Privacy

Convenience translation – the German version is legally binding.

1. Controller
Lars Stahl, c/o Postflex #3818, Emsdettener Str. 10, 48268 Greven, Germany · e-mail: info@tangodown.eu

2. Principle
This website works without tracking, without analytics or advertising services, without social media plugins and without embedded content, fonts or scripts from third parties. Only the data needed for operation and for the functions you use yourself is processed.

3. Hosting
The website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes data on my behalf under a data processing agreement (Art. 28 GDPR) on servers in the EU.

4. Server logs
When you visit, the web server stores technically necessary data (e.g. IP address, date and time, page requested, amount of data transferred, browser identifier, referring page). Purpose: secure and stable operation, defence against attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Storage period: the logs are created and stored by the host IONOS. According to IONOS, this data is stored for 8 weeks and then deleted; according to IONOS, the IP address is already shortened when it is collected. The IONOS privacy information on web hosting products is authoritative. No IP addresses go into this website's visitor statistics (section 7).

5. Cookies and browser storage
- "td_lang": remembers the chosen language (1 year). Strictly necessary for the function you requested – Section 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR.
- "TDADMIN": session cookie only in the admin area, only for the operator, ends with the session.
- "td_self": only on the operator's own devices, if switched on in the admin area – their own visits are then not counted in the visitor statistics.
There are no cookies for analytics, advertising or profiling; therefore no consent is required.

6. Contact form and e-mail
If you write to me, I process name, e-mail address and message to answer your request. Legal basis: Art. 6(1)(a) GDPR (your consent in the form) or (b) and (f). You can withdraw your consent at any time by e-mail. No IP address is stored; to prevent abuse, only a non-reversible check value is formed for a short time. Messages are deleted once dealt with, at the latest after 12 months, unless statutory retention obligations apply.

6a. Waiting list (notification by e-mail)
If you sign up for the waiting list, I store your name, e-mail address, language, the wording of your consent and the time and IP address of sign-up and confirmation. You only receive further e-mails after clicking the link in the confirmation e-mail (double opt-in) – only about news and releases of TangoDown Security. Legal basis for the e-mails: Art. 6(1)(a) GDPR (consent); for times and IP addresses: Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (proof of consent) and (f) (protection against abusive sign-ups). Unconfirmed sign-ups are deleted automatically after 14 days. You can unsubscribe at any time via the link in every e-mail, via the unsubscribe form (https://tangodown.eu/waitlist.php?out=1) or by e-mail; your details are then deleted. The e-mails are sent by the IONOS web server itself, no newsletter service is used, and opens and clicks are not tracked.

7. Visitor statistics without cookies
To see which pages are visited how often, the server counts only daily totals. A visit counts when the page is displayed in the browser: a small script of this website then reports it to this website's own server (page, referring website, language). Requests without the script – mostly automated ones – are only included as a total. Recorded are: page visited, hour, referring website (domain name only), device type, browser, page language and country (from the country database "IP to Country Lite" by DB-IP, https://db-ip.com, licence CC BY 4.0, stored locally on the server – nothing is sent to third parties – otherwise estimated from the browser language). To count visitors per day, a check value is formed from IP address and browser identifier using a random key that changes daily and is then discarded; it is deleted the following day. IP addresses are not stored, no cookies are set and nothing is stored on your device; recognising someone across days or linking data to a person is not possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving the service). Search engines and bots are not counted.

7a. Downloads, update and plugin requests from the app
When someone downloads a file or TangoDown checks here for updates or plugins, this is only counted as a total (per day, version and – if technically available – country). No IP addresses, device identifiers or content from the app are stored and no case data is transmitted. Legal basis: Art. 6(1)(f) GDPR (providing and improving the service).

8. Donations
Cryptocurrency donations go directly through the respective public blockchain; transactions there are visible to anyone. For PayPal, the privacy notice of PayPal (Europe) S.à r.l. et Cie, S.C.A. also applies. No payment data is processed on this website.

8a. YouTube videos
The start page may embed a video or playlist from YouTube. Nothing is loaded from YouTube until you click "Load and play video". Only after the click does your browser load the player via youtube-nocookie.com (privacy-enhanced mode) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular your IP address, device and browser information and the page visited are transmitted; YouTube may use cookies or similar technologies during playback and may also process data in the USA (Google is certified under the EU-US Data Privacy Framework). Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (your consent by clicking). If you choose "load directly from now on", only your browser remembers this choice (local storage, no cookie); you can delete it via your browser's site data. Details: Google privacy policy, https://policies.google.com/privacy.

9. Links to other sites
Links (e.g. LinkedIn, PayPal) are simple references. Only when you click them does the respective provider's privacy notice apply.

10. The TangoDown Security software
The application has its own privacy notice (in the app under "Manual" → "🔒 Privacy"). Cases and data stay encrypted on your computer; the provider receives none of it.

11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and to withdraw consent with effect for the future. An e-mail to info@tangodown.eu is enough.

12. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority, for example the Independent Centre for Privacy Protection Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

13. Security
The website is only accessible encrypted (HTTPS). Nobody can guarantee absolute security of data transmission on the internet.

14. Changes
This privacy notice is updated when the website or the legal situation changes. The version published here applies.

As of: November 2026