1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Gedenkstätte KZ-Außenlager Schlieben-Berga e. V.
Straße der Arbeit 8, 04936 Schlieben, Germany
Email: info@schlieben-berga.de
Telephone: +49 35361 80426
2. Hosting
This website is hosted by an external provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Hetzner’s Nuremberg (Germany) data centre. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.
3. Server log files
Every time this website is accessed, the server automatically collects and stores data transmitted by your browser in server log files: the IP address of the accessing device, the date and time of access, the URL requested, the browser type and version (user agent), and the referrer.
This data is collected solely to ensure the secure and stable operation of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website).
Technical retention period: access data is limited by automatic log rotation (max. 3 log files of 10 MB each per server container, 30 MB in total). Once this capacity is reached, the oldest entries are automatically and irrecoverably overwritten. Given the low visitor volume typical for this website, this corresponds in practice to a period of several weeks. No further targeted analysis or long-term storage of IP addresses takes place.
4. No cookies, no tracking, no third-party services
This website deliberately does without tracking and analytics tools, cookies for visitors, and the integration of third-party services, fonts or content. No user profiles are created.
The only cookies set by this website are technically necessary login cookies for editors in the protected administration area (see item 6). No cookies are set for ordinary visitors.
5. Contacting us by email
If you contact us by email, your details are processed solely to handle your enquiry. Legal basis: Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR where the enquiry relates to a prospective membership or an appointment. Your data will be deleted once your enquiry has been dealt with and no statutory retention obligations apply.
6. Cookies for editors in the backend
When an editor logs in to the WordPress administration area, technically necessary session and login cookies are set (including ‘wordpress_logged_in_*’, ‘wordpress_sec_*’, ‘wp-settings-*’). These are strictly necessary for login, apply only to logged-in editors, and are removed on logout or session expiry. Legal basis: Art. 6(1)(f) GDPR.
7. Your rights as a data subject
- Right to confirmation and information about data concerning you (Art. 15 GDPR)
- Right to rectification of inaccurate data (Art. 16 GDPR)
- Right to erasure of data held about you (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR), insofar as processing is based on Art. 6(1)(f) GDPR.
Please contact us at the address given under item 1 to exercise these rights.
8. Right to complain to a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg State Commissioner for Data Protection and the Right of Access to Files)
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany
www.lda.brandenburg.de
9. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption (automatic HTTPS), recognisable by the padlock symbol in the address bar and the ‘https://’ prefix.
10. Changes to this privacy policy
We will amend this privacy policy whenever the technology used or the legal situation changes.
Last updated: September 2026