Skip to main content

Privacy Statement

This is a translation for convenience. The German version is legally binding.

This statement explains which personal data is processed when you visit qupil.de, for what purpose and on what legal basis. In short: this website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers. Personal data is only processed in the technically necessary server logs and when you contact me yourself.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Felix Hammer
Friesenstraße 11
49809 Lingen
Germany
Phone: +49 591 6107161
Email: ed.lipuq@remmahf

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Hosting

This website is hosted by hostNET Medien GmbH, Osterdeich 107, 28205 Bremen, Germany. When you visit the website, the data listed below is processed on the hosting provider’s servers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider, ensuring that the data is processed only on my instructions and in compliance with the GDPR.

The legal basis is Art. 6 (1) (f) GDPR. My legitimate interest lies in providing the website securely, reliably and quickly.

3. Server log files

Each time a page is accessed, the server automatically stores information transmitted by your browser:

  • IP address of the requesting device
  • date and time of access
  • page or file requested and amount of data transferred
  • HTTP status code (e.g. whether the request was successful)
  • website from which you came (referrer)
  • browser type and version, operating system

This data is required solely to deliver the website, to ensure its stability and security and to detect attacks or errors. It is not combined with other data and not used for profiling. The legal basis is Art. 6 (1) (f) GDPR. The logs are deleted as soon as they are no longer required for these purposes; data needed to investigate a security incident is kept until the incident has been resolved.

4. No cookies, no analytics, no external content

The public pages of qupil.de set no cookies and store no other information on your device. No analytics, tracking or advertising services are used. Fonts, scripts and images are loaded exclusively from this website’s own server; in particular, no Google Fonts or other third-party services are embedded. Consent pursuant to Section 25 TDDDG is therefore not required.

Only in the password-protected administration area, which is accessible to the operator alone, is a technically necessary session cookie set after login (Section 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). Visitors to the website are not affected.

5. Encrypted transmission

For security reasons, this website uses TLS encryption (recognisable by “https://” and the padlock symbol in your browser). Data you transmit to this website cannot be read by third parties.

6. Contact by email or phone

If you contact me by email or phone, I process the information you provide (e.g. name, email address, phone number and the content of your message) in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the software Qupil or a collaboration, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Your data is deleted once the enquiry has been dealt with, unless statutory retention obligations apply. It is not passed on to third parties.

7. Downloads and links to GitHub

Qupil’s program files as well as the source code and ways to contribute are provided via the GitHub platform. As long as you only visit qupil.de, no data is transmitted to GitHub. Only when you click a download link or a link to GitHub does your browser retrieve the file or page directly from GitHub. GitHub then processes in particular your IP address, date and time, and technical information about your browser.

The provider is GitHub, Inc., 88 Colin P. Kelly Jr. St., San Francisco, CA 94107, USA. Data may be transferred to the USA. GitHub bases such transfers on the European Commission’s standard contractual clauses and is certified under the EU-U.S. Data Privacy Framework, for which an adequacy decision of the European Commission exists. Distribution via GitHub is based on Art. 6 (1) (f) GDPR; my legitimate interest lies in the reliable, free distribution of the open-source software. For more information, see GitHub’s privacy statement.

8. RSS feed

You can subscribe to the news as an RSS feed. Your feed reader retrieves the feed like a normal page; the information on server log files applies. No registration is required and no further data is collected.

9. Note on the software Qupil

This statement covers the website qupil.de. The software Qupil itself does not transmit any data to the operator of this website. The data you enter in Qupil (e.g. about students or lessons) stays on your devices. If you use the optional sync, it is transferred directly between your devices on the local network or encrypted via your own Nextcloud. You are responsible for the processing of this data yourself. If you obtain Qupil from an app store, the privacy terms of the respective store operator also apply.

10. Your rights

You have the following rights with regard to personal data concerning you:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object at any time on grounds relating to your particular situation. The data will then no longer be processed unless there are compelling legitimate grounds for the processing or it serves the establishment, exercise or defence of legal claims.

An informal message to the address above is sufficient to exercise your rights.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR (Art. 77 GDPR). The authority responsible for the controller is:

Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover, Germany
www.lfd.niedersachsen.de

12. Further information

You are not obliged to provide personal data; however, the website cannot be displayed without the technically necessary connection data. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

I will update this privacy statement whenever the website or the legal situation changes. The version published here applies.

Last updated: October 2026