1. Controller

The controller is Marco Unverzagt, Teichstraße 22, 04600 Altenburg, Germany. Email: info@1mcreatorwall.com. Phone: 01795446087.

2. Hosting and server logs

Hosting is provided by STRATO AG. When the website is accessed, the provider may process the IP address, date and time, requested URL, referrer URL, browser, operating system, transferred data volume and technical error information in server logs.

• Purposes: delivery of the website, stability, IT security, error analysis and abuse prevention
• Legal basis: Art. 6(1)(f) GDPR
• Where the hosting provider acts as a processor, an agreement under Art. 28 GDPR is required

3. Tile reservation and editing

The information entered in the form is processed to reserve or edit a creator tile. For a personal Founding Creator invitation, the one-time invitation code is additionally linked to the tile and marked as used after redemption. Required fields are creator name, email address, country, main topic, at least one channel or website link and the legal/privacy confirmation. A tile cannot be reserved or changed without these details.

• Data processed: creator name, internal contact email, country, city/region, topic, short text, image or logo, links, tile number, status and payment information, any campaign source transmitted with the visit and, for bonus downloads, tile number, creator name, email address, download time and running download count
• Optional information: creator type, reach range, collaboration status, tags and other profile details
• Purposes: steps prior to contract, performance of the digital service, review, moderation, communication and abuse prevention
• Uploaded JPG, PNG and WebP images are re-encoded under a random filename; embedded EXIF and GPS metadata is removed where technically possible
• No additional IP address or browser fingerprint is stored in the bonus download log
• The download counter is used to provide the bonus and enforce the fixed limit of one download per creator tile
• Legal bases: Art. 6(1)(b) and (f) GDPR

4. Evidence of the legal and privacy confirmation

The required checkbox is not a blanket consent to every processing activity. It records that the rules, terms and Privacy Policy were acknowledged or accepted and that the specifically described statements concerning immediate service performance were made.

• The stored evidence includes confirmation status, time, text version, language, submission source and, for new records, a copy of the confirmed wording
• The confirmation is shown in the internal administration area, the tile editor and the administrator notification email
• No IP address is stored in the tile table for this evidence
• Legal bases: Art. 6(1)(b) and (f) GDPR; the legitimate interest is reliable documentation of the order and submission process

5. Public publication

After review and approval, the information intended for the tile is displayed publicly on the wall and, where applicable, the map. The internal email address and private edit link are not displayed publicly.

• Potentially public data: creator or project name, country, city/region, topic, short text, image or logo, optional badges and submitted public links
• Public data may be indexed by search engines, accessed by third parties and processed further when external platform links are opened
• Legal basis: Art. 6(1)(b) GDPR

6. Private status and edit link

After submission, a private link containing a random access token is generated. The database stores only a cryptographic hash of the token. Anyone who has the full link can open the related status page and submit changes, so the link must be treated like a password.

• Private pages receive no-index, no-cache and no-referrer protection headers
• The former public admin-app page is blocked for visitors and is available only to authorised administrators
• The edit link should be replaced if misuse is suspected

7. Payment processing

Depending on the selected payment method, the user is sent to the externally hosted PayPal or Stripe payment page only after a deliberate click. Stripe payments are processed through Stripe Payments Europe, Limited and, depending on the processing activity, other Stripe group entities, in particular Stripe Technology Company Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland. No Stripe payment script is loaded on the ordinary 1M Creator Wall pages. 1M Creator Wall does not store full credit or debit card details.

• To create and allocate a Stripe payment, the website processes in particular the tile number, creator email address, product name, amount, currency, payment status, Stripe Session ID and transaction references
• On the hosted payment page Stripe processes payment, device, network, account, security and fraud-prevention data under its own responsibility and privacy policy
• Stripe may use affiliated companies and service providers outside the EU or EEA and relies on the applicable transfer mechanisms
• Payment confirmation is received through a signed Stripe notification; amount, currency and tile reference are checked before the status is changed
• Legal basis for initiating, processing and allocating the payment: Art. 6(1)(b) GDPR; statutory retention duties: Art. 6(1)(c) GDPR

8. Email communication

The submitted email address is used to send reservation confirmations, the private edit link, payment and review notices, publication or rejection messages and necessary follow-up questions.

• Legal basis: Art. 6(1)(b) GDPR
• Art. 6(1)(f) GDPR may additionally apply for delivery evidence, security and abuse prevention
• The actual email or SMTP provider must be identified in the general website privacy information if it differs from the hosting provider

9. Automatic geocoding with OpenStreetMap/Nominatim

If geocoding is enabled in the administration settings and no coordinates are available, the website server sends city/region and country to the OpenStreetMap Nominatim search service to obtain approximate map coordinates. The direct browser request has been removed; in this process the service generally receives the website server IP address and the submitted location terms.

• No street address and no internal email address are sent to Nominatim
• City/region is optional; if it is omitted, a less precise country position may be used
• Purpose: positioning an approved tile on the world map
• Legal bases: Art. 6(1)(b) and (f) GDPR

10. Interactive map and external content

The interactive map loads Leaflet resources through unpkg and map tiles from CARTO only after the visitor explicitly activates the map. These services are not embedded before activation. Once activated, the providers may receive the IP address, browser and device information, time, requested map tiles and referrer or connection data.

• Legal basis: consent under Art. 6(1)(a) GDPR and the applicable rules on terminal-equipment access
• The choice is stored in the cww_external_map_consent cookie for no more than 180 days
• Consent can be withdrawn using “Disable external map”; the resources will then remain blocked until the map is activated again
• External providers may process data in third countries

11. Cookies and browser storage

The website uses storage that is technically necessary or expressly triggered by the user. In addition, aggregate event counts are recorded for the internal purchase funnel, such as page view, form opening, reservation, payment start and payment confirmation. Campaign links may provide a short source category such as TikTok, Instagram, YouTube, Facebook or creator direct message through the cww_source or utm_source URL parameter. If no parameter exists, only a platform category may be inferred from the referrer domain; the full referrer URL is not stored in the funnel. Before a tile is submitted, no IP address, browser fingerprint, analytics cookie, tile ID or persistent visitor identifier is stored. After successful submission, the source category is stored with the tile so later payment and completion events can be attributed to the same campaign. Funnel event records are automatically deleted after the configured retention period, currently no more than 180 days. Remarketing and advertising pixels are not used.

• cww_lang: selected language, cookie and local storage, up to 1 year
• cww_last_edit_url and cww_last_edit_token: temporary return to the private status link after payment, session storage and fallback cookies for no more than 2 days; Secure on HTTPS and SameSite=Lax
• cww_external_map_consent: external-map choice, no more than 180 days
• cww_wall_density: selected tile density in local storage until manually cleared
• cww_owned_tiles: locally remembered tile numbers used for highlighting until manually cleared
• The campaign source is not written to an additional analytics cookie or browser storage; it is only carried through the campaign link to the submission form
• Session storage is normally deleted when the browser tab is closed; local storage can be removed in the browser settings

12. Recipients and international transfers

Recipients may include hosting and email providers, enabled payment providers, OpenStreetMap/Nominatim and, after map activation, unpkg and CARTO. Data is otherwise disclosed only where necessary for contract performance, compliance with a legal obligation or the establishment, exercise or defence of legal claims.

• Processor agreements under Art. 28 GDPR are required where a provider acts as a processor
• Transfers to third countries require an adequacy decision or appropriate safeguards under Chapter V GDPR
• The privacy information of each enabled external provider applies in addition

13. Retention and deletion

Personal data is retained only for as long as needed for reservation, contract performance, publication, review, security, evidence or statutory retention obligations.

• Unpaid reservations follow the period configured in the administration area, 24 hours by default; after expiry they may be marked as expired and deleted
• Rejected, withdrawn or no-longer-needed submissions and images are deleted when the purpose ends unless evidence or retention duties require continued storage
• Approved tile data generally remains stored while the tile is active or the platform is operated
• Payment and tax-relevant records are retained for the applicable statutory periods
• Bonus download logs are stored with the associated tile and removed when the tile is deleted or a verified privacy deletion is completed
• Users can clear browser storage at any time

14. Data-subject rights

Subject to the statutory requirements, individuals have rights of access, rectification, erasure, restriction, data portability and objection. Consent, in particular consent to the external map, may be withdrawn at any time with future effect. A complaint may also be lodged with a competent data-protection authority. Requests should be sent to info@1mcreatorwall.com.

15. Security and updates

Technical and organisational safeguards are used, including server-side permission checks, nonces in administrative forms, hashed edit tokens, restrictive headers for private pages and separation of public from internal data. Absolute security cannot be guaranteed. This policy must be updated whenever additional functions, analytics tools, payment providers or other external services are added.