1. An overview of data protection
General information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit our website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
Data recording on our website
Who is the responsible party for the recording of data on this website (i.e. the “controller”)?
The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party” in this Data Protection Declaration and in the Imprint of this website.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance, be information you enter into the contact form or the newsletter sign-up form.
Other data are recorded automatically by the IT systems of our hosting provider when you visit our website. These data comprise primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access our website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website. Other data are used to analyse your user patterns only if you have given your consent.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervisory agency. Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be statistically analysed when you visit our website. This is done with Google Analytics and only if you have consented in the cookie banner. For detailed information, please consult our Data Protection Declaration below.
2. Hosting
Cloudflare
This website is hosted by Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”). Cloudflare delivers the pages through a worldwide network of data centres (content delivery network), runs the programs that, for example, process the contact form (Cloudflare Workers), and stores the audio and PDF files offered on this website (Cloudflare R2).
When you access our website, Cloudflare processes the data your browser transmits automatically, in particular:
- IP address
- Date and time of the request
- The address (URL) accessed and the referrer URL
- The type and version of browser used
- The operating system used
For operation and troubleshooting, we evaluate logs of the requests handled by our programs (Workers Logs). These include reports your browser sends automatically when it detects an element our security rules (Content Security Policy) do not provide for; they contain the address concerned and the browser identification. These logs are deleted automatically after 7 days at the latest. This data is not merged with other data sources.
We use Cloudflare on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in a secure, fast and reliable provision of our website. Cloudflare is certified under the EU-US Data Privacy Framework (DPF), an agreement between the European Union and the US intended to ensure compliance with European data protection standards for data processing in the US. For more information on how Cloudflare handles your data, please see Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that the provider processes the personal data of our website visitors only based on our instructions and in compliance with the GDPR.
Fonts
The fonts used on this website are hosted locally. Loading them does not establish a connection to third-party servers (such as Google Fonts).
3. General information and mandatory information
Data protection
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.
Information about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this website is:
Bublitz GmbH (gemeinnützig)
Bamberger Straße 18
10779 Berlin
Germany
Phone: +49 30 83031251
E-mail: moderation@bublitz.org
The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g. names, e-mail addresses, etc.).
Storage duration
Unless a more specific storage period has been specified in this Data Protection Declaration, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.
Information on data transfer to the USA and other non-EU countries
We use services of companies based in the USA (see the individual sections of this Data Protection Declaration). When these services are active, your personal data may be transferred to the USA and processed there. The transfer is based on the provider’s certification under the EU-US Data Privacy Framework (adequacy decision of the European Commission under Art. 45 GDPR) or, where no such certification exists, on the Standard Contractual Clauses of the European Commission (Art. 46(2)(c) GDPR).
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only subject to your express consent. You can revoke any consent you have already given us at any time, your consent to cookies for example in the cookie settings. For other consents, an informal e-mail to us is sufficient. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
In the event that data are processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this Data Protection Declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements (objection pursuant to Art. 21(1) GDPR).
If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21(2) GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses. The agency responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin, Germany
https://www.datenschutz-berlin.de/
Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser starts with “https://” and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
- If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
Rejection of unsolicited e-mails
We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in our Site Notice to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.
4. Recording of data on our website
Cookies and local storage
Our website uses so-called “cookies”. Cookies are small text files that your browser stores on your device. They do not cause any damage and do not contain malware.
Without your consent we only set cookies that are technically necessary:
- Your choice in the cookie banner (viewed_cookie_policy, CookieLawInfoConsent, cli_user_preference, cookielawinfo-checkbox-…), so that we do not ask you again on every page. Storage period: 1 year.
- Your language choice (pll_language), so that the home page opens in the language you chose last. Storage period: 1 year.
These cookies are stored on the basis of Section 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR; we have a legitimate interest in respecting your settings.
Google Analytics cookies are set only if you have consented in the cookie banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); for details, see the section “Google Analytics”. You can change or revoke your consent at any time in the cookie settings. How the newsletter form uses your browser’s local storage is described in the section “Newsletter”.
You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser.
Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form (name, e-mail address, subject, message) as well as any contact information provided therein will be sent to us by e-mail and stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR).
The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.
Delivery by e-mail (Resend)
The message from the contact form is delivered to our mailbox through the e-mail delivery service Resend. The provider is Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA. Resend processes the content of your message and your e-mail address in order to deliver the e-mail. We have concluded a data processing agreement with Resend. Resend is certified under the EU-US Data Privacy Framework; the Standard Contractual Clauses of the European Commission apply in addition. We use Resend on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in the reliable delivery of your inquiry. For more information: https://resend.com/legal/privacy-policy.
Protection against abuse (Cloudflare Turnstile)
To protect the contact form against automated spam, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is loaded only when you open the contact form. Technical characteristics of your browser are then transmitted to Cloudflare, in particular your IP address, the browser identification (user agent) and technical connection characteristics, in order to check whether the input comes from a human. According to Cloudflare, these data are not used to identify individuals or to create profiles. In addition, we limit the number of submissions per IP address and minute; for this purpose, the IP address is processed only briefly.
We use Turnstile on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in protecting our contact form against abuse. Cloudflare is certified under the EU-US Data Privacy Framework. For more information: https://www.cloudflare.com/turnstile-privacy-policy/.
Request by e-mail or telephone
If you contact us by e-mail or telephone, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.
The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR).
The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
5. Analysis tools
Google Analytics
If you have consented in the cookie banner, this website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyse the behaviour patterns of website visitors, such as page views, time spent on the site, operating systems used and the origin of the user. For this purpose, Google Analytics sets cookies (_ga and _ga_4YETDYF0GQ, each with a storage period of 2 years) that allow your browser to be recognised on later visits. The information recorded is usually transferred to a Google server and stored there, including in the USA. Google Analytics does not log or store the IP addresses of users in the EU.
Without your consent, Google Analytics is not loaded and no connection to Google is established. It is used exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can revoke your consent at any time in the cookie settings.
Google is certified under the EU-US Data Privacy Framework. We have concluded a data processing agreement with Google (Google Ads Data Processing Terms). The user- and event-level data stored by Google are deleted automatically after the configured retention period, at the latest after 14 months. For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.
6. Newsletter
Newsletter data
If you would like to subscribe to the newsletter offered on this website, we will need from you an e-mail address as well as information that allow us to verify that you are the owner of the e-mail address provided and consent to the receipt of the newsletter. You may provide your first and last name voluntarily. After signing up, you will receive an e-mail asking you to confirm your subscription (double opt-in). We shall use such data exclusively for the sending of the requested information.
The processing of the information entered into the newsletter subscription form shall occur exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You may revoke the consent you have given to the archiving of data, the e-mail address and the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place to date.
The data you archive with us for the purpose of the newsletter subscription will be archived by us until you unsubscribe from the newsletter. Once you cancel your subscription to the newsletter, the data will be deleted from the distribution list. After you unsubscribe, your e-mail address may be stored by us or by SendPulse in a blacklist to prevent future mailings; these data are used only for this purpose (Art. 6(1)(f) GDPR). This shall not affect data we have been archiving for other purposes.
SendPulse
We use SendPulse for newsletter sign-up and delivery. The provider is SendPulse Inc., 220 E 23rd St #401, New York, NY 10010, USA. SendPulse stores the data entered when signing up as well as the date and time of the sign-up and the confirmation, and sends the newsletter on our behalf. With SendPulse we can also evaluate whether a newsletter was opened and which links were clicked. According to the provider, SendPulse’s servers are located in Germany and the USA.
The sign-up form on the pages “Bublitz” (German) and “About Bublitz” (English) is provided by SendPulse. When these pages are accessed, your browser loads program code and style sheets from SendPulse servers (web.webformscr.com) and queries there the country from which you are accessing the site. SendPulse’s program code also loads the program libraries jQuery from Google servers (ajax.googleapis.com; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and mobile-detect from cdnjs (Cloudflare, Inc.). These providers thereby receive your IP address and the information that you have accessed our website. In addition, the form creates an entry in your browser’s local storage recording whether and when you have used the form; it does not set cookies.
The form is integrated on the basis of Art. 6(1)(f) GDPR; we have a legitimate interest in offering sign-up to our newsletter directly on our website. The local storage entry is made on the basis of Section 25(2) No. 2 TDDDG insofar as it is necessary for the form to function. We have concluded a data processing agreement with SendPulse; the transfer of data to the USA is based on the Standard Contractual Clauses of the European Commission. Google and Cloudflare are certified under the EU-US Data Privacy Framework. For more information, please see SendPulse’s privacy policy: https://sendpulse.com/legal/pp.
7. Plug-ins and Tools
YouTube
Our website embeds videos from the YouTube platform. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
As long as you do not click on a video, no connection to YouTube is established; we only show a preview image stored on our own server. Only when you click on a video is it loaded from YouTube. We use the enhanced privacy mode for this (youtube-nocookie.com). When the video is loaded, YouTube receives your IP address and the information which of our pages you have visited. During playback, YouTube may store information on your device (e.g. in your browser’s local storage), for example to collect video statistics and to prevent fraud. If you are logged into your YouTube account, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. By clicking on a video, you expressly request it from YouTube. Google is certified under the EU-US Data Privacy Framework. For more information on how YouTube handles user data, please consult Google’s Data Privacy Policy at: https://policies.google.com/privacy?hl=en.
Vimeo
Our website embeds videos from the video portal Vimeo. The provider is Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA.
As long as you do not click on a video, no connection to Vimeo is established; we only show a preview image stored on our own server. Only when you click on a video is it loaded from Vimeo; we then ask Vimeo not to track your visit (“Do Not Track” parameter). When the video is loaded, Vimeo receives your IP address and the information which of our pages you have visited. This applies even if you are not logged into Vimeo or do not have an account with Vimeo. If you are logged into your Vimeo account, you enable Vimeo to directly allocate your browsing patterns to your personal profile. You can prevent this by logging out of your Vimeo account.
The use of Vimeo is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. By clicking on a video, you expressly request it from Vimeo. Vimeo is certified under the EU-US Data Privacy Framework. For more information on how Vimeo handles user data, please consult Vimeo’s Data Privacy Policy at: https://vimeo.com/privacy.
Links to other websites
Our pages contain links to other websites, for example to Instagram, Facebook or Spotify. You leave our website only when you follow such a link; the operator of the linked site is responsible for the data processing there.
Last updated: October 2026
