Politique de confidentialité
Mis à jour: novembre 3, 2026
1. Controller and Contact Information
The controller responsible for data processing on this website is:
Dr. Tina KoziolCeraluna Labs
Kiesbergstraße 128
49809 Lingen (Ems)
Germany
E-mail: ceraluna.info [at] gmail.com
Téléphone: +49 176 81336624
If you have any questions about this privacy policy or wish to exercise your data protection rights, please contact us using the details above.
Informations que nous collectons
2.1 Account Registration
When you create an account, we collect:
- Email address (required)
- Password (stored encrypted)
- Name (optional)
Legal basis: Contract performance (Art. 6(1)(b) GDPR) – necessary to provide your account.
2.2 Social Login
If you register via Google or Facebook, we receive:
- Votre adresse email
- Your name (as configured in your social account)
- Profile picture URL (optional)
If you sign in with Apple, we receive your Apple user identifier and, if you choose to share it, your name and email address. Apple may give us a private relay address instead of your real one.
Legal basis: Consent (Art. 6(1)(a) GDPR) – you authorize the connection.
2.3 Payments and Purchases
When you make a purchase (e.g., ebook, subscription), we collect:
- Accès complet
- Adresse e-mail
- Billing address
- Payment transaction ID (we do not store card numbers)
Legal basis: Contract performance (Art. 6(1)(b) GDPR) and legal obligation for invoicing (Art. 6(1)(c) GDPR).
Nous Contacter
When you contact us, we collect:
- Votre nom
- Votre adresse email
- Your message content
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – to respond to your inquiry.
2.5 Technical Data (Automatically Collected)
When you visit our website, our servers automatically log:
- IP address (anonymized where possible)
- Browser type and version
- Operating system
- Referrer URL
- Pages visited and time spent
- Date and time of access
Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) – security and optimization.
2.6 Shared Pages (Anonymous Share Counter)
When you share a page, we count the share anonymously: we record which page was shared, the share method (for example WhatsApp or copy link), whether it went through, and the page language. We store no IP address, device or browser details, account or session identifier, and set no cookie for this.
2.7 Notifications dans l'application iPhone
Si vous autorisez les notifications dans l'application Cape Town Data, nous enregistrons le jeton d'appareil fourni par Apple, la langue de l'application et le service de distribution d'Apple qui accepte ce jeton, afin de pouvoir vous envoyer des nouvelles du site. Le jeton seul ne permet pas de vous identifier.
Si vous activez les alertes pour vos quartiers dans votre tableau de bord et êtes connecté à l'application, nous associons le jeton à votre compte et utilisons ce lien uniquement pour vous envoyer ces alertes. Désactiver les alertes, vous déconnecter de l'application ou supprimer votre compte supprime ce lien. Nous conservons une trace de chaque alerte envoyée (la date, les incidents concernés et son texte) pendant 90 jours au maximum, afin qu'aucun incident ne vous soit annoncé deux fois. Vous pouvez aussi désactiver les notifications de l'application dans les réglages de votre iPhone.
Legal basis: Consentement (art. 6, par. 1, point a) du RGPD), donné lorsque vous autorisez les notifications sur votre iPhone et, pour les alertes de quartier, lorsque vous les activez.
3. Purposes of Processing
Les informations que nous collectons peuvent être utilisées aux fins suivantes :
| Finalité | Legal Basis |
|---|---|
| Providing and managing your account | Contract (Art. 6(1)(b)) |
| Processing payments and issuing invoices | Contract + Legal obligation (Art. 6(1)(b), (c)) |
| Responding to inquiries | Legitimate interest (Art. 6(1)(f)) |
| Website security and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Website analytics (Google Analytics - requires consent) | Consent (Art. 6(1)(a)) |
| Functional features (Mediavine Grow - favorites, enabled by default) | Legitimate interest (Art. 6(1)(f)) |
| Marketing and newsletters (self-hosted, delivered via Brevo - requires consent) | Consent (Art. 6(1)(a)) |
4. Recipients and Processors
We share your data with the following categories of recipients:
4.1 Payment Processing
Stripe, Inc.
Purpose: Payment processing for purchases and subscriptions.
Data shared: Name, email, billing address, payment details.
Location: USA (EU-US Data Privacy Framework certified)
Politique de confidentialité
4.2 Analytics (requires consent)
Google Analytics Opt-in
Purpose: Website usage analysis to improve our services.
Data shared: IP address (anonymized), browsing behavior, device info.
Location: USA (Standard Contractual Clauses)
Requires your explicit consent before activation.
Politique de confidentialité
4.3 Functional & Marketing Services
Mediavine Grow Default On
Purpose: Functional features including favorites/bookmarking and social sharing.
Data shared: IP address, browsing behavior, account data (if registered).
Location: USA
Enabled by default as a functional feature. You can opt out via cookie settings.
Politique de confidentialité
Brevo (Sendinblue GmbH) Opt-in
Purpose: Delivery of our self-hosted newsletter. Subscriber details are held in our own database; Brevo only transmits the emails.
Data shared: Email address, name and language preference (if provided).
Location: EU (Germany) - no transfer outside the EEA.
Politique de confidentialité
4.4 Security Services
Google reCAPTCHA
Purpose: Bot prevention and form security.
Data shared: IP address, browser data, interaction patterns.
Location: USA
Politique de confidentialité
4.5 Hosting and Infrastructure
Cloudflare, Inc.
Purpose: Content delivery, image optimization, security.
Data shared: IP address, request data.
Location: Global (EU-US Data Privacy Framework certified)
Politique de confidentialité
4.6 Accounting
Lexware Office (Haufe-Lexware GmbH)
Purpose: Invoice management and bookkeeping.
Data shared: Invoice data (name, address, purchase details).
Location: Germany
Politique de confidentialité
5. International Data Transfers
Some of our service providers are located outside the European Economic Area (EEA), particularly in the USA. We ensure adequate protection through:
- EU-US Data Privacy Framework: For providers certified under this framework (e.g., Stripe, Cloudflare).
- Standard Contractual Clauses (SCCs): EU-approved contract terms for data transfers (e.g., Google).
You may request a copy of the applicable safeguards by contacting us.
Cookies et technologies de suivi
Nous utilisons des cookies et des technologies similaires. Notre bandeau de consentement vous permet de choisir les catégories à accepter :
| Parcourir par catégorie | Finalité | Consentement requis |
|---|---|---|
| Nécessaires | Fonctionnalités essentielles du site web (session, sécurité, stockage du consentement) | Non (toujours actives) |
| Analyse | Comprendre l'utilisation du site web (Google Analytics) | Oui |
| Marketing | Social features (Mediavine Grow). Our newsletter signup sets no cookies. | Oui |
You can change your preferences at any time by clicking Comment contrôler vos préférences en matière de cookies.
For more details, see our Politique en matière de cookies.
7. Data Retention
Nous conservons vos données uniquement le temps nécessaire :
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Purchase/invoice data | 10 years (German tax law requirement) |
| Contact form messages | Until inquiry resolved, max. 3 years |
| Erreur du Serveur | 7 jours |
| Registres de consentement | 3 years after last interaction |
| Données analytiques | 26 mois (valeur par défaut de Google Analytics) |
8. Your Rights
En tant qu'utilisateur, vous disposez des droits suivants :
- Right of Access (Art. 15): Request a copy of your personal data.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your data ('right to be forgotten').
- Right to Restriction (Art. 18): Limit how we process your data.
- Right to Data Portability (Art. 20): Receive your data in a machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interest.
- Right to Withdraw Consent (Art. 7): Withdraw consent at any time (does not affect prior processing).
To exercise these rights, contact us at ceraluna.info [at] gmail.com.
You have the right to lodge a complaint with a supervisory authority. The competent authority for us is:
The State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
Website: lfd.niedersachsen.de
Sécurité des données
We implement appropriate technical and organizational measures to protect your data, including:
- HTTPS encryption for all data transmission
- Encrypted password storage (hashing)
- Access controls and authentication
- Regular security updates
- CSRF protection on all forms
Modifications de cette politique en matière de cookies
Nous pouvons mettre à jour notre Politique de confidentialité de temps à autre pour refléter les changements dans nos pratiques ou pour d'autres raisons opérationnelles, légales ou réglementaires. Nous vous encourageons à consulter cette politique périodiquement.
- Posting the updated policy on this page
- Updating the 'Last updated' date
- Sending an email notification for material changes (if you have an account)
Nous Contacter
Si vous avez des questions ou des préoccupations concernant notre Politique de confidentialité, veuillez nous contacter à l'adresse suivante :
Dr. Tina KoziolCeraluna Labs
E-mail: ceraluna.info [at] gmail.com
Téléphone: +49 176 81336624