for your session.

User Content (Form inputs & replay files): I process your Submission data to fulfill our Submission Terms (Art. 6(1)(b) GDPR) using Google Ireland Ltd / Google LLC (for submissions) and Discord Netherlands BV / Discord Inc (for hosting). Once integrated into the show, data is retained for the duration of the Touhou Replay Showcase project under my legitimate interest (show archive, Art. 6(1)(f) GDPR) unless you demonstrate compelling legitimate grounds to rectify, erase or restrict your Submission data that override my archival interest (Art. 21(1) GDPR).

US Data Transfers: Google and Discord process data in the US, currently covered by the EU-US Data Privacy Framework (DPF, Art. 45 GDPR). Due to historic legal volatility, by submitting forms or loading external iframes, you additionally provide explicit consent (Art. 49(1)(a) GDPR) as a fallback mechanism for the international transfer, acknowledging the potential risk of US authority access without enforceable legal remedies should the Adequacy Decision be invalidated.