Privacy policy
Controller
Martin Staudenbauer, Kalvarienbergstraße 42, 8020 Graz, Austria, email office@news-loot.com (Art. 4 No. 7 GDPR). There is no data protection officer because none is required.
Purposes of processing
We process personal data to provide this website, keep it running securely, measure reach without identifying anyone, and, if you sign up, send the newsletter.
Legal basis
Art. 6(1)(a) GDPR for the newsletter (double opt-in consent), Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website and in running our channels) for everything else.
Access data and logs
When you visit, we process the data your browser transmits: IP address, time, page requested, browser and operating system identifier, referring page. We keep no access logs of our own; the data is processed only to deliver the page. The server's technical error logs may contain individual IP addresses, are capped at a few megabytes and overwrite themselves continuously. Cloudflare processes connection data as our processor to fend off attacks, under its own retention periods.
Audience measurement
We use Cloudflare Web Analytics. It sets no cookies, builds no fingerprint and stores no identifier that could link a visit to a person; we only see aggregate numbers such as page views and countries of origin.
Newsletter
Sign-up runs on double opt-in: after you enter your address we send a confirmation email, and only the click inside it adds you to the list. The confirmation link is valid for 24 hours. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time, through the unsubscribe link in every mail or at news-loot.com/newsletter/unsubscribe. We store your email address, language, the time of consent and a hashed IP address as proof; the IP hashes are deleted after 30 days. We measure neither opens nor clicks and use no tracking pixels.
Processors
Cloudflare, Inc. (DNS, proxy, object storage for videos and images, web analytics), Hetzner Online GmbH (server hosting in Germany), Resend, Inc. (newsletter delivery, data centre in the EU region Ireland). Data processing agreements under Art. 28 GDPR are in place with all of them.
International transfers
Cloudflare and Resend are US companies and may transfer data to the US, based on the EU Commission's standard contractual clauses or their certification under the EU-U.S. Data Privacy Framework.
Retention
The hashed IP address of newsletter sign-ups for 30 days. Newsletter addresses are kept until you unsubscribe; unconfirmed sign-ups expire with the confirmation link after 24 hours. We do not keep access data beyond delivering the page.
Cookies
This site sets exactly one cookie, lang, storing your language choice for one year once you switch languages. It is technically necessary (§ 165(3) of the Austrian Telecommunications Act 2021) and needs no consent banner. There are no tracking or marketing cookies.
TikTok and YouTube
Reels we publish on TikTok go out through the NEWsLoot Publisher app. For this we store the authorisation data of our own TikTok accounts @newsloot and @newsloot.de (access and refresh tokens, open ID) and their public basic data (display name, avatar) to confirm which accounts are connected. The tokens are kept only while the connection is active and are deleted when the authorisation is revoked (Art. 6(1)(f) GDPR). We do not process any data from viewers or other users of TikTok or YouTube. For the channels themselves, TikTok Technology Limited (Ireland) and Google Ireland Limited (YouTube) are independent controllers; their privacy policies apply.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest. You can withdraw any consent at any time with effect for the future.
Right to complain
You can lodge a complaint with the Austrian data protection authority (Barichgasse 40-42, 1030 Vienna, dsb.gv.at).
Contact
Privacy requests to office@news-loot.com or by post to Martin Staudenbauer, Kalvarienbergstraße 42, 8020 Graz, Austria.