Privacy notice

1. Controller and contact details

2. Hosting and server logs

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

When a page is requested, the server processes technical data including the IP address, date and time, requested address including submitted search and filter parameters, HTTP status, referrer, and browser and device information.

This processing is necessary to provide the website securely, diagnose errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. Server logs are deleted after 14 days.

Hetzner privacy notice

3. Strictly necessary cookies

MesserMonitor currently sets the session cookie “laravel-session” and the CSRF protection cookie “XSRF-TOKEN”. The session cookie contains an encrypted session identifier and links requests to a session. “XSRF-TOKEN” helps verify that form requests originate from this website. Both cookies are also set when public pages are viewed, but are not used for advertising, audience measurement or visitor profiles.

The legal basis for processing is Article 6(1)(f) GDPR. Storage and access on your device are permitted under Section 25(2) no. 2 TDDDG where the cookies are strictly necessary for the functions you request. Server-side session data may include the IP address and browser identifier. The session expires after 120 minutes of inactivity.

4. Contact and correction forms

The contact form requires an email address, subject and message; a name is optional. The correction form requires the correction notice; the case link, supporting link, name and email address are optional. Without the required information, the message cannot be submitted or answered.

The data is used to process the message, answer follow-up questions and examine reported information. Contract-related enquiries are processed under Article 6(1)(b) GDPR. Other enquiries and correction notices are processed under Article 6(1)(f) GDPR; the legitimate interest is responding to enquiries and maintaining accurate published content.

Form content and contact details are stored in encrypted form. Internally, only the controller has access to the submitted information. Open submissions are deleted after no more than 180 days. Once completed, they are retained for 90 days and then deleted. Message text and contact details are not copied to the audit log.

Internally, only the controller receives the submitted information. Hetzner processes the data as hosting provider and processor for the technical operation of the service.

5. Journalistic and editorial case documentation

For its case documentation, MesserMonitor processes information from publicly available authority notices, media reports and linked original sources. This may include the incident date, approximate location, case type, published injury or fatality information and the relevant source. Names of affected private individuals and exact incident addresses are not published.

The processing serves the journalistic and editorial documentation of and reporting on publicly reported incidents. Article 85 GDPR in conjunction with Section 23 MStV applies to such processing. Where those special rules do not apply in an individual case, the general GDPR requirements remain applicable, in particular Articles 6, 9 and 10 and the information duties under Article 14 GDPR.

There is no general fixed publication period for case entries. The duration depends on the documentary purpose and the legal requirements applicable to the individual case. Notices about inaccurate information can be sent through the correction form.

6. Self-hosted map

The basemap, font glyphs and public case data are delivered by the MesserMonitor server. The browser does not connect to OpenStreetMap, OpenMapTiles or external tile, font or tracking services for the map.

OpenStreetMap provides the underlying geographic data; OpenMapTiles is the vector tile schema used for the basemap. The visible attribution links open the respective external websites only after an intentional click. The notices of those operators apply to that visit.

Map requests are recorded in the server logs described in section 2 in the same way as other page requests. The map creates no additional cookies, local-storage entries or visitor profiles. Published markers use generalised coordinates; exact incident addresses are not disclosed.

• OpenStreetMap data and licence
• OpenMapTiles

7. No advertising or visitor tracking

MesserMonitor currently uses no advertising networks, analytics services or social-media pixels. No visitor profiles are created and personal data is not used for personalised advertising.

8. No automated decisions

There is no solely automated decision-making, including profiling, within the meaning of Article 22 GDPR.

9. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), notification (Article 19) and objection (Article 21 GDPR). The right to data portability under Article 20 applies only where its specific requirements are met. Article 22 protects you against certain solely automated decisions. For journalistic and editorial data, the scope and limits of these rights may be governed by Section 23 MStV.

Right to object under Article 21 GDPR

You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then stop processing the data unless compelling legitimate grounds override your interests or the processing is necessary to establish, exercise or defend legal claims.

To exercise your rights, contact info@messermonitor.de.

Requests are normally handled within one month. Where necessary because of their complexity or number, this period may be extended by up to two further months; you will be informed of the extension and the reasons within the first month. Requests are generally handled free of charge. Where there are reasonable doubts about identity, additional information may be requested for verification.

10. Right to lodge a complaint

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority. The competent authority is in particular:

Contact the Saxon data protection authority