Privacy policy

Controller

Alexander Hald, Shooter-Media-TV, Madenstraße 16, 70619 Stuttgart, Germany, e-mail {{KONTAKT_EMAIL}} (see imprint). No data protection officer is appointed because the legal requirements for one are not met.

Journalistic processing

The video pages of this website are journalistic and editorial content. The media privilege applies to them (section 23 MStV, Article 85 GDPR): the rights to access, rectification and erasure apply to editorial content only to a limited extent. Anyone affected by a report reaches the editorial office for correction, reply or blurring at {{KONTAKT_EMAIL}} or through the contact form; notes are in the press notice. For everything else, such as the forms and the hosting, this policy applies in full.

Hosting and log files

The website runs on a server of netcup GmbH, Karlsruhe, located in Nuremberg, Germany. Technical operation and development: Nils Reeh as processor (Article 28 GDPR). When a page is requested the server processes the IP address, time, requested address, browser and referrer to deliver the page and fend off attacks (Article 6(1)(f) GDPR). IP addresses are stored truncated in the logs; logs are deleted after 7 days.

Security and spam protection

The forms are protected by invisible fields (honeypots), a minimum time between opening and sending, a signed form token and a limit of submissions per hour. For this the IP address is processed only as a checksum (HMAC) with a daily rotating key and never stored in clear text (Article 6(1)(f) GDPR). No third-party services such as captchas are used.

Consent and settings

The site sets no cookies and asks for consent in one place only: whether YouTube videos should load directly without a click in future (see “Embedded YouTube videos”). The choice is stored solely in the browser (localStorage, entry smt-consent, 12 months) and is not transmitted to us. It can be withdrawn at any time at the end of this page; the colour scheme setting is likewise stored only in the browser.

Content from YouTube

The videos and their descriptions come from Shooter-Media-TV’s own YouTube channel and are fetched through the YouTube Data API. No visitor data is transmitted to YouTube in the process. Preview images are stored by us and served from our own server. Use of the API is subject to the YouTube Terms of Service and the Google Privacy Policy.

Embedded YouTube videos

Videos load from YouTube only after a click on the preview image (two-click solution, domain youtube-nocookie.com). By clicking you consent to your browser connecting to Google, which processes your IP address and browser data, including in the USA (Article 6(1)(a), Article 49(1)(a) GDPR; Google LLC is certified under the EU-US Data Privacy Framework). Google may set cookies or local storage entries in the player. Choosing “Load videos directly in future” on a video page grants this consent for all video pages; it can be withdrawn at the end of this page.

Map

The map (where enabled) is rendered with tiles from our own server; no data is transmitted to map providers. Map data: © OpenStreetMap contributors, prepared with Protomaps. Markers sit at the town centre.

AI-assisted processing

Title, teaser, category and location of the video pages are generated from the video description with the help of a language model (see Automatic processing). Descriptions may contain details about persons as stated in the authorities’ press releases. Before transmission, age statements with origin, house numbers, number plates and phone numbers are removed. The recipient is OpenRouter, Inc. (USA) as processor on the basis of the EU standard contractual clauses; only endpoints without data retention are used. The model in use and its provider follow from the configuration. The legal basis is the legitimate interest in making the archive accessible (Article 6(1)(f) GDPR); no decisions about persons are taken.

Geocoding

To position incidents on the map only place names (place, district, state) are sent to a geocoding service, never visitor data.

Advertising

Currently no advertising is shown on this website and no advertising code is loaded. Should advertising via Google AdSense be switched on, it happens only after consent through a Google-certified consent management platform (TCF) requested before any ad is loaded; this policy will then be extended by purposes, vendors and the withdrawal option.

“Report an incident” form

Fields: place (required), type of incident, message, up to three photos, callback number (optional). Reports can be anonymous. Photos are re-encoded on receipt and metadata such as location and device are removed. Please do not send pictures of injured or deceased persons and respect the rights of people shown.

With the mandatory checkbox you consent to your callback number and photos being transmitted to the team via the Telegram messenger (Article 49(1)(a) GDPR). Telegram Messenger Inc. (British Virgin Islands) also processes data outside the EU without an equivalent level of data protection and without safeguards within the meaning of Article 46 GDPR. Reports are deleted after 30 days, including the messages in Telegram; backups are overwritten after 14 days.

Contact form

Fields: name, e-mail address, message. The data is processed to answer the request (Article 6(1)(b) and (f) GDPR), answered by e-mail through a mailbox at the hosting provider and, with your consent, forwarded to the team via Telegram (see “Report an incident form”). Requests are deleted once closed, at the latest after 30 days, unless statutory retention duties require otherwise.

Statistics

Audience is measured, where included, with the self-hosted software Umami: without cookies, without storing the IP address (it is only hashed transiently) and without disclosure to third parties (Article 6(1)(f) GDPR). Browsers with “Do Not Track” enabled are not counted. The measurement can be switched off for your browser at the end of this page.

Backups

Backups of the database and files are stored encrypted on servers in Germany and overwritten after 14 days.

Recipients and third-country transfers

Recipient	Purpose	Country	Basis
netcup GmbH	Hosting	Germany	Processing agreement
Nils Reeh	Operation and development	Germany	Processing agreement
Google LLC (YouTube)	Video player after click	USA	Consent, EU-US Data Privacy Framework
OpenRouter, Inc.	Language model for processing	USA	Processing agreement, standard contractual clauses
Telegram Messenger Inc.	Forwarding reports to the team	British Virgin Islands and others	Consent (Article 49(1)(a) GDPR)

Retention periods

Data	Period
Server logs	7 days, IP truncated
Reports via “Report an incident” including photos and Telegram messages	30 days
Contact requests	until closed, at most 30 days
Spam protection checksums	24 hours
Backups	14 days
Consent in the browser	12 months

Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20) and objection to processing based on legitimate interests (Article 21). Consent once given can be withdrawn at any time with effect for the future. For journalistic and editorial content these rights apply only to a limited extent (see “Journalistic processing”). Complaints go to the competent supervisory authority: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

Status

This policy applies from the date stated above. Changes are published on this page.

Settings in this browser

YouTube videos

Videos load only after a click on the preview image. No consent for direct loading is stored.

Statistics

Cookieless audience measurement with Umami is active in this browser, if it is included on the site at all. No cookies are set and no IP addresses are stored.

Switch statistics off