arrow for going back arrow for going back

Privacy Policy

1. Privacy at a glance

The following notes give an overview of what happens to your personal data when you use Videoflix. Videoflix is a non-commercial portfolio and learning project. No tracking cookies, analytics or advertising services are used and no user profiles are created.

2. Controller

Jens Baumann
Ginsterweg 15, 26725 Emden, Germany
Email: info@jensbaumann.com

3. Hosting and server log files

Videoflix is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner"). A data processing agreement in accordance with Art. 28 GDPR has been concluded with Hetzner. When you visit the site, information transmitted by your browser is automatically stored in server log files: IP address, time of the request, requested address, referrer URL, browser type and operating system. This data is not combined with other data sources. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in providing the website securely and without errors.

4. User account

A user account is required to use Videoflix. When you register, your email address and password are stored. The password is only stored in encrypted (hashed) form and cannot be read, not even by me. The data is used solely for logging in and providing the service. The legal basis is Art. 6 (1) (b) GDPR. The data is stored until you request the deletion of your account; an email to the address above is sufficient.

5. Sending emails

You receive emails to activate your account and to reset your password. These emails are sent via the service Mailtrap by Railsware Products Studio LLC (USA). Your email address and the content of the email are transmitted to Mailtrap. The legal basis is Art. 6 (1) (b) GDPR. As the provider is based in the USA, a transfer to a third country cannot be ruled out; it takes place on the basis of the standard contractual clauses of the European Commission.

6. Cookies

Videoflix only uses technically necessary cookies: after logging in, the cookies access_token and refresh_token are stored. They contain encrypted login data, cannot be read by JavaScript (HttpOnly), are only transmitted over encrypted connections and are deleted when you log out. They expire after one day at the latest. Logging in is not possible without these cookies. The legal basis is ยง 25 (2) No. 2 TDDDG and Art. 6 (1) (b) GDPR. No consent is required for this.

7. Video playback (hls.js via jsDelivr)

To play the videos, the library hls.js is loaded via the content delivery network jsDelivr (cdn.jsdelivr.net). Your IP address is transmitted to the operator of the CDN in order to deliver the file. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest lies in reliable video playback. A transfer to third countries cannot be ruled out.

8. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address bar of your browser and the lock symbol.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), objection (Art. 21 GDPR) and withdrawal of consent (Art. 7 (3) GDPR) at any time, as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Please contact me using the details given in section 2.

Last updated: October 2026