Last updated: 28 September 2026
We are not legally required to appoint a data protection officer. For all privacy questions, please use the address above.
Our website, our newsletter software and our object storage are operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner processes data on our behalf as a processor under Art. 28 GDPR. A data processing agreement is in place. All data are stored in Germany.
When you load our website, the server processes technical connection data: your IP address, the date and time of the request, the requested page, the referrer URL, and your browser type and operating system. We need these data to deliver the site and to keep it secure. The legal basis is our legitimate interest in a secure, functioning website pursuant to Art. 6 (1)(f) GDPR. Server log files are deleted after 14 days at the latest, unless a specific security incident requires longer retention.
Our website does not use tracking cookies, analytics tools or advertising services.
This website loads the font “Futura PT Condensed” from Adobe Fonts, a service of Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When a page loads, your browser connects to Adobe’s servers, which receive your IP address. According to Adobe, no cookies are set and no data are used for advertising purposes. Data may also be transferred to Adobe Inc. in the United States. Adobe Inc. is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a consistent visual presentation of our content pursuant to Art. 6 (1)(f) GDPR. For more information, see Adobe’s privacy policy: adobe.com/privacy/policy.html
We use Plausible Analytics Community Edition, an open-source web analytics application that we host ourselves on servers provided by Hetzner Online GmbH in Germany. The analytics data are processed within our own infrastructure and are not transmitted to Plausible Analytics merely through our use of the software.
We use Plausible to understand overall trends in the use of our website, such as which pages are visited, how visitors arrive at the website and which browsers, operating systems and device types are used.
Plausible does not use cookies, browser storage or other persistent identifiers and does not track visitors across websites, devices or days.
When a request is received, the visitor’s IP address and User-Agent are processed temporarily. Plausible uses these data together with the website domain and a salt that changes every 24 hours to generate a daily visitor identifier. The raw IP address and raw User-Agent are not stored in the analytics database. The daily identifier cannot be used to recognise the same visitor on another day.
Plausible stores individual event and session records from which aggregated website statistics are generated. These records may include information such as the page visited, referral and campaign information, the time of the event, browser and operating-system information, device information and an approximate geographic location derived from the IP address.
We use these statistics solely to understand and improve the use, content and technical performance of Europe Magazine. We do not use Plausible for advertising, cross-site tracking or the creation of persistent visitor profiles.
The legal basis for this processing is our legitimate interest in obtaining privacy-friendly statistical information about the use of our website and improving our service pursuant to Art 6 (1)(f) GDPR.
We retain the event and session data collected through Plausible Analytics for 24 months. Data older than 24 months are deleted from the active analytics database.
We create backups of the databases used for Plausible Analytics and Listmonk. These backups are stored on servers provided by Hetzner Online GmbH and are retained for up to three months before being deleted or overwritten as part of the regular backup cycle.
As a result, data that have been deleted from the active Plausible or Listmonk databases may remain contained in encrypted or access-restricted backups for up to three additional months. Backups are maintained for disaster recovery and system restoration purposes and are not used for ordinary analytics or newsletter processing.
Where a backup is restored, deletion requests and other relevant changes made after the date of the backup are taken into account again where necessary.
When you subscribe, we process the email address you enter and, if you provide it, your name. We use the double opt-in procedure: after signing up you receive a confirmation email, and your address is only added to the list once you click the confirmation link.
To document your consent we store the time of sign-up, the time of confirmation and your IP address. The legal basis for sending the newsletter is your consent pursuant to Art. 6 (1)(a) GDPR. The legal basis for documenting your consent is our legitimate interest in being able to prove it pursuant to Art. 6 (1)(f) GDPR.
You can withdraw your consent at any time with effect for the future. Every newsletter contains a one-click unsubscribe link, or you can email us.
We measure aggregate open and click rates for our newsletters to understand how they perform and to improve them. This analysis is not linked to individual subscribers. The legal basis is our legitimate interest in evaluating and improving our newsletter pursuant to Art. 6 (1)(f) GDPR.
The newsletter is managed with Listmonk, an open-source application that we host ourselves on our own server (see section 2). Subscriber data are stored in our own database and are not passed to the developers of the software.
Outgoing emails are sent via Amazon Simple Email Service (Amazon SES), provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Emails are processed in the AWS region eu-central-1 (Frankfurt, Germany). For delivery, your email address and the message content are transmitted to Amazon.
Amazon acts as our processor under Art. 28 GDPR on the basis of the AWS GDPR Data Processing Addendum. We cannot rule out that Amazon Web Services, Inc. in the United States may access data in individual cases. Amazon Web Services, Inc. is certified under the EU-US Data Privacy Framework, and the transfer is additionally safeguarded by the EU Standard Contractual Clauses.
If an email cannot be delivered or a recipient marks it as spam, Amazon SES informs our newsletter software automatically. We then stop sending to that address. The legal basis is our legitimate interest in reliable delivery and in not contacting people who do not wish to hear from us pursuant to Art. 6 (1)(f) GDPR.
If you contact us by email or through our contact form, we process the data you provide, such as your name, email address and message, in order to handle your enquiry. The legal basis is our legitimate interest in answering enquiries pursuant to Art. 6 (1)(f) GDPR, or Art. 6 (1)(b) GDPR if your enquiry concerns a contract. We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations apply.
We run accounts on Instagram, Threads, Bluesky and LinkedIn. When you visit our profiles or interact with our posts, the respective platform processes your data under its own privacy policy. We have no influence over this processing.
We process messages, comments and mentions you send us on these platforms in order to respond to them. The legal basis is our legitimate interest in communicating with our readers pursuant to Art. 6 (1)(f) GDPR.
Instagram and Threads are operated by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Privacy policy: privacycenter.instagram.com/policy. Meta provides us with anonymised usage statistics (Insights). For this processing, we and Meta are joint controllers pursuant to Art. 26 GDPR. Meta has assumed primary responsibility, including for responding to data subject requests: facebook.com/legal/terms/page_controller_addendum
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Privacy policy: linkedin.com/legal/privacy-policy. LinkedIn provides us with anonymised statistics about visits to our page. For this processing, we and LinkedIn are joint controllers pursuant to Art. 26 GDPR. LinkedIn has assumed primary responsibility: legal.linkedin.com/pages-joint-controller-addendum
Bluesky is operated by Bluesky Social, PBC, based in the United States. Privacy policy: bsky.social/about/support/privacy-policy. Bluesky is built on an open, decentralised protocol. Posts, replies and likes on Bluesky are public and can be stored and displayed by other services on the network. We do not receive usage statistics from Bluesky.
Where we process personal data for journalistic purposes, special rules apply under Art. 85 GDPR in conjunction with the German Interstate Media Treaty and applicable German press law.
We store your newsletter data for as long as you remain subscribed. After you unsubscribe, your name and all other subscriber data are deleted. We keep your email address on a blocklist so that you do not receive any further emails from us, even if your address is entered again by mistake. We keep the record of your consent for up to three years after you unsubscribe in order to be able to prove that it was given. The legal basis for both is Art. 6 (1)(f) GDPR.
Right to object: Where we process your data on the basis of our legitimate interests, you may object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds.
For any request regarding your data, email team@europemagazine.eu.
We use appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website and all forms are transmitted exclusively over encrypted TLS connections. Access to our servers and the subscriber database is restricted to the people who need it to run Europe Magazine. Please note that emails you send to us are not end-to-end encrypted.
We update this policy when our services or the legal situation change. The current version is always available on this page.