Which data we process, for how long and why.
This privacy policy applies to our website hubu.de, all subdomains and the services offered there. Our services are operated without advertising, without tracking and without profiling.
The controller responsible for data processing on this website is:
DeepSheep UG (haftungsbeschränkt)
Iburger Str. 53-55
49082 Osnabrück
Germany
E-mail: support@hubu.de
Managing Director: Julian Theel
Our services run on our own, self-administered servers at technical service providers within the European Union. These providers act as processors for operation and maintenance; all processing takes place inside the EU.
We process personal data only to the extent strictly necessary. Wherever possible, all data is processed on our own servers; external service providers are avoided where possible. External data sources receive only anonymous, technically necessary information - never personal data of visitors.
We process technical log data and measures against automated access on the basis of Art. 6 (1) (f) GDPR (legitimate interest in secure and stable operation). The location you select and the associated cookie serve your request for local weather data (Art. 6 (1) (f) GDPR). Publishing our articles on social networks is based on Art. 6 (1) (f) GDPR. We do not process data on the basis of consent; there is therefore no right to withdraw consent.
When our pages are accessed, the web server automatically stores technical data in log files: IP address, date and time, the requested URL, user agent (browser, operating system) and the previously visited page (referrer). This data is required for operation and security, for example to defend against attacks and to analyse errors. It is not merged with other data. The log files are rotated daily and deleted after at most 14 days.
To show the weather automatically, your approximate location (city) is determined. This is done exclusively locally using a geolocation database installed on our server. Your full IP address is not stored. For the assignment we keep a shortened network address (IPv4: /24, IPv6: /48) for up to 90 days; it is not transmitted to an external service. No location-based profiling takes place.
If you choose a location yourself, it is stored only in a cookie in your browser so that your choice is retained on your next visit. The cookie (hubu_city) contains only the selected city, no other data, is valid for ten years and is renewed automatically on every visit.
We use only technically necessary cookies (§ 25 (2) TDDDG); no consent is obtained, because these cookies are required directly for the service you request:
When you sign in to the administration area, we store the time and IP address of the last sign-in in order to detect unauthorised access.
Your appearance setting (light, dark, system) is stored exclusively in your browser (localStorage) and is not transmitted to us.
Weather, market and other information is retrieved exclusively through our own servers from publicly accessible data sources. Only the anonymous details required for the request are transmitted, such as the coordinates of a city or the identifier of a quote. Personal data of visitors - in particular IP addresses, cookies or device identifiers - is not transmitted. The retrieved data is cached briefly to relieve the servers.
The news articles are processed on our own systems. No visitor data is transmitted or stored in this process.
The search box in the header is not routed through our server. When you use it, your browser sends the query directly to DuckDuckGo (duckduckgo.com). DuckDuckGo receives your IP address and the search term and processes them under its own privacy policy; we store neither search terms nor results. The data is transmitted only through your own input in your browser to a provider in the United States.
Most processing takes place directly in your browser. Services such as weather and market prices retrieve their data through our servers; external providers receive only the technically necessary, anonymous requests - never your IP address, cookies or other data that could identify you.
Articles are published automatically on our public channels in social networks (Mastodon, Bluesky, Telegram, Threads, Facebook and X). Only the content of the articles is transmitted, no visitor data.
This website offers no comment function, no user accounts and no personalised services. No advertising networks, analytics tools or social media plugins are integrated; there is no embedded third-party content.
Personal data is stored only as long as necessary for the respective purpose and deleted afterwards. Server log files after at most 14 days; shortened network addresses for location assignment after at most 90 days; the time and IP address of the last sign-in in the administration area to detect unauthorised access, plus short-lived protection measures against automated access, only for the short duration required in each case.
You have the right to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to object to processing (Art. 21). You may object to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation.
Since we do not process data on the basis of consent, there is no right to withdraw consent.
To exercise your rights, please contact us via the channels given in the imprint.
You have the right to lodge a complaint with the competent supervisory authority: the State Commissioner for Data Protection of Lower Saxony, Prinzenstraße 5, 30159 Hannover, Germany, telephone +49 (0)511 120 45 00, e-mail poststelle@lfd.niedersachsen.de.
There is no automated decision-making and no profiling within the meaning of Art. 22 GDPR.
All transmissions are encrypted (HTTPS/TLS). Our systems are updated regularly and protected against unauthorised access by technical measures. Absolute security, however, cannot be guaranteed.
We reserve the right to adjust this privacy policy if our services or legal requirements change. The current version can be retrieved at this address.
Use of the site is possible without registration and without providing personal data. The provision of the data recorded in the server log files is neither required by law nor by contract; without it, however, a secure and error-free provision of the site is not possible.