Legal Notice (Impressum)

Eule & Spiegel Medien ESM GmbH
Behlertstraße 3A
14467 Potsdam, Germany

Managing Director: Beat Ulrich Zirpel
Commercial Register: Amtsgericht Potsdam, HRB 37994
VAT ID: DE360542931

Phone: +49 30 555 65 55
Email: info@eule-spiegel.de

Privacy Policy

1. Data Controller

Eule & Spiegel Medien ESM GmbH
Behlertstraße 3A, 14467 Potsdam, Germany
Email: info@eule-spiegel.de
Phone: +49 30 555 65 55

2. Overview

This platform enables the secure transfer and receipt of files. Personal data is processed only to the extent necessary for the operation of the service.

3. Data Collected

3.1 When Visiting the Website

Each page visit automatically captures technical data:

• IP address
• Date and time of access
• Page/file requested
• Browser type and version (User-Agent)
• Referrer URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
Retention: Server logs are deleted after 30 days.

3.2 When Downloading Files

When you download a file via a delivery link, we store:

• IP address
• User-Agent (browser identifier)
• Time of download
• File identifier

Purpose: Delivery verification, abuse prevention, download counting.
Legal basis: Art. 6(1)(f) GDPR (sender's legitimate interest in delivery confirmation).
Retention: Download logs are automatically deleted after 90 days.

3.3 When Sending Files (Admin Area)

When an authorized user creates a delivery, the following data is processed:

• Sender email address (for authentication)
• Recipient email address (optional, for notification)
• Message text (optional)
• File names and sizes

Legal basis: Art. 6(1)(b) GDPR (performance of a contract / business relationship).

3.4 Email Notifications

If a recipient email is provided, we send a one-time notification about the available files. The email address is not used for marketing and is not shared with third parties.

4. Cookies and Local Storage

4.1 Technically Necessary Cookies

• Password and session cookies: For password-protected deliveries, shared folders, and project areas. Valid for at most 8 hours.

Legal basis: Art. 6(1)(f) GDPR (technically required for operation).

4.2 Optional Storage (with consent only)

• localStorage: Stores a list of past deliveries in your browser. Only activated when you click "Accept" in the cookie banner.
• es_consent cookie: Stores your consent decision (1 year).

Legal basis: Art. 6(1)(a) GDPR (consent). You can revoke consent at any time by clearing cookies and localStorage in your browser.

4.3 Language Setting

• lang cookie: Stores your language preference (DE/EN). Valid for 1 year.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in user-friendly language selection).

5. File Storage (Cloud)

Uploaded files are stored with Backblaze B2 (Backblaze Inc., San Mateo, CA, USA) in the EU-Central region. Backblaze is certified under the EU-US Data Privacy Framework. Files are accessed exclusively through time-limited, signed URLs.

Files are deleted according to the expiry date set by the sender (default: 90 days).

6. Email Delivery

Emails are sent via SMTP servers of IONOS SE (Montabaur, Germany). IONOS processes technically necessary data as a data processor.

7. No Tracking or Analytics

This platform uses no analytics tools, tracking pixels, social media plugins, or advertising networks.

8. Your Rights

Under the GDPR, you have the following rights:

• Access (Art. 15): Information about data we store about you
• Rectification (Art. 16): Correction of inaccurate data
• Erasure (Art. 17): Deletion of your data
• Restriction (Art. 18): Restriction of processing
• Data portability (Art. 20): Receive your data in machine-readable format
• Objection (Art. 21): Against processing based on legitimate interests
• Withdrawal of consent (Art. 7(3)): At any time without giving reasons

Please direct requests to: info@eule-spiegel.de

9. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority.

10. Security

We implement technical and organizational measures to protect your data:

• TLS encryption for all connections
• Time-limited, signed download URLs
• Optional password protection for deliveries
• CSRF protection, rate limiting, secure cookie flags
• WebAuthn passkey authentication for administrators

Last updated: August 2026