KI11IX PLUGIN-WERKSTATT

Privacy

1. Data controller and contact details

The data controller responsible for the processing of personal data on this website is:

Thomas Schulze

Zwickauer Str. 10

04639 Gößnitz

Email: support@plugin-werkstatt.net

If you have any questions regarding the processing of your data or wish to exercise your rights, please contact us at this address.

2. Scope of this service

The website provides free plugin downloads, descriptions, locally stored images and videos, as well as a preview of upcoming projects. Visitors may voluntarily submit comments, reviews and bug reports. A visitor or customer account is not required. In its current form, the website contains no advertising, audience analytics, payment processing, externally embedded videos or externally loaded fonts.

3. Hosting and Technical Provision

Hosting provider:

ALL‑INKL.COM – Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

Server location: Germany / Dresden

When the website is accessed, the server processes technically necessary connection data, in particular the IP address, time of access, requested URL, volume of data transferred, HTTP status and, where applicable, referrer, browser and operating system details. This serves to ensure the delivery, stability and security of the website. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in the secure and functional operation of this service.

Server log files are deleted or anonymised after 7 days, unless a longer retention period is required to investigate a security incident. The hosting provider processes data under a data processing agreement, provided the legal requirements are met.

4. Download and comment counters

Below each post, the total number of regular download requests initiated and the number of comments posted are displayed. The download counter only stores a total count per file. It does not create any personal visitor profiles and does not record whether a file has been fully saved or installed. The application does not set any additional cookies for these counters.

5. Sessions and language settings

A technical session cookie called ‘werkstatt_session’ groups related page views into a single session. It helps to protect forms from unauthorised third-party requests, ensures secure admin access, facilitates form submissions and maintains the explicitly selected language. The cookie does not contain any comment texts or API keys. It is set as a session cookie; the actual lifespan may also depend on the browser’s session restoration mechanism. When using HTTPS, it is transmitted in encrypted form only; JavaScript has no access to it.

The legal basis for processing is Article 6(1)(f) of the GDPR for the secure provision of the requested functions. Insofar as storage or access is strictly necessary for an expressly requested service, this is carried out in accordance with Section 25(2)(2) of the TDDDG. You can delete or block cookies in your browser; however, this may restrict the use of forms, language selection and login.

6. Comments and star ratings

When you submit a voluntary comment, we process the chosen display name, the text, the optional stars, the time and, where applicable, a reply from the garage. Please use a display name of your choice and do not publish other people’s personal data.

Processing and publication are carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. Comments are moderated before publication. Approved display names, text, timestamps, star ratings and replies are publicly visible. Only approved star ratings are included in the displayed rating. Actual use or a purchase is not verified.

The content remains stored in principle for as long as it is published in the context of the relevant post and consent is not withdrawn. You may withdraw your consent at any time with future effect via the contact address given above and request deletion. The lawfulness of the processing up to the point of withdrawal remains unaffected. Where necessary, we may request appropriate evidence for the purpose of verification. Unpublished comments and reviews will be deleted no later than 90 days after receipt, provided there is no specific legal reason for further storage.

7. Bug reports

To process a bug report, the following data is processed: plugin reference, title, error description, server/plugin version, display name, time, processing status and, where applicable, a voluntary contact email address. The email address is visible only to the administration. No automatic email notifications are sent for bug reports.

Processing for the purposes of voluntary handling and publication is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. New reports are not made public until they are approved. Reports marked as confidential are not displayed publicly. For approved, non-confidential reports, the content and replies provided are public. Please do not include passwords, access keys, complete logs containing IP addresses or any other confidential data in public texts.

You may withdraw your consent at any time with future effect. Closed confidential bug reports and the associated contact email addresses will be deleted no later than 90 days after the report has been resolved. In the case of public bug reports, contact email addresses provided will also be removed no later than 90 days after processing is complete, provided they are no longer required for necessary follow-up enquiries. Statutory retention obligations remain unaffected. Public reports may remain in place for the purpose of documenting the bug fix, provided that the relevant consent has been given and there is a factual basis for doing so. Statutory retention requirements and legitimate interests in defending against specific legal claims remain reserved to the extent applicable.

8. Protection against misuse and admin access

To protect against automated form submissions and login attempts, the application temporarily processes a value derived cryptographically from the connection IP address and the timestamp using a secret key. The application does not store any raw IP addresses for this purpose. The values are not used for advertising or profiling. Entries older than 24 hours are cleared the next time the limitation function is invoked. Independent technical server logs maintained by the hosting provider remain unaffected by this.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest is the protection of the website, the accounts and the published content. The administrator account stores a username and a secure password hash, not the plaintext password. Unused administrator sessions expire after one hour.

9. Contact via email or contact form

If you contact us by email or via the contact form, we process your email address and the information provided to deal with your enquiry. When using the contact form, your name as provided, the subject line, the time of receipt and the processing status are also stored.

Enquiries are stored in the secure admin area and are not published. In addition, the website attempts to send an email notification containing the details of the enquiry to support@plugin-werkstatt.net. The website and support mailbox are hosted by ALL‑INKL.COM.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in processing and responding to incoming enquiries. In the case of contract-related enquiries, processing may take place on the basis of Article 6(1)(b) of the GDPR.

Messages are deleted as soon as they are no longer required for the processing and necessary follow-up of the matter, provided there are no statutory retention obligations or specific reasons for further storage. This applies to both the admin inbox and associated emails.

10. Translation of our own descriptive texts using DeepL

We use DeepL API Free to translate our own German plugin and project descriptions into English. The provider is DeepL SE, Maarweg 165, 50825 Cologne, Germany.

When a translation is initiated by the administrator, the selected description texts are transmitted from the web server to DeepL. This can also be done via the automatic translation feature activated in the editor. Visitors’ browsers do not establish a direct connection to DeepL for this purpose.

Contact enquiries, comments, reviews and bug reports are not transmitted to DeepL via this function. This feature is intended solely for the translation of our own description texts, which should not contain any personal or confidential information.

Further information on data processing by DeepL can be found in the DeepL Privacy Policy.

11. Recipients, storage locations and backups

Access to personal data is restricted to the operator and the service providers necessary for the technical provision of the service. The website, database and support email account are hosted by ALL‑INKL.COM – Neue Medien Münnich. According to the hosting provider, data is stored on servers in Germany. As part of these hosting and email services, we do not intend to transfer any personal data to countries outside the European Union or the European Economic Area.

Backups may contain the same personal data as the live website. Our own backup copies are protected against unauthorised access and are deleted or overwritten after seven days at the latest. In addition, our hosting provider, ALL‑INKL.COM, creates technical backups in accordance with its tariff-dependent backup cycles. These may be retained for longer periods. Following a restoration, any deletions that have already been carried out are taken into account once again.

12. Your rights

In accordance with the GDPR, you have, in particular, the rights to access, rectification, erasure, restriction of processing and data portability. You may withdraw any consent you have given at any time with effect for the future.

Where we process data on the basis of Article 6(1)(f) of the GDPR, you may object on grounds relating to your particular situation in accordance with Article 21 of the GDPR. We will review the objection and cease processing unless there are overriding legitimate grounds for continuing to process the data.

You may lodge a complaint with a data protection supervisory authority, in particular at your usual place of residence, your place of work or the place where the alleged infringement occurred.

Competent supervisory authority for the operator:

Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)

Häßlerstraße 8

99096 Erfurt

Email: poststelle@datenschutz.thueringen.de

Website: www.tlfdi.de

13. Provision and Changes

Comments, reviews and bug reports are voluntary. You can download files without using these functions or providing an email address. This application does not involve any automated decision-making, including profiling, within the meaning of Article 22 of the GDPR. The abuse prevention mechanism determines solely the temporary acceptance of technical enquiries.

If further services such as advertising, analytics, newsletters or embedded external videos are added, these notices and, where applicable, the consent mechanisms must be updated before they are used.

Template version: 20 October 2026. Please complete the marked fields based on your actual configuration before publication.