Privacy policy

1. Controller

The controller responsible for data processing within the meaning of Art. 4 No. 7 GDPR is:

Prilog Leander Seyffer
Gölm 16, 22965 Todendorf
Germany
Phone: +49 1511 850 7877
Email: info@prilog.team

2. Data collected when you visit this website

When you visit our website prilog.de, the browser you use automatically sends information to our website's server. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is deleted automatically:

• IP address of the requesting computer (anonymised)
• Date and time of access
• Name and URL of the file retrieved
• Website from which the access is made (referrer URL)
• Browser used and, where applicable, your computer's operating system

The legal basis for processing is Art. 6 (1) (f) GDPR (legitimate interest in the secure, stable operation of the website). The data is not used for marketing purposes and is deleted automatically after 14 days.

3. Hosting

Our website is hosted on servers of Hetzner Online GmbH in Falkenstein (Germany). Under the GDPR, Hetzner is our processor and processes the log file data mentioned above on our behalf.

Provider:
Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen
Data protection: hetzner.com/de/rechtliches/datenschutz

4. Analytics tool: Plausible Analytics

We use Plausible Analytics in a self-hosted instance on our servers in Germany. Plausible uses no cookies and collects no personal data. Only aggregated statistics are collected:

• Number of page views
• Time spent on the page
• Referrer (which website linked to us)
• Browser type (anonymised)
• Country/region (based on the IP address, not stored)
• How often the sign-up form is submitted (only the number, no content)

Identifying individual visitors is technically impossible. No personal data is transferred to third parties.

The same Plausible instance also counts visits to the manual at docs.prilog.chat in the same way; this policy applies there as well.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in statistical analysis to improve our offering).

5. Contacting us

If you contact us by email or via the contact form (info@prilog.team), the details you provide (email address, name, content of the message) are stored solely to process your enquiry. If you use our contact form, your name, email address, school (optional) and your message are transmitted in encrypted form to our server in Germany (studio.prilog.de), stored there and forwarded to our mailbox.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in processing your enquiry).

Your data is not passed on to third parties. We store your data for as long as is necessary to process your enquiry and, where applicable, to defend against legal claims (usually no more than 3 years).

6. Sign-up form

If you enquire about Prilog via our sign-up form, we process the details you enter there: title, name, institution, email address, phone number, postal address, preferred Prilog address, your message and whether you would like training or the newsletter. The details are transmitted in encrypted form to our server in Germany (studio.prilog.de), stored there in our customer management system and forwarded to our mailbox so that we can process your enquiry and set up your Prilog address. When you enter your preferred address, the form checks whether it is still available; only this address is transmitted to our server api.prilog.chat for this purpose.

Legal basis: Art. 6 (1) (b) GDPR (taking pre-contractual steps at your request). Your details are not passed on to third parties. We delete them when they are no longer needed for processing; if a contract is concluded, the statutory retention periods apply.

7. Newsletter

In the sign-up form you can also subscribe to our newsletter (news about Prilog, about once a month). We use the double opt-in procedure for this: you first receive an email with a confirmation link. Only when you click it do we add your address to the mailing list. Without confirmation we do not send any newsletter. As proof of your consent, we store the time of sign-up and confirmation as well as which issues we have sent you.

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw it at any time — via the unsubscribe link in every email or informally at info@prilog.team. After unsubscribing you will no longer receive the newsletter. It is sent via our own mail server; no external newsletter service is involved.

8. Official and professional details from public sources

To make schools aware of Prilog, we store details about contact persons at schools and their school authorities (for example school leadership, management, board, IT and data protection officers): name, role, school, work email address and phone number, as well as professional details such as area of responsibility, committees and professional background. These details come from publicly accessible sources: the legal notice and contact pages of schools, school directories, public registers, press reports and public profiles in professional networks (such as XING or LinkedIn). We record where each detail comes from and when we were in contact. Details that are not clearly verified are marked as unconfirmed.

The legal basis is our legitimate interest in introducing Prilog to schools (Art. 6 (1) (f) GDPR). The data is stored on our own server in Germany and is not passed on to third parties. You will not receive a newsletter as a result; the newsletter is only sent after you have signed up yourself and confirmed. We delete the details if you object or at the latest two years after the last contact. You can object informally at any time, for example at info@prilog.team — we will then no longer contact you.

9. Video site video.prilog.de

We publish our explanatory videos (in German) on video.prilog.de. The site runs on the free software PeerTube on our own server at Hetzner Online GmbH in Germany (see Hosting). You do not need an account to watch; new accounts cannot be created there. In this context we process:

• Server log: IP address, date and time, address retrieved, referrer URL as well as browser and operating system. The purpose is secure, stable operation. The entries are deleted automatically after 14 days.
• View counts: PeerTube counts how often and for how long a video is watched and assigns a view to a country. The server determines the country itself using a local database; for this, the IP address is only used at the moment of the view and is not stored in the statistics. So that views by the same person are not counted more than once, the video player sends a random session identifier.
• Player settings such as volume or quality are stored locally by your browser. We do not use cookies, trackers or advertising for visitors.
• No sharing with other viewers: the videos come exclusively from our server. Peer-to-peer transmission, in which viewers exchange parts of videos with each other and can see each other's IP addresses, is switched off.
• Contact form: name, email address, subject and message are sent to us by email; section 5 applies.
• Fediverse: PeerTube is part of the Fediverse. Public videos and their descriptions can be retrieved by other Fediverse servers (such as Mastodon) and displayed there. If someone comments on a video via a Fediverse account, we receive the comment with the public account name and display it below the video. We will delete it on request.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing our videos, operating the site securely and seeing which videos are used), and for the contact form additionally Art. 6 (1) (b) GDPR.

10. Cookies

This website uses no cookies. We use neither tracking cookies nor marketing cookies. Functional cookies that are strictly necessary for operating the website are not used either, as the site is delivered purely statically.

11. Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption (TLS 1.3). You can recognise an encrypted connection by the browser's address bar changing from "http://" to "https://" and the padlock symbol being displayed.

12. Your rights

You have the following rights towards us at any time:

• Access (Art. 15 GDPR) — which data about you we process
• Rectification (Art. 16 GDPR) — to have incorrect data corrected
• Erasure (Art. 17 GDPR) — the "right to be forgotten"
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR) — data export in a machine-readable format
• Objection (Art. 21 GDPR) — to processing based on legitimate interest

To exercise your rights, an informal email to info@prilog.team is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The authority responsible for us is:

Der Landesbeauftragte für Datenschutz Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz, ULD) — the data protection commissioner of Schleswig-Holstein
Holstenstraße 98, 24103 Kiel
datenschutzzentrum.de

13. Validity and changes to this privacy policy

This privacy policy is currently valid and was last updated on 27 October 2026. As our website and services develop further, or as a result of changed legal requirements, it may become necessary to amend this privacy policy.

The current privacy policy can be viewed at any time on the website at prilog.de/en/privacy (German original: prilog.de/datenschutz).