Privacy Policy

1. Data Controller

The controller responsible for the digital cemetery archive is:

Tel.: +49 (0) 211 46 912 – 0
Email: info@jgdus.de
Represented by its board.

2. Data Protection Officer

Tel.: 0221/95 15 63 – 0
Secretariat: 0221/95 15 63 – 22
Fax: 0221/95 15 63 – 3
Mobile: 0175/2660337
Email: Peter.Mainzer@wbs.legal

3. Purposes, Categories and Legal Bases

We process data to provide the public cemetery archive, for search and map display, for maintaining the published memorial and local archive, and for the security and stability of the service. The legal basis for the public, religious, and archival task is Art. 6 Abs. 1 lit. e DSGVO. For secure technical functioning, prevention of abuse, and error analysis, Art. 6 Abs. 1 lit. f DSGVO applies additionally.

In particular, technical connection data, search parameters, published archival information, location and coordinate data, released photos, and data that you provide yourself by email or telephone are processed. For processing an inquiry or other direct request made by you, Art. 6 Abs. 1 lit. b DSGVO applies insofar as the inquiry relates to pre-contractual measures or a contract; otherwise, Art. 6 Abs. 1 lit. f DSGVO is the legal basis for processing and answering. The data will be deleted after the inquiry is concluded, provided there is no statutory retention obligation or other permissible retention ground. The public projection contains published names, vital dates, grave locations, coordinates, and photos of deceased individuals. According to Erwägungsgrund 27 DSGVO, the DSGVO does not apply to personal data of deceased persons; rights and interests of living persons continue to be respected and protected under applicable regulations.

4. Hosting, TLS and Security Operations

The website https://friedhof.jgdus.de is hosted on a VPS of Hetzner Online GmbH in Deutschland (Nürnberg). Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Deutschland, is the technical hosting recipient and data processor. The connection is secured via TLS. Caddy operates as TLS termination and reverse proxy in front of Django 5.2.16 with Gunicorn; the application uses PostgreSQL/PostGIS 16.

For normally permitted public requests, Caddy does not write an access log. For rate limiting, an HMAC pseudonym of the IP address is stored for a maximum of 24 hours. Only rejected or suspicious requests may contain the IP address, user agent, path without query string, timestamp, status, and request ID in the security log. Raw data is retained for 14 days, and aggregated, non-personal summaries for 90 days. Email notifications are aggregated and contain neither visitor IP, names, request contents, nor search terms.

Privacy policy of Hetzner Online GmbH

5. Cemetery Archive, Search and Deep Links

The public search uses the GET parameter q. The search query may therefore be visible in the URL, browser history, and shared links. The archive does not store any search history and uses neither localStorage nor sessionStorage for searching. A direct link can point to a published grave.

The database contains the archival data released for public display. Daily off-host backups are transferred read-only to a OptiPlex controlled by the community. The rotation includes the current snapshot and at most six dated snapshots; deletions reach the respective backup copies as soon as the corresponding rotation expires. This does not imply that every automated database backup of the source system is deleted by the off-host rotation. Restoration and access are limited to operational purposes.

6. Maps and Photos

OpenStreetMap

The public OSM basemap is loaded by the browser directly from tile.openstreetmap.de. The operator of this service is FOSSGIS e.V. In doing so, IP address, browser headers, and the coordinates of the requested tiles are transmitted to this service. Cross-origin referrer transmission is suppressed by the website policy. The decisive document is the privacy policy of OpenStreetMap Deutschland.

Aerial imagery NRW

The aerial imagery from Geobasis NRW is loaded via a restricted proxy on our server. The browser receives the response from our domain; visitor IP and X-Forwarded-For are not passed on to NRW. The service is provided by Geobasis NRW.

Grave photos

Released grave photos are served locally from our VPS. An external CDN service is not used for this purpose.

7. Donation Link and Services Currently Not Offered

Paid additional services and ordering functions are not currently offered to the public. There is no public order form, and no order, contact or payment data is accepted through one. Cloudflare Turnstile and the payment API and webhooks of PayPal are not loaded or used in the current public flow.

Independently of this, the website contains an external donation link to PayPal. No PayPal code, SDK, API or iframe is embedded in our pages; merely displaying our pages therefore does not establish a connection to PayPal. You leave our website only when you activate the link. PayPal (Europe) S.à r.l. et Cie, S.C.A. in Luxemburg then processes data under its own responsibility as controller; this may include, in particular, the IP address, browser data, and account and payment data. International transfers are also governed by the PayPal Privacy Statement.

8. Cookies, Storage and Protected Areas

In the current flow, the public pages do not set cookies and do not use analytics cookies, marketing services, social pixels, profiling or Google Analytics. The external PayPal donation link does not set PayPal cookies on our website; processing by PayPal starts only after the link is activated. Cloudflare Turnstile is not loaded while public orders are disabled. The private editorial and administrative area is accessible only to authorised staff through the Tailnet. Necessary session and CSRF cookies under § 25 Abs. 2 Nr. 2 TDDDG and TOTP are used there for authentication and protection of the functions.

9. Recipients and Transfers

Recipients are the competent departments of Jüdischen Gemeinde Düsseldorf, Hetzner for hosting, and FOSSGIS e.V. for the OSM tiles requested by the browser. NRW receives aerial-image requests through our server without the visitor's IP address or X-Forwarded-For. Merely accessing our pages does not transfer data to PayPal. After the external donation link is activated, PayPal processes data under its own responsibility and may transfer it internationally in accordance with its privacy statement. No further recipients are used for analytics, advertising or social networks.

10. Storage Duration and Deletion

Published archival data and released photos are maintained for the purpose of the digital cemetery archive. Technical rate-limiting pseudonyms exist for a maximum of 24 hours, raw security logs for 14 days, and aggregated security summaries for 90 days. Off-host backups are subject to rotation consisting of the current snapshot and at most six dated snapshots; the respective backup copies are deleted upon expiry of their rotation. Statutory retention obligations, an ongoing security incident, or legal proceedings may preclude earlier deletion.

11. Rights of Data Subjects

Subject to statutory requirements, you have the right of access, rectification, erasure, restriction of processing, data portability, and objection. You may contact the controller or the data protection officer. Insofar as processing is based on consent, this may be revoked with effect for the future.

12. Right to Lodge a Complaint

You may lodge a complaint with a data protection supervisory authority, in particular with:

13. Search Engines and No Automated Decision-Making

Automated decision-making, including profiling with legal or similarly significant effects, does not take place. The public pages are released for indexing by search engines. sitemap.xml, canonical, hreflang and verification information support discoverability but do not load code from Google or Bing or establish a browser connection to those companies when a page is accessed. Search engines retrieve public pages with their own crawlers and process the data collected under their own responsibility.

14. Data Security and Status

We implement appropriate technical and organizational measures for TLS, access control, separated public and protected areas, restricted logging, HMAC pseudonymization, and verified backups.

As of: 20. August 2026