Changes compared to previous version

Who is responsible for data processing and to whom can turn the affected person?

Responsible in the sense of Art. 4 No. 7 GDPR is:

Julian Fölsch
Nöthnitzer Str. 8
01187 Dresden

E-Mail: julianf@paktosan.de
For encrypted communication, please use PGP and the following key:
50C4FD14066C45A6C376A9AFB1A76130EF9E88E1

What data is processed?

  1. Profile data: Matrix-ID, display name, profile picture, username, email address, password
  2. User content: All entered chat data (may be end-to-end encrypted)
  3. Device identification: IP addresses with time stamp and device name; type of device used (mobile / desktop), operating system
  4. Server log: IP address with timestamp and requested path

The profile data (display name, email, photo) as well as the Matrix ID are visible to external parties through participation in the global Matrix network via the contact search.

On what legal basis is the processing of personal data carried out?

The legal basis for data processing for the above purposes is Art. 6 Abs. 1 UAbs. 1 lit. a GDPR (consent).

How long will the personal data be stored?

User data will be stored until removal is requested. Data according to 2. can not be deleted automatically. Server logs are saved up to fourteen days.

Server and data location

This Matrix homeserver is hosted in Germany. Data may leave Germany as part of federation.

Data shared with data processors

HTTP requests sent to https://soziale.cloud/ are processed by THA-Systems (Marcel Herrguth). They keep IP, timestamp and accessed path for up to 14 days.

For sending email, we are sharing the email with THA-Systems (Marcel Herrguth). They keep the email address and timestamp for up to fourteen days. The complete email is saved until it is delivered.

What rights are the persons concerned basically entitled to?

Right to information (Art. 15 GDPR)

The parties concerned have the right to obtain information at any time about the and the possible recipients of this data.

Right to correction, deletion and restriction (Art. 16 - 18 GDPR)

The persons concerned can inform the administrator about the Correction, deletion of your personal data or the to demand restriction of the processing.

Right to data transferability (Art. 20 GDPR)

The persons concerned can demand that the person responsible give them their personal data is transmitted in machine-readable format.

Right of appeal (Art. 77 GDPR)

Affected persons can contact the competent supervisory authority at any time for data protection. The competent supervisory authority is:

Sächsische Datenschutz- und Transparenzbeauftragte
Devrientstraße 5
01067 Dresden


Phone: +49 351 85471-101
Telefax: +49 351 85471-109
E-Mail: post@sdtb.sachsen.de
GPG-Key: https://www.datenschutz.sachsen.de/download/SDTB_Post.asc
Website: https://www.datenschutz.sachsen.de/

This information may become out of date, please visit datenschutz.sachsen.de for up to date information.