Privacy.
We measure only what helps us improve the civic initiative. We do not sell data, use advertising pixels, or create personal or political profiles.
Current choice: No choice yet
Controller
Sergey Terekhov · arena.hockey initiative · c/o Rechtsanwaltskanzlei Jablukov & Kollegen · Kurfürstendamm 132 A · 10711 Berlin · Deutschland · s.terekhov@me.com
Technical operation
The site runs on a server operated by Hetzner Online GmbH and is delivered through Cloudflare. Cloudflare processes technically necessary connection data for delivery, security and attack prevention. The origin server logs only Cloudflare connections; logs rotate after 14 days.
Recipients and international transfers
Hetzner processes data in Germany. Cloudflare acts as a processor and may handle data through its global infrastructure. Transfers outside the European Economic Area are subject to Cloudflare's contractual and statutory safeguards, in particular the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
Reach analytics with consent
Only after consent do we create random identifiers for this page view and browser session. We measure page views, broad acquisition channel, language and device class, scroll depth, visible sections, clicks, video and upload steps, and Web Vitals. We do not store names, email addresses, filenames, exact file sizes, full referrers or query strings, or IP addresses in the analytics database.
Outbound links
Visits to our own redirect routes for WhatsApp and evidence sources are counted as daily aggregates. No visitor or session identifier is stored. The destination provider processes the subsequent visit under its own terms.
Organisation links to the Wahlcheck
For individually issued organisation links, we count server-side per organisation-linked random code the request for the question overview (link_requested) and the deliberate continuation (wahlcheck_opened); we store neither an IP address nor a browser or session identifier, use the counts only internally for delivery follow-up under Art. 6(1)(f) GDPR, and delete them after 60 days; the values do not feed into the public assessment.
Watching videos
Thumbnails and the player are delivered by Cloudflare Stream. The player loads only after an explicit action. If analytics is allowed, we record starts, progress milestones, completion and technical errors by video, not by person.
Submitting videos
A submitted video is transferred directly to Cloudflare Stream. Cloudflare processes the file and technical metadata as our processor. Once technical processing is complete and valid consent is recorded, the video is currently published automatically on arena.hockey without prior editorial review. We may review, hide or delete published videos afterwards. We store a random Stream identifier plus the consent version and time, but no name, email address, filename, IP address or free-text message with the video.
Consent, rights and minors
Before choosing a file, the submitter must actively give explicit consent to automatic public publication after technical processing and without prior editorial review (Art. 6(1)(a) GDPR and, where political opinions or other special-category data may be visible, Art. 9(2)(a) GDPR). Submitters confirm the necessary image, voice, personality and usage rights; videos involving minors require consent from a parent or legal guardian. Consent may be withdrawn at any time for the future by emailing s.terekhov@me.com. Include the video ID shown after upload, the public link or, if neither is available, a short description of the video so that we can identify and hide it without delay.
Retention and deletion
Unpublished submissions, for example after failed processing, are automatically deleted from Cloudflare Stream and our video database by a protected maintenance job once they reach 30 days. If we subsequently withdraw a published video or consent is withdrawn, we remove it from every public selection without delay. If Cloudflare is temporarily unavailable, it remains hidden and the next maintenance run retries deletion. Published videos otherwise remain online until consent is withdrawn or the project ends. A technical publication and moderation log contains only a hashed video identifier, action, status and time and is deleted after 180 days. Analytics events are deleted after 90 days, daily aggregates after at most 24 months and Nginx logs after 14 days.
Other legal bases and rights
Optional reach analytics is based on consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Technically necessary operation, security and the minimal moderation log are based on Art. 6(1)(f) GDPR. You can change your analytics choice below at any time and request access, correction, deletion or restriction by email. You may also complain to the Berlin Commissioner for Data Protection and Freedom of Information.
Full provider details: Imprint
Updated: 21 August 2026