Privacy Policy

1. Overview

The following information gives you an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Who is responsible for data processing on this website?

The data on this website is processed by the website operator. You will find the operator's contact details in section 3, "Responsible party (controller)".

How do we collect your data?

Some data is collected when you provide it to us, for example when you sign up for the community, write forum posts or subscribe to our newsletter. Other data is collected automatically by our IT systems when you visit the website, mainly technical data such as browser, operating system or time of access.

What do we use your data for?

We use technical data to provide the website without errors and to keep it secure. Account and forum data is used to run the community. Your e-mail address is used for sign-in links and, if you subscribed, for our newsletter.

2. Hosting

structr.org is operated by Structr GmbH itself and runs on Structr Enterprise. The server is located in a data center of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in Germany. Hetzner provides the server infrastructure only; all data stays within the EU. We have concluded a data processing agreement with Hetzner in accordance with Art. 28 GDPR. Hosting is based on our legitimate interest in a reliable and secure provision of our website (Art. 6(1)(f) GDPR).

3. General and mandatory information

Data protection

We take the protection of your personal data very seriously and treat it confidentially, in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmitted over the internet (e.g. by e-mail) may be subject to security gaps; complete protection against access by third parties is not possible.

Responsible party (controller)

Structr GmbH
Hanauer Landstraße 291
60314 Frankfurt am Main
Germany

Phone: 069 175549474
E-mail: office@structr.com

Storage duration

Unless a more specific storage period is stated in this policy, your personal data remains with us until the purpose for which it was collected no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law).

Legal bases

We process personal data on the basis of your consent (Art. 6(1)(a) GDPR), to perform a contract or pre-contractual measures such as your community membership (Art. 6(1)(b) GDPR), to fulfil legal obligations (Art. 6(1)(c) GDPR), or on the basis of our legitimate interests (Art. 6(1)(f) GDPR).

Revocation of your consent

You can revoke any consent you have given at any time. The lawfulness of the processing carried out before the revocation remains unaffected.

Right to object (Art. 21 GDPR)

If data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. If your data is processed for direct marketing, you may object at any time.

Your further rights

• Access to the personal data we store about you, its origin, recipients and purpose (Art. 15 GDPR)
• Rectification of incorrect data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability in a common, machine-readable format (Art. 20 GDPR)
• Complaint to a data protection supervisory authority (Art. 77 GDPR)

To exercise these rights, contact us at any time using the details above.

SSL/TLS encryption

This website uses TLS encryption to protect the transmission of content. You can recognise an encrypted connection by "https://" in the address bar and the lock icon of your browser.

4. Data collected on this website

Cookies

We use only one cookie: a technically necessary session cookie that keeps you signed in and protects forms. It contains no personal information beyond a random session identifier and is deleted when the session ends. We do not use tracking, advertising or third-party cookies, so no cookie consent is required. The legal basis is § 25(2) TDDDG and Art. 6(1)(f) GDPR.

Server log files

The server automatically collects and stores information that your browser transmits: browser type and version, operating system, referrer URL, host name of the accessing computer, time of the request and IP address. This data is not merged with other data sources and is used to keep the website running and secure (Art. 6(1)(f) GDPR).

Web analytics

We measure visits with a privacy-friendly, self-hosted analytics service operated by Structr GmbH (stats.structr.cloud). It does not set cookies and does not create personal profiles; visits are counted in anonymised form. The legal basis is our legitimate interest in improving our website (Art. 6(1)(f) GDPR).

Community account

When you sign up for the Structr community, we store your e-mail address and, if you provide them, a user name, your real name, a title and a profile picture. Sign-in works with a password or a sign-in link sent to your e-mail address. You decide in your profile which of these details are shown publicly. We process this data to provide your account and the community features (Art. 6(1)(b) GDPR). You can ask us to delete your account at any time.

Forum posts

Topics, posts, attachments and likes you publish in the forum are visible to all visitors together with your public user name. Posts may be reviewed by moderators before publication. Forum content is kept as long as your account exists; on request, we delete or anonymise it.

Newsletter

If you subscribe to our newsletter, we use your e-mail address to keep you informed about Structr releases, events and community offerings. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time; your address is then deleted from the mailing list.

Contact by e-mail or phone

If you contact us by e-mail or phone, we store your request including all personal data it contains in order to process it. We do not pass this data on without your consent. The legal basis is Art. 6(1)(b) GDPR if your request relates to a contract, otherwise our legitimate interest in answering it (Art. 6(1)(f) GDPR).

External links

This website links to external services such as our GitLab (gitlab.structr.com), structr.cloud and structr.com. When you follow such a link, the privacy policy of the respective site applies.