NEUOFFENBARUNGInformation about how personal data is handled on neuoffenbarung.online. German source version dated 8 November 2026.
1. Controller and contact details
The controller for this website is
Hanno Herbst
Panoramaweg 1
69429 Waldbrunn
Germany
Email: info@neuoffenbarung.online.
This notice applies to https://neuoffenbarung.online, including its library, thematic collections and audiobook services. Other websites you visit independently are governed by their own privacy notices.
2. Website delivery and hosting
To retrieve a page or audio file, your browser sends the relevant web server information including your IP address, the requested address, the time of access and technical information about your browser and operating system. This processing enables delivery of the content and supports technical security and troubleshooting. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure and reliable operation of the website.
The hosting provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS receives connection data needed for operation and processes hosting data as a technical service provider. Processing on behalf of the controller is subject to Article 28 GDPR.
According to IONOS, its web hosting evaluation includes the previously visited page, the pages or files requested, browser and device type, operating system and time of access. The IP address is anonymised when collected for these evaluations. IONOS states that visit data is retained for eight weeks. Before anonymisation, the full IP address is technically required for transmission.
IONOS also provides WebAnalytics as standard. These evaluations support statistics and technical optimisation and may be based on server logs. According to IONOS, WebAnalytics works without cookies and processes IP addresses after immediately anonymising them. The legal basis for any necessary processing of personal data is Article 6(1)(f) GDPR. The legitimate interest is secure, stable operation suited to the needs of the website. Further information: IONOS Web Hosting and IONOS WebAnalytics.
3. Audiobooks and audio files
Audiobooks are played through your browser's audio player. The embedded MP3 files currently come from neuoffenbarung.online. When you open an audiobook page, your browser may already request metadata and parts of the audio file from that server. Further requests occur when you play audio or change chapters. The server receives technically necessary connection data, especially the IP address and the file requested.
The recordings are made available as part of the audiobook service under Article 6(1)(f) GDPR. You do not need an account with an external streaming service. The main domain is also hosted by IONOS. The hosting information above applies to technical access data.
4. Search and contacting us
When you use the internal search, your query is sent to the web server as part of the requested URL. It may therefore appear in server logs and your browser history. The purpose is to return the requested search results. The legal basis is Article 6(1)(f) GDPR.
When you contact us by email, we process your email address, message and any other details you provide to respond to your enquiry. The legal basis is Article 6(1)(f) GDPR, or Article 6(1)(b) GDPR for contract-related enquiries. We delete the information when your enquiry has been fully dealt with, unless retention is required by law or for necessary evidential purposes.
The contact address info@neuoffenbarung.online is hosted by IONOS. Incoming messages are forwarded to a Gmail mailbox for handling. Your message, including the sender address and any attachments, is therefore processed by IONOS and Google. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for users in the European Economic Area. Processing by affiliated companies, including in the United States, is possible. According to Google's published information, Google LLC relies on its certification under the EU–US Data Privacy Framework for covered transfers. Where no adequacy decision applies, Google states that it uses standard contractual clauses. For details and information on obtaining a copy of the safeguards, see Google’s data transfer frameworks. For information on processing, retention periods and Google's transfer mechanisms, see Google’s Privacy Policy. Using the email address is voluntary. You can also contact us by post.
Contact form
We use Contact Form 7 on our web server. Your email address, subject and message are required. Your name is optional. To handle your enquiry, we send the information over an encrypted SMTP connection to our contact mailbox hosted by IONOS. It is then forwarded to a Gmail mailbox. We use WP Mail SMTP on our web server to send these messages. The information above about the purpose, legal basis, email providers and retention applies.
There is no additional WordPress message database configured to store message contents. To protect locally against automated or excessively frequent submissions, we use a hidden check field and a time-limited counter. For this counter, a server-side key and the relevant ten-minute time window are used to convert the IP address into a pseudonymous identifier. The full IP address and message contents are not stored in the counter. It is used solely to prevent abuse. The legal basis is Article 6(1)(f) GDPR. The legitimate interest is protecting the form and email delivery. Further information: Contact Form 7 plugin privacy notices.
Spam protection with Cloudflare Turnstile
I use Cloudflare Turnstile in Managed mode to protect the contact form against automated submissions and abuse. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Opening the form establishes a connection to Cloudflare, which processes technical signals including the IP address, browser information (user agent), encrypted connection characteristics (TLS fingerprint), and the site key and associated origin page. The check produces a short-lived verification token that our server asks Cloudflare to verify. According to Cloudflare, Turnstile does not collect or transmit the message or other content entered into the form.
The legal basis for processing to prevent abuse is Article 6(1)(f) GDPR. My legitimate interest is to protect the form and email delivery from spam and automated overload. Cloudflare processes the signals needed for this protection as a processor. It states that it also processes signals under its own responsibility to improve bot detection. You can contact us by email or post instead.
Data may be processed in the United States. Cloudflare cites its certification under the EU–US Data Privacy Framework for the relevant transfers and standard contractual clauses for other covered international transfers or as an alternative legal basis. For details on recipients, transfer mechanisms, retention and privacy rights, see Cloudflare’s Privacy Policy and the Turnstile Privacy Addendum (18 June 2025). The optional pre-clearance feature is disabled.
5. Cookies and privacy settings
Privacy settings with Real Cookie Banner
We use Real Cookie Banner by devowl.io to manage your privacy choices. The plugin runs on our web server. Your choice and its record are stored in our WordPress database and are not transmitted to the plugin developer.
The record includes a random identifier, your choice, the date and time, the page visited, the applicable banner configuration, and technical information and interactions within the dialog to make the choice traceable. Additional storage of your IP address in the consent record is disabled.
The real_cookie_banner* cookie remembers your choice for up to 180 days. Temporary entries in your browser's local storage may safeguard transmission to our server. A test cookie is removed after its function has been checked. Recorded choices are deleted automatically after 36 months.
Necessary storage of the privacy choice is based on section 25(2)(2) TDDDG. Management is based on Article 6(1)(f) GDPR, reflecting the legitimate interest in reliable privacy settings. Recording consent when legally required is based on Article 6(1)(c) in conjunction with Article 7(1) GDPR. You can use “Privacy settings” to view your choice and its record again and to withdraw any consent you have given.
Further technical information: devowl.io’s information about data processing by Real Cookie Banner.
WordPress sign-in
WordPress uses technically necessary cookies at sign-in to manage sessions and store selected preferences. A temporary test cookie is removed when the browser closes. Sign-in cookies generally last two days or up to two weeks if you select “Remember me”. Preferences cookies may last up to one year. Editing a post may store a cookie containing its identifier for one day.
Where access to your device is strictly necessary for a service you have expressly requested, it is based on section 25(2)(2) TDDDG. Personal data is processed for secure sign-in under Article 6(1)(f) GDPR. Non-essential storage or access requires consent under section 25(1) TDDDG where the law so provides.
WordPress sign-in protection
We use Limit Login Attempts Reloaded in local mode to limit repeated unsuccessful sign-in attempts. The data processed includes the IP address, the number and timing of failed attempts, and the username entered where applicable. After four failed attempts, the IP address is blocked for 20 minutes. After four lockouts within 24 hours, it is blocked for 24 hours. The attempt counters reset after 24 hours. Processing takes place on our web server or in our WordPress database. The plugin's cloud connection is disabled. Further information: data handling by Limit Login Attempts Reloaded.
We use WP 2FA by Melapress for two-factor authentication of authorised users. Authentication data needed for the authenticator app and recovery codes is processed to protect the user account. The purpose is to prevent unauthorised access. The legal basis is set out above under secure WordPress sign-in. Public use of the library does not require two-factor authentication. Further information: WP 2FA.
6. Comments, accounts and media
Where comments are open on a post, WordPress processes the comment, the name and email address supplied, and, where applicable, a website address, IP address and browser information. The name, comment and any website supplied may be published. The email address is not displayed in the comment. Processing enables discussion and prevents abuse under Article 6(1)(f) GDPR. If you choose to save your comment details in your browser, the corresponding cookies may last up to one year. This choice is based on your consent.
Published comments and necessary metadata may be retained for the duration of the discussion or publication. You can request deletion or anonymisation under the conditions provided by law. For registered accounts, profile data necessary to administer and use the account is stored. When a password is reset, WordPress may include the requesting IP address in the reset email.
Images uploaded and made public may contain accessible metadata, including location information. Such information should be removed before uploading.
7. External content and services
External display of Gravatar profile pictures is disabled on this website. Audio uses MP3 files embedded directly from the main domain as described in section 3.
Ordinary links to other websites generally do not send visit data to the linked site simply because this website is displayed. A connection to the other provider is established when you follow a link. That provider processes data under its own responsibility and its privacy information applies.
8. Recipients and retention
Service providers responsible for hosting, email operation and technical administration, as well as authorised administrators, may have access to data as necessary. Data is disclosed only where there is a legal basis. Personal data is generally retained only as long as necessary for the relevant purpose. Statutory retention requirements and the need to preserve or defend legal claims may justify longer retention.
9. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. Please use the email address given above.
You may also lodge a complaint with a data protection supervisory authority, particularly in the Member State of your residence, place of work or the alleged infringement. The applicable provisions are set out in the General Data Protection Regulation.
10. Changes to this notice
This notice is updated when functions, services or applicable legal requirements change.