Data Privacy

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information on data protection can be found in the full privacy policy below.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator (the “controller”). You can find the controller’s contact details in the section “Controller”.

How do we collect your data?

Some data is collected when you provide it to us (e.g., when you enter data into forms or complete your user profile). Other data is collected automatically by our IT systems when you visit the website (e.g., technical data such as your internet browser, operating system, or time of access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the website can be provided without errors. Other data may be used to handle your account, event registrations, communication, and to protect the security and stability of our services.

What rights do you have regarding your data?

You have the right to obtain information about the origin, recipient, and purpose of your stored personal data at any time, free of charge. You also have the right to request correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time if you have further questions about data protection.

2. Hosting

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website may be stored on the host’s servers. This may include, in particular, IP addresses, access times, and other technical server log data. The use of the host is for the purpose of fulfilling contracts with our prospective and existing users (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online service by a professional provider (Art. 6(1)(f) GDPR).

Our host will process your data only to the extent necessary to fulfill its service obligations and in accordance with our instructions.

Hosting provider

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
E-mail: datenschutz@strato.de

Data Protection Officer of STRATO

STRATO GmbH – Data Protection Officer
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
E-mail: datenschutz@strato.de

Technical data processed by the host

• IP address
• Time of access

We use transport encryption (TLS) for data transmissions. Where available, data is also protected by additional technical and organizational measures to reduce unauthorized access.

3. General information and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations (GDPR) and this privacy policy.

Please note that data transmission over the Internet (e.g., communication by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible.

Controller

The controller responsible for data processing on this website is:

Verein zur Förderung anthropomorpher Kunst e.V.
c/o André Tibud
Wallbaumweg 96
44894 Bochum
Germany
Register court: Amtsgericht Kiel
Register number: VR 5982 KI
E-mail: info@anthro-kunst.de

“Controller” means the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

Storage duration

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., statutory retention periods);in the latter case, deletion will take place after these reasons cease to apply.

Withdrawal of your consent to data processing

Many processing operations are only possible with your explicit consent. You can withdraw your consent at any time with effect for the future. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to object (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint with the competent supervisory authority

In the event of GDPR violations, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged infringement.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract, in a commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.

SSL/TLS encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and the lock symbol in your browser bar.

If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Information, deletion and correction

Within the scope of applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, the purpose of data processing, and, if applicable, a right to correction or deletion of this data.

Right to restriction of processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time for this purpose. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification, you have the right to request restriction of processing.
• If the processing of your personal data was/is unlawful, you can request restriction of processing instead of deletion.
• If we no longer need your personal data, but you need it for the establishment, exercise or defense of legal claims, you have the right to request restriction instead of deletion.
• If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request restriction of processing.

If processing has been restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

4. Data collection on this website

4.1 What data is processed?

Login / Registration (via Telegram)

Login on this website is carried out via the third-party service Telegram. To provide this service, an external JavaScript file is loaded from Telegram’s servers after the user has given consent. In this context, Telegram may process:

• IP address
• Browser and browser version
• Time of access

After login on Telegram’s servers, the user is redirected back to our website. Telegram transmits the following data to us:

• Account ID
• Authentication date
• Username
• First name set in Telegram (if provided)
• Last name set in Telegram (if provided)
• Profile picture URL

The phone number linked to the Telegram account is not transmitted to us and is not stored by us.

User account / profile

To manage your user account and communication, we may store additional data you provide in your profile, such as:

• E-mail address (not publicly visible)
• Dietary preferences (e.g., vegetarian / vegan)
• Information about your kinks (if you choose to provide it)
• Information about other social networks you use (if you choose to provide it)

Important note on sensitive data: Information about kinks can relate to a person’s sex life and may be considered a special category of personal data under Art. 9 GDPR. If such data is processed, this is done only on the basis of your explicit consent (Art. 9(2)(a) GDPR). Providing this information is voluntary, and you can delete it from your profile or request deletion at any time.

Event registration

When registering for events, we may additionally collect:

• First name
• Last name
• Date of birth
• Possession of a “fursuit” and/or intention to bring it to the event (if requested)
• Additional yes/no questions defined by the event organizer (if any)
• Dietary preferences (e.g., vegetarian / vegan)

This data is used for identification at the entrance, compliance checks (e.g., youth protection), and resource planning by the organizer (e.g., fursuit-related logistics and other organizer-defined planning questions).

Data collected for an event is made available to the respective event organizer to the extent necessary for running the event. The organizer does not receive your exact date of birth; they only see your age at the start of the event.

First and last name fields are free-text fields. Depending on the organizer’s settings, participants may be allowed to use alias names.

Depending on the event and your settings, your nickname and/or avatar may be displayed to other participants or in public event listings only if you have enabled public visibility in your account settings.

Public visibility settings: During registration and in your account settings you can decide whether your nickname and any uploaded avatar are shown publicly. If you disable public display, your nickname and avatar will not be visible to other visitors/users.

For optional profile information (e.g., dietary preferences), we indicate in the registration flow if and which parts will be shared with the organizer. Unless explicitly stated in the registration form, such optional profile information is not intended for public display.

4.2 Cookies

Our website uses so-called “cookies”. Cookies are small text files and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or stored permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies can have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., login/session handling). We do not use tracking tools such as Matomo/Piwik, and we do not use Sentry.

The storage of technically necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest) in the technically error-free and optimized provision of our services. Where consent is requested for cookies, the respective cookies are stored exclusively on the basis of consent (Art. 6(1)(a) GDPR);consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude acceptance of cookies for certain cases or in general, and activate automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

5. Analytics and advertising

We do not use analytics or tracking tools (neither Matomo nor Piwik) and we do not use Sentry. We also do not create advertising profiles. We may review purely technical server logs where necessary to ensure operation, detect misuse, and maintain security (Art. 6(1)(f) GDPR).