Legal information

Privacy notice

Last updated: 17 October 2026

1. Controller and contact

The controller for this website is Dirk Mullers, Lisnabrack, F91 RW10 Manorhamilton, County Leitrim, Ireland. Email: info@vestby.org. Additional correspondence address: Dirk Mullers, Entenpfad 3, 41334 Nettetal, Germany.

2. Hosting and access data

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS provides hosting under a data processing agreement.

Page requests involve processing connection and access data: IP address, requested page or file, referring page, browser type and version, operating system, device type and access time. This serves delivery, security, stability and troubleshooting. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, reliable operation.

The IONOS data processing service description, Annex 1, section 4 specifies a maximum of seven days for hosting log files. The IONOS hosting information specifies eight weeks for visitor data described there as immediately anonymised. These periods do not govern retention of contact enquiries.

3. Visitor statistics with IONOS WebAnalytics

We use IONOS WebAnalytics for statistical evaluation and technical improvement of this website. According to IONOS, the service uses no cookies. The IP address transmitted with a page request is anonymised immediately after transmission and subsequently processed without a personal reference; according to the provider, the service does not store personal visitor data.

The access data listed above is evaluated; the anonymised IP address is used to determine the location of access. Any personal data processing before anonymisation is based on Article 6(1)(f) GDPR and our legitimate interest in improving the website while minimising personal data use. Truly anonymous statistics cannot be attributed to an individual. Further information: IONOS – data processing by WebAnalytics (German).

4. Cookies, media and external links

This website sets no analytics, marketing or social-media cookies and does not use local browser storage to recognise visitors. Images, fonts and videos are served from our own webspace, not through embedded social-media players or external font services.

Instagram, Facebook and YouTube are linked, not embedded. These links establish a connection to the platform only when clicked; the platform operator’s privacy information then applies. The members area is currently a public preview without registration, user accounts or chat. There is no contact form or newsletter.

5. Contact by email or telephone

Names, contact details, messages and attachments provided to us are used to handle the enquiry and necessary follow-up, not to send unsolicited advertising. For enquiries concerning a contract with the individual, the basis is Article 6(1)(b) GDPR; otherwise it is Article 6(1)(f) GDPR and our legitimate interest in responding to project enquiries.

The mailbox is operated by IONOS. Messages are also processed on our own devices and in a local backup. Correspondence is retained only for as long as needed to handle the enquiry, retain necessary evidence or meet statutory retention obligations. It must then be deleted, including local copies and with due regard to backup copies. There is no blanket eight-week retention period for emails.

6. Names and photographs of people

Project participants are introduced by name and photograph with their agreement. Where publication relies on consent under Article 6(1)(a) GDPR, consent may be withdrawn at any time for the future using the contact above. This does not affect the lawfulness of earlier processing. Consent-based publications will be removed following withdrawal unless another legal basis applies.

7. Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction and data portability. You may withdraw consent at any time for the future. Please send requests to info@vestby.org.

Right to object: Under Article 21 GDPR, you may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation.

You may complain to a supervisory authority, particularly where you habitually live, work, or where the alleged infringement occurred. In Ireland you can contact the Data Protection Commission.

8. Changes

This notice describes the current functions. It will be updated before member accounts, donation forms, newsletters or additional external services are introduced.