Privacy Notice
Privacy information pursuant to Art. 13 GDPR for snapos.org — a fully static website without tracking, without cookies, without contact forms.
Controller
Marko Chalupa
Alte Dieburger Str. 56
64367 Mühltal, Germany
1. Nature and scope of data processing
snapos.org is a fully static website. No analytics scripts, tracking pixels, embedded third-party services, or cookies are used or set. Web fonts (IBM Plex Mono, IBM Plex Sans, Libre Baskerville) are loaded via Google Fonts CDN — see section 3 below.
When pages are accessed, the hosting provider automatically records technical server log data: IP address (partially anonymized), timestamp, requested URL, HTTP status code, bytes transferred, referrer, and user agent. This data is not merged with other datasets.
If you contact us by email, the data you transmit (at minimum your email address and message content) is used exclusively to process your inquiry.
2. Legal bases
Server log data: Art. 6(1)(f) GDPR (legitimate interest in technically secure website operation).
Email contact: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) or Art. 6(1)(f) GDPR (legitimate interest in processing incoming inquiries), depending on context.
Google Fonts: Art. 6(1)(f) GDPR (legitimate interest in consistent visual presentation). When fonts are loaded, your IP address is transmitted to Google's servers. To avoid this, fonts can be loaded locally — contact us if this is a concern.
3. Hosting and processors
The website is operated by IT-Schnittstelle GmbH (Alte Dieburger Str. 56, 64367 Mühltal, Germany) as the technical hosting provider, using infrastructure from Variomedia AG (Emil-von-Behring-Str. 4, 90471 Nuremberg, Germany) as upstream provider. Both process technical log data solely for operation and security purposes. Data processing agreements (DPAs) pursuant to Art. 28 GDPR are in place.
Google Fonts (CDN): Fonts are loaded from fonts.googleapis.com and fonts.gstatic.com (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google LLC participates in the EU–US Data Privacy Framework. For details, see Google Privacy Policy.
All server infrastructure is located in Germany. No personal data is transferred to third countries outside the EU/EEA beyond the Google Fonts CDN connection described above.
4. Retention periods
Server log data: Deleted after 30 days, unless a specific security incident or statutory retention obligation requires longer storage.
Email correspondence: Retained as long as necessary to process and document the inquiry, typically up to three years, unless statutory retention periods require a different duration.
5. Your rights
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to object (Art. 21 GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
Competent supervisory authority (Hesse, Germany): Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany. To exercise your rights, contact audit@snapos.org.
6. No automated decision-making
No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place on this website.
Last updated: August 2026 · snapos.org · Marko Chalupa