Physical Address
17033 Neubrandenburg
Germany
Privacy policy
Privacy Policy (Data Protection Declaration) for the web portal „ARKANA“
As of March 15, 2026
1. Responsible party and contact details
Controller within the meaning of the General Data Protection Regulation (GDPR):
ARKANA - Blog and news web portal
Gagik Gabrielian / Owner
Neustrelitzerstraße 105
17033 Neubrandenburg
Germany
Telephone: +49 1637087676
E-mail: admin@aibben.de
2. Purpose and scope of data processing
| Purpose of processing | What data is processed? | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Provision and operation of the website | IP address, access time, browser/device information | Article 6 paragraph 1 f GDPR (legitimate interest) |
| User registration (optional) | Name, first name, email address, username, password hash | Article 6 paragraph 1 a GDPR (consent) |
| Sending newsletters / information | Email address, if applicable, first/last name | Article 6 paragraph 1 a GDPR (consent) |
| Comment function | Name/pseudonym, email address, comment text, IP address | Article 6 paragraph 1 a GDPR (consent) or f GDPR |
| Analysis and statistics tools (e.g. Matomo) | IP address (anonymized), page views, time spent on the site | Article 6 paragraph 1 f GDPR (legitimate interest) |
| Cookies & Tracking | Cookie ID, preferences, session information | Article 6 paragraph 1 a GDPR (consent) |
| Social media plugins (e.g. Twitter, YouTube) | IP address, browser information, referrer URL | Article 6 paragraph 1 f GDPR (legitimate interest) |
3. Legal basis for processing
- consent (Art. 6 para. 1 a GDPR): For newsletters, registration, comments and cookies, provided that the users actively consent.
- Contract fulfillment (Art. 6 para. 1 b GDPR): No applicable contract performance, as ARKANA does not offer any goods/service contracts.
- Legitimate interest (Art. 6 para. 1 f GDPR): For the operation, security, analysis of usage and display of social media plugins.
- Legal obligation (Art. 6 para. 1 c GDPR): Storage of log files to fulfill legal retention obligations (e.g. § 257 HGB, § 147 AO).
4. Recipients or processors
| Recipient / Processor | Purpose of the transfer | Note on transfers to third countries |
|---|---|---|
| Web hosting provider (e.g. Hetzner Online GmbH) | Provision and operation of the infrastructure | Data processing within the EU |
| Email service providers (Mailchimp, Sendinblue) | Sending newsletters | EU Standard Contractual Clauses |
| Analytics tool operator (Matomo Cloud) | Web analytics | EU Standard Contractual Clauses |
| Social media platforms (Twitter, YouTube) | Display of embedded posts | Data processing in the USA; EU standard contractual clauses or adequacy decision |
Your data will only be shared with third parties on the basis of a legal obligation or legitimate interest, or with your explicit consent.
5. Cookies & similar technologies
| Cookie type | Description | Storage duration | Purpose |
|---|---|---|---|
| Session cookie | Temporary session ID | until the browser is closed | Maintaining the session |
| Persistent cookie | Analytics cookie (Matomo) | 2 years | Visitor statistics |
| Marketing cookie | Tracking cookie (if newsletter tool) | 12 months | Campaign success monitoring |
| Social media cookie | Embedded third-party content | varies | Display of social media buttons |
You can disable the storage of cookies at any time via your browser. However, disabling strictly necessary cookies (e.g., session cookies) may limit the functionality of the website.
6. Analysis and statistics tools
We use Matomo (Open-source web analytics) for collecting anonymized usage data. The IP address is shortened immediately after collection (only the last two octets are removed). The data is stored exclusively on servers within the EU and is not shared with third parties.
7. Social Media Plugins
Individual articles may contain contributions from Twitter, YouTube and Instagram The plugin may be embedded. When you access a page with such a plugin, a connection to the respective servers is automatically established, and your IP address and possibly other browser information are transmitted. By loading the plugin, you agree to the respective data processing. You can prevent the plugin from being embedded by blocking the loading of third-party content in your browser.
8. Data security
We implement technical and organizational measures (TOMs) to protect your data from loss, unauthorized access, alteration, or distribution. These include, but are not limited to:
- TLS encryption (HTTPS) for all data transmission
- Regular security updates and penetration tests
- Access restrictions to databases (role concepts)
- Password encryption using bcrypt
9. Retention periods
| Data category | Storage period |
|---|---|
| Log files (IP address, access time) | 12 months (to ensure IT security) |
| Registration data (excluding newsletter) | 24 months after account deactivation |
| Newsletter subscribers | Until consent is withdrawn |
| Comments | 24 months after publication (or immediately if there is a notification of violation) |
| Persistent cookies | As stated in section 5 |
After the deadline expires, the data is routinely deleted or anonymized.
10. Rights of data subjects
You have the following rights vis-à-vis us:
- Right to information (Art. 15 GDPR) – You will receive confirmation as to whether and which personal data we process.
- Right to rectification (Art. 16 GDPR) – You can have incorrect data corrected.
- Right to erasure (Art. 17 GDPR) – „Right to be forgotten“, insofar as no statutory retention obligations exist.
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability (Art. 20 GDPR) – Provision of your data in a commonly used, machine-readable format.
- Right to object (Art. 21 GDPR) – in particular against processing for direct marketing purposes.
To exercise your rights, please contact the data protection officer mentioned above (email: admin@aibben.deWe will process your request without undue delay, but no later than within one month.
11. Right of appeal
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 20 44 35
40120 Düsseldorf
Telephone: +49 211 38424-0
E-mail: poststelle@lfd.nrw.de
12. Changes to this Privacy Policy
We reserve the right to amend this privacy policy as needed to comply with current legal requirements or changes to our services. The most current version is always available on the website at [website address]. „Data protection“ Available for download. In case of significant changes, we will inform you via a notification banner or by email (if you are registered).
