This is a courtesy translation. The legally binding version is the German one.

Privacy Policy

Last updated: 11 November 2026

This notice informs you, pursuant to Art. 13 GDPR, which data is processed when you visit this website (Berezka Apps). The apps themselves have their own privacy policies (section 9).

1. Controller

Responsible for data processing on this website: Alexey Berezka, M 7, 13, 68161 Mannheim, Germany. E-mail: [email protected].

2. Hosting

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a Hetzner data centre in Helsinki (Finland, EU). A data processing agreement (Art. 28 GDPR) is in place with Hetzner. The legal basis is my legitimate interest in the secure and reliable operation of the website (Art. 6 para. 1 lit. f GDPR).

3. Cloudflare (delivery, protection and DNS)

All requests to this website pass through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare acts as a reverse proxy and content delivery network: it receives your request, encrypts the connection (TLS), fends off attacks and automated mass requests, manages the domain's DNS records and passes the request on to my server. For every request Cloudflare processes your IP address, the requested address (URL), date and time, the HTTP headers sent by your browser (including the browser identification and the previously visited page, if your browser sends it) and technical connection data (TLS and HTTP version).

The purpose is the secure, fast and stable delivery of the website and the defence against attacks; the legal basis is my legitimate interest in this (Art. 6 para. 1 lit. f GDPR). Cloudflare is my processor (Art. 28 GDPR) under the Cloudflare Data Processing Addendum. Cloudflare operates a worldwide network of data centres, so processing of your data in the USA cannot be ruled out. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. The transfer is based on the European Commission's adequacy decision for this framework (Art. 45 GDPR, Commission Implementing Decision (EU) 2023/1795 of 10 July 2023). Should that decision fall away, the EU Commission's standard contractual clauses agreed in the Data Processing Addendum apply (Art. 46 para. 2 lit. c GDPR).

Cloudflare also replaces e-mail addresses in the page source with an obfuscated form so that spam programs cannot harvest them (Email Address Obfuscation). To decode them, your browser loads a small script from this domain itself; no third-party server is contacted for this.

On a normal page load Cloudflare sets no cookies. If Cloudflare classifies a request as suspicious, for example during an attack on the website, it may set a technically necessary security cookie (for example __cf_bm or cf_clearance) to tell your browser apart from automated requests. This cookie is strictly necessary for the secure operation of the website and does not require consent (§ 25 para. 2 no. 2 TDDDG, the German Telecommunications Digital Services Data Protection Act).

4. Server log files

For every request my server stores: IP address, date and time, requested address, status code, amount of data transferred, previously visited page (referrer) and browser identification (user agent). The logs serve secure operation, troubleshooting and the defence against attacks (Art. 6 para. 1 lit. f GDPR). They are rotated daily and deleted after 14 days.

5. Contact form and e-mail

Contact form. When you write to me via the contact form, I process your name, your e-mail address and your message in order to answer your enquiry. Files cannot be uploaded through the form. The legal basis is Art. 6 para. 1 lit. b GDPR where your enquiry concerns a contract with me or steps prior to entering into one, otherwise my legitimate interest in answering your enquiry (Art. 6 para. 1 lit. f GDPR). Providing the data is voluntary, but without a name and an e-mail address I cannot reply.

What is stored. The form hands your message to my contact service on the Hetzner server (section 2), which I also run for my website berezka.me. There, every message is stored in a database together with technical data: IP address and country of origin (both provided by Cloudflare), browser identification, originating page (origin/referrer), timestamp and delivery status. I need this data to detect spam and abuse, to resolve delivery problems and, in case of a dispute, to prove what was received and when (Art. 6 para. 1 lit. f GDPR). The technical data is removed automatically after 90 days, the rest of the record is deleted after 365 days. Against automated submissions the form uses a hidden field (honeypot), a minimum time before submitting and a limit on requests per IP address.

Delivery to the mailbox. The contact service hands the message with your name, your e-mail address, your message and a note saying which of my websites it came from over an encrypted connection to a small program at Cloudflare (Cloudflare Workers, provider Cloudflare, Inc., see section 3). It sends it as an e-mail to my mailbox, with your e-mail address as the reply-to address. IP address, country of origin and browser identification are not part of the e-mail; they remain only in the contact service's database. My mailbox is hosted by Google (Gmail). The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you e-mail me directly at [email protected] or another address at berezka.me, Cloudflare receives the e-mail and forwards it to the same Gmail mailbox (Cloudflare Email Routing); in doing so Cloudflare processes the sender, recipient, content and technical data of the e-mail in order to deliver it and to fend off spam. For Cloudflare, the data processing agreement and the basis for the transfer to the USA are as described in section 3. Google may also process the e-mails outside the EEA, in particular through Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; the transfer is based on the European Commission's adequacy decision for this framework (Art. 45 GDPR, Implementing Decision (EU) 2023/1795). The legal basis for forwarding and for the mailbox is the same as for your enquiry (Art. 6 para. 1 lit. b or f GDPR). I keep e-mails for as long as I need them to deal with your enquiry; after that I delete them unless a statutory retention obligation applies (§ 147 AO, German Fiscal Code).

6. Visit counting with Umami

I count page views with the open-source software Umami, which I run myself on my server at Hetzner (umami.berezka.me, section 2); like every page request, the transmission passes through Cloudflare (section 3). Umami sets no cookies, writes nothing to your browser's storage and does not track you across other websites. The evaluation takes place entirely on my own server; I do not pass the statistics on and do not use them for advertising.

A short script of my own sends, for each page view, only the address and the title of the page and, if your browser provides it, the previously visited page (if that page belongs to this website itself, it is not sent). Beyond that, the only thing counted is that a link to the App Store or the e-mail address was clicked or that the contact form was sent, without any of your entries. This script does not read screen size, language setting or other device properties.

As with every request, my server receives your IP address and your browser identification. From these Umami derives the approximate country of origin as well as browser, operating system and device type, and forms a pseudonymous visitor identifier (a hash of IP address, browser identification, website and a secret addition that changes every calendar month) in order to count repeated views within one month as one visitor. The IP address itself is not stored, visits are not linked beyond the calendar month, and no lasting profile of you is created. Recognised search engines and other automated programs are not counted. I keep the statistics for as long as I need them for the evaluation. The legal basis is my legitimate interest in learning which pages are read, how often links to the App Store are clicked and how often enquiries are made (Art. 6 para. 1 lit. f GDPR). You may object to this processing at any time (section 10).

7. No cookies, no local storage

This website itself sets no cookies (for possible Cloudflare security cookies see section 3) and puts nothing into your browser's local storage (localStorage). Which language version you see is determined by the address of the page; nothing is stored for this. If you open this website without a language in the address, my server forwards you to the matching version based on the language setting your browser sends with every request; nothing is stored for this either.

8. External content and links to the App Store

No content from other providers (fonts, scripts, images) is loaded from third-party servers when you visit this website; all files come from this website itself. Buttons and links to Apple's App Store (apps.apple.com) are plain links: only when you click them do you leave this website, and only then does Apple receive data from you.

9. Privacy policies of the apps

This notice covers the website only. Which data an app processes is described in the privacy policy of that app: Einbürgerungstest: Bestehen.

10. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw a consent at any time with effect for the future (Art. 7 para. 3 GDPR). To do so, write to [email protected].

Right to object (Art. 21 GDPR). You may object at any time, on grounds relating to your particular situation, to processing that I base on my legitimate interest (Art. 6 para. 1 lit. f GDPR). I will then no longer process your data unless I can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular with the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Heilbronner Straße 35, 70191 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.