Privacy

This site is made up of static pages. It does not ask you to create an account, and we do not use a separate advertising or audience-measurement service. Below, we explain how Cloudflare processes data to deliver and protect the site.

The site does not save a language preference or search history in localStorage. The page address determines the language. Your browser controls its usual history and caching.

Appearance follows your device setting until you change it with the theme button. The site can save a light or dark preference under gd-theme in localStorage on your device. The theme code does not send this preference to a server or use cookies. Switching back to your device’s current appearance removes the saved preference; deleting gd-theme or clearing site data also restores the device setting. If browser storage is unavailable, your choice applies only to the current page.

On a phone or tablet, the site shows an “Install app” link in the menu and footer when your browser offers to install the site, and on iPhone and iPad so it can explain how to add the site to the home screen. The link never pops up or opens an install prompt by itself; your browser manages installation itself. The link’s code does not read or write cookies, localStorage or sessionStorage. Earlier versions may have left a language preference or install-dismissal timestamp in your browser. The current code neither reads nor removes those values. You can remove them by clearing site data.

Search downloads a file of titles, summaries and German terms (a JSON index), then looks for matches on your device. Typing does not send a search request. The query is kept in the page URL (?q=) for sharing and language switching. Opening, reloading or submitting that URL can send the query to the host and save it in browser history. Avoid putting sensitive personal details in search.

Links to offices and laws take you to other sites. Those sites set their own cookies and keep their own logs. We do not receive a copy of what you do there.

Who is responsible

Amr Makram is the controller responsible for this website and its contact correspondence. You can contact him at the following postal or email address.

Amr Makram
c/o COCENTER
Koppoldstr. 1
86551 Aichach
Germany

Privacy contact: contact@germanydecoded.com

Website delivery and security

Cloudflare, Inc. delivers this site through Workers Static Assets and its network. To serve pages and protect the service, Cloudflare processes connection and request data, including IP addresses, requested URLs, request times and browser information. URLs can include search queries. For this personal-data processing, our legitimate interests are reliable delivery and protection against misuse (Article 6(1)(f) GDPR).

Cloudflare Precursor and Bot Fight Mode are disabled. Our response configuration includes the no-transform directive, requesting unmodified pages. Cloudflare documents this as preventing automatic JavaScript Detections injection. Conditional security challenges can still run code and use cookies or browser storage. A cf_clearance cookie can contain pass or fail results.

Browser checks on 25 October 2026, before this response safeguard, observed automatic JavaScript Detections and a cf_clearance cookie with an expiry about one year after the visit. This is a dated observation; expiry can vary with the browser, security response and configuration.

Cloudflare’s Client-side security monitoring is enabled. It adds a report-only Content Security Policy (CSP) header to a sample of page responses, prompting browsers to send Cloudflare reports about detected scripts and their network connections. This monitoring header does not itself block resources.

Cloudflare retains data according to the service, its operational and security purposes, and legal requirements. Its privacy policy describes the retention criteria; there is no single deletion period for every kind of network data. We do not operate an additional application database of page visits.

Email contact

If you email us, we process your address, name if supplied, message, attachments and delivery details to handle your request and reply. Providing these details is voluntary, but we need a return address to answer. Our legitimate interest is handling correspondence about this guide (Article 6(1)(f) GDPR). Please do not send identity documents, medical records or other sensitive case files.

Incoming messages pass through Cloudflare Email Routing to a dedicated Google Gmail inbox. We read and reply using Thunderbird; outgoing mail passes through SMTP2GO (Sand Dune Mail Ltd). These services process message content and delivery metadata. Copies of correspondence are stored in Gmail and may also be stored locally in Thunderbird. Gmail is the consumer service, not Google Workspace.

We keep correspondence while needed to answer and follow up on the request, then delete it unless a legal retention obligation or the establishment, exercise or defence of legal claims requires longer storage. Provider backups and security records have separate retention rules. Google explains that deletion and backup expiry can take additional time. SMTP2GO states that it retains email headers for 35 days and may retain a small sample of messages for 35 days for compliance checks; the shorter reporting window on its free plan is not a deletion guarantee.

Providers and international processing

Cloudflare, Google and SMTP2GO use international infrastructure and service providers. Processing can take place outside the European Economic Area, including in the United States. Using an EU SMTP endpoint does not mean the whole email route stays in the EU. The provider notices below explain their transfer safeguards, including applicable adequacy frameworks and standard contractual clauses. Contact us if you need further information about the safeguards relevant to your data.

Your rights

Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Contact us using the details above. You may also complain to a data protection supervisory authority under Article 77 GDPR, particularly where you live or work or where you consider an infringement occurred. In Bavaria, the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA) supervises non-public bodies under Article 18 of the Bavarian Data Protection Act. We do not make automated decisions with legal or similarly significant effects about you.