---
title: 'Privacy notice'
url: 'https://grassroot.it/en/datenschutz'
markdown: 'https://grassroot.it/en/datenschutz.md'
lang: en
date: '2026-11-11'
description: 'Privacy notice Controller and contact The controller is Dirk Ertner (DE), Königstraße 23, 14109 Berlin, Germany. The email address for privacy enquiries is provided in the legal…'
---

# Privacy notice

## Controller and contact

The controller is Dirk Ertner (DE), Königstraße 23, 14109 Berlin, Germany. The email address for privacy enquiries is provided in the [legal notice](https://grassroot.it/en/impressum#kontakt).

## Visiting the website

The web server processes technical access data, including the requesting connection’s Internet Protocol (IP) address, time, requested page, response status, data volume and information supplied by the browser. This is needed to deliver content, investigate errors and identify attacks. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR), reflecting the legitimate interest in reliable and secure operation.

Access records are retained only as long as necessary for those purposes, taking account of technical investigation and the detection and clarification of security incidents. Records relating to a specific incident may be required until it is resolved and associated claims are established or defended.

## Contacting us

Information supplied in an email is used to handle the enquiry. Contractual and pre-contractual enquiries are processed under Article 6(1)(b) GDPR; other enquiries under Article 6(1)(f) GDPR, reflecting the interest in responding. Information is deleted after handling unless statutory retention duties or necessary evidence require otherwise.

Technical providers operating the server or email service may receive data as necessary to provide those services. This website does not use or disclose information for advertising.

## Cookies and external content

Technically necessary cookies may support session and sign-in functions, associating a session and protecting sign-in. Storage is based on section 25(2), point 2 of Germany’s Telecommunications Digital Services Data Protection Act (TDDDG), where strictly necessary for an explicitly requested function. Related processing is based on Article 6(1)(f) GDPR and the interest in secure operation of those functions.

We do not use analytics, marketing services or embedded content from external platforms. Fonts and graphics load from our own server. Third-party websites are accessed only when you follow a link; their operators are responsible for the resulting processing.

## Your rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it for the future.

You may also complain to a data protection supervisory authority, including the [Berlin Commissioner for Data Protection and Freedom of Information](https://www.datenschutz-berlin.de/buergerinnen-und-buerger/beschwerde/).

You do not need to supply additional personal information simply to read this website. Handling an enquiry requires the relevant contact details and information about the matter. This website does not make automated decisions with legal or similarly significant effects or carry out corresponding profiling.

Updated: 11 November 2026.

---

## Navigation

- Previous: [Legal notice](https://grassroot.it/en/impressum.md)