Privacy policy
Datenschutzerklärung · Last updated: November 2026
In short
- No cookies, no ads, no tracking across websites.
- Anonymous visitor statistics with Umami on our own server – no cookies, no stored IP addresses.
- No forms – we don't ask you for any data.
- The font is hosted on our own server, not loaded from Google.
- YouTube videos are only loaded after you tap them.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Felix Göldl
Dahlmannstr. 3
85051 Ingolstadt, Germany
Email: felix.goeldl@icloud.com
2. Hosting
This website is hosted on a server rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner.
3. Server log files
Every time you visit this website, your browser automatically transmits information that is technically necessary to deliver the page:
- IP address (shortened before it is stored: the last two blocks are removed)
- date and time of the request
- requested page or file
- HTTP status code and amount of data transferred
- referrer URL (the page you came from)
- browser and operating system (user agent)
We process this data to deliver the website, to keep it stable and secure and to detect misuse. The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in a secure and working website) and § 25 (2) no. 2 TDDDG. Log files are deleted automatically after 7 days at the latest. The data is not combined with other data and not used to identify you.
4. Visitor statistics (Umami)
To see how many people visit our campaign page and which flyer brought them here, we use Umami, an open-source statistics tool that we run on our own server. No third party is involved and no data leaves our server.
Umami sets no cookies and does not store your IP address. Visitors are only told apart by a hash value that changes regularly and cannot be traced back to you. We only see aggregated figures: page views, the approximate number of visitors, country, device type, browser, operating system, the referring website and whether you came via the QR code on our green or red flyer. Known bots are filtered out.
The legal basis is Art. 6 (1) (f) GDPR (our legitimate interest in evaluating our student campaign).
You can object at any time: open wear-a-helmet.org/?nostats once. Your browser will then no longer be counted (a note is saved in your browser's local storage; deleting your browser data undoes it).
5. Encryption
This website uses TLS encryption (HTTPS). You can recognise an encrypted connection by the lock symbol in your browser's address bar.
6. YouTube videos
We embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube's extended privacy mode (youtube-nocookie.com) and a two-click solution: no connection to YouTube is made when you open our page. Only when you tap a video is it loaded from YouTube's servers.
When you tap a video, YouTube receives at least your IP address, the page you are on and technical information about your device and browser. YouTube may store cookies or similar data on your device and may link the viewing to your Google account if you are logged in. Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision.
The legal basis is your consent by tapping the video, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future by not playing any further videos and reloading the page. More information: Google Privacy Policy ↗.
7. External links
Our page links to external sources (e.g. Destatis, BASt, scientific journals). No data is transferred to these sites until you click a link. After that, the privacy policy of the respective provider applies.
8. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw your consent at any time (Art. 7 (3) GDPR).
To exercise your rights, simply write to the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de ↗.
9. Changes
We may update this privacy policy if the website or the legal situation changes. The current version is always available on this page.