Skip to main content

DSGVO / GDPR

Last Modified: 2018-06-14

Information for Podcasters / Users of Podlove Publisher

What User Data is used or accessible to other services?

If the Bitlove Module is active, requests to bitlove.org are made.

If the Flattr Module is active, requests to flattr.com are made.

Both Podlove Subscribe Button and Podlove Web Player may be served via GitHub (Github privacy statement). You can choose to not use our CDN to serve these applications in the module settings.

If Tracking/Analytics is enabled, user IP addresses are used to determine their geographic location. IP addresses are not saved, but anonymized and then hashed together with the User Agent to generate a request id, which is saved. The User Agent is saved as well but cannot be connected to the user since the user IP is never saved.

This information aims to inform you, the user of Podlove Publisher.

IP Addresses

If you are using Podlove Publisher Tracking/Analytics, an update to version 2.7.5 or higher is recommended.

Tracking uses a request_id to be able to determine when two requests came from the same user and should be counted as one unique access. This request_id is a has made of the request IP address and user agent. Unfortunately it is not possible to anonymize IP addresses without skewing download statistics. However, since the request IDs are only used for grouping in the same hour, they can be anonymized after a day without losing tracking accuracy. Once a day, all request_ids older than 24 hours are salted in a way that makes it impossible to restore the original IP address.

Second, you need to deal with the existing request_ids. There is a new "DSGVO" section under "Tools" with a button that will rehash all existing request_ids with a randomly generated salt. That way it will become unfeasible to determine the original IP address but your analytics will stay the same.

In case you have a lot of downloads (let's say much more than 50.000), you may want to do this via command line because that will be much quicker than via the tools section. You need wp-cli, then simply call wp eval 'podlove_rehash_tracking_request_ids();'. On a multisite, pass the blog id as a parameter: wp eval 'podlove_rehash_tracking_request_ids(42);'.

Text Snippets for your Privacy Page

Feel free to copy the following text into your sites disclaimer to inform your users. Remove the sections that don't apply to you if you're not using some module.

This is not legal advice.

If you have improvement suggestions for these texts, please let us know in the forums: community.podlove.org.

English

Bitlove

This website uses bitlove.org to provide downloads via bittorrent.

When you access pages of this website that contain bitlove functionality, your browser connects directly to Bitlove's servers.

Flattr

Within this online offer buttons of the micropayment service "Flattr" are included, which are provided by Flattr AB, Box 4111, 203 12 Malmö, Sweden. When you access pages of this website that contain these buttons, your browser connects directly to Flattr's servers.

If users have created an account with Flattr, with which they are logged in at the same time, Flattr receives the information that users have visited the respective page of this online offer. If users have a Flattr account, are logged in and interact with the button, information about it will be transmitted to Flattr and stored there for billing purposes according to local guidelines. Even if users are not logged in, usage data may be collected and stored. To see exactly how your data is processed when you click the Flattr button, users can visit flattr.com/privacy.

Podlove

Both Podlove Subscribe Button and Podlove Web Player are served by keycdn.com (keycdn GDPR statement).

Podlove Publisher tracks download statistics. IP adresses are used to determine an estimated geographic location (city or state level).

IP addresses are stored temporarily (up to 48 hours) as part of a request id. This is necessary because the podcast owner needs to know how often episodes are downloaded to prove the viability of her/his endeavours.

To determine a realistic download number, the system must be able to recognise repeated access to the same file by the same user. The only reliable way to achieve this is by considering the IP address in combination with the User Agent. Using an anonymised IP address is not possible because it would lead to wrong results. An access to the same file by the same user on different days can be considered separate downloads, therefore it is necessary to store IPs for only up to 48 hours.

After 48 hours request ids are salted in a way that makes it impossible to restore the original IP address.

The User Agent is stored as well.

Deutsch

Bitlove

Diese Website verwendet bitlove.org, um Downloads via BitTorrent anzubieten.

Wenn Sie Seiten dieses Internetangebots, die Bitlove-Funktionalität enthalten, aufrufen, wird von Ihrem Browser eine direkte Verbindung zu Servern von Bitlove hergestellt.

Flattr

Innerhalb dieses Onlineangebotes sind Schaltflächen des Micropayment-Dienstes „Flattr“ eingebunden, der von der Firma Flattr AB, Box 4111, 203 12 Malmö, Schweden betrieben wird. Wenn Sie Seiten dieses Internetangebots, die diese Schaltflächen enthalten, aufrufen, wird von Ihrem Browser eine direkte Verbindung zu Servern von Flattr hergestellt.

Sofern Sie bei Flattr ein Konto angelegt haben, mit dem Sie gleichzeitig eingeloggt sind, erhält Flattr die Information, dass Sie die jeweilige Seite dieses Onlineangebots besucht haben. Sofern Sie ein Flattr-Konto besitzen, eingeloggt sind und mit der Schaltfläche interagieren, werden Informationen darüber an Flattr übermittelt und nach den dort geltenden Richtlinien dort zu Abrechnungszwecken gespeichert. Auch wenn Sie nicht eingeloggt sind, können ggf. Nutzungsdaten erhoben und auch gespeichert werden. Wie Ihre Daten genau verarbeitet werden, wenn Sie die Flattr-Schaltfläche anklicken, erfahren Sie unter flattr.com/privacy.

Podlove

Sowohl Podlove Subscribe Button als auch Podlove Web Player werden von keycdn.com (keycdn GDPR-Stellungnahme) ausgeliefert.

Podlove Publisher erfasst Downloadstatistiken. IP-Adressen werden benutzt, um die geographische Verortung zu schätzen (Stadt / Land).

IP-Adressen werden kurzzeitig (bis zu 48 Stunden) als Teil einer Request-ID gespeichert. Das ist notwendig, damit der/die Podcast-Betreiber/in die Tragfähigkeit seiner/ihrer Bemühungen nachvollziehen kann.

Um realistische Downloadzahlen zu ermitteln, muss das System erneuten Zugriff auf die gleiche Datei vom selben Nutzer erkennen können. Der einzige verlässliche Weg, dies zu erreichen, ist, die IP-Adresse zusammen mit dem User-Agent zu betrachten. Eine anonymisierte IP-Adresse zu benutzen ist nicht möglich, da dies zu falschen Ergebnissen führen würde. Ein Zugriff auf die gleiche Datei vom selben Nutzer an verschiedenen Tagen kann als separater Download betrachtet werden. Darum genügt es, IP-Adressen lediglich für bis zu 48 Stunden vorzuhalten.

Nach 48 Stunden werden Request-IDs anonymisiert. Dadurch ist es unmöglich, die ursprünglich enthaltene IP-Adresse wiederherzustellen.

Der User-Agent des genutzten Browsers wird auch gespeichert.