Legal Notice (Impressum)

Scope of this Legal Notice

This legal notice applies to the website reefmanager.eu as well as associated subpages/applications (e.g., login/registration area) and – where indicated – also to our social media presences.

Information according to § 5 DDG

Christian Kitzel
Am Bärenkamp 11
40589 Düsseldorf
Germany

Contact

Phone: +49 (0) 157 72025447
Email: info@reefmanager.eu

VAT

As a small business owner in accordance with § 19 Para. 1 UStG, no sales tax (VAT) is charged.

Editorially responsible according to § 18 Para. 2 MStV

Christian Kitzel
Am Bärenkamp 11
40589 Düsseldorf

Social Media

This legal notice also applies to our social media presences and profiles on:

YouTube: ReefManager YouTube Channel
Instagram: ReefManager Instagram Channel
WhatsApp: ReefManager Community / Groups / Communities

Liability for Content

As a service provider, we are responsible for our own content on these pages in accordance with § 7 Para. 1 DDG under general laws. According to §§ 8 to 10 DDG, however, we as a service provider are not obligated to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.

Obligations to remove or block the use of information under general laws remain unaffected. However, liability in this regard is only possible from the point in time at which we become aware of a specific legal violation. Upon becoming aware of such legal violations, we will remove this content immediately.

Liability for Links

Our offer contains links to external third-party websites, over whose content we have no influence. Therefore, we cannot assume any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking; illegal content was not recognizable at that time.

Copyright

The content and works created by the site operator on these pages are subject to German copyright law. Contributions from third parties are marked as such. Reproduction, processing, distribution, and any kind of exploitation outside the limits of copyright law require the written consent of the respective author or creator.

EU Dispute Resolution

The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr/ . You can find our email address above.

Consumer Dispute Resolution

We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Privacy Policy

Status: 05.01.2026

1. Responsible Entity

The controller responsible for data processing is:
Christian Kitzel
Am Bärenkamp 11
40589 Düsseldorf
Germany
Email: info@reefmanager.eu

2. General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website/application, for communication, or to provide our services. If we obtain consent for certain processing operations, Art. 6 Para. 1 lit. a GDPR serves as the legal basis. In other cases, we base the processing on Art. 6 Para. 1 lit. b GDPR (contract/initiation) or Art. 6 Para. 1 lit. f GDPR (legitimate interest, e.g., security).

3. Hosting and Server Log Files (STRATO)

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin. When you visit our website, STRATO processes so-called server log files on our behalf, which your browser automatically transmits. These may include in particular: IP address, date and time of access, requested page/file, referrer URL, browser type/version, operating system, and status codes/transferred data volumes.

The processing is based on Art. 6 Para. 1 lit. f GDPR (legitimate interest in operation, security, and error analysis). Log data is not merged with other data sources.

4. Registration, Login, and User Account (DIY Area)

You have the option to create a user account on our site to access the DIY area, upload files (e.g., CAD files, instructions), or download content from other users.

a) Collected Data

As part of the registration, we collect and store the following data in a local database (JSON file) on our server:

First Name and Last Name: These serve for identity verification in case of support requests (see point c).
Username: Freely chosen name that is publicly displayed with your uploads.
Password: Is stored exclusively as a cryptographic hash (encrypted via BCRYPT). We do not know your password in plain text.
Timestamp: Date and time of account creation.

b) Purpose of Processing and Legal Basis

The processing serves to provide the protected user area and to assign uploaded content. The legal basis is Art. 6 Para. 1 lit. b GDPR (performance of a contract for the use of the platform).

c) Manual Account Management & Identity Verification

Our system records no email addresses. Therefore, there is no automated process for resetting the password.

Important: Should you forget your password or wish to delete your account, contact via email to info@reefmanager.eu is required. Since we have not stored an email address for you, legitimation takes place via the First and Last Name provided during registration. We reserve the right to request appropriate proof of identity to prevent misuse (legitimate interest acc. to Art. 6 Para. 1 lit. f GDPR in the security of user accounts).

d) Storage Duration

The data is stored until you request the deletion of your account. After deletion of the account, the reference to any files you may have uploaded will be anonymized (the username will be removed or replaced by "Deleted User"), provided the content is to remain on the platform for technical or licensing reasons.

4.1. Upload of Content (CAD Files, Instructions)

If you upload files, images, or texts in the DIY area, these are stored on our server and made publicly available for download to other users.

Your Username is displayed as the author/uploader. By uploading, you assure that you possess the necessary rights and agree to publication on this platform (Art. 6 Para. 1 lit. b GDPR). Please do not upload personal data of third parties without their consent.

5. Sessions (PHP Session) and Technically Necessary Cookies

For login operations, we use PHP sessions (session_start()). A session ID is processed, which is typically stored in a technically necessary cookie (e.g., PHPSESSID) to provide logged-in states and security mechanisms.

The legal basis is Art. 6 Para. 1 lit. f GDPR (legitimate interest in secure and functional provision) and – insofar as the user account is affected – Art. 6 Para. 1 lit. b GDPR. Without these cookies, a login is technically not possible.

6. Contacting Us

If you contact us via email, we process your details (e.g., name, email address, content of the message) to handle the request. The legal basis is Art. 6 Para. 1 lit. b GDPR (request in connection with contract/service) or Art. 6 Para. 1 lit. f GDPR (legitimate interest in communication).

7. Consent Management (Cookie Consent)

We use a consent/cookie banner to obtain and document your consent for services requiring consent (e.g., external media, CDNs). Depending on the implementation, your selection may be stored in your browser (e.g., LocalStorage/Cookies).

The legal basis is Art. 6 Para. 1 lit. c GDPR (fulfillment of legal obligations regarding consent management) and Art. 6 Para. 1 lit. a GDPR, insofar as your consent is stored/documented.

8. External Content & Third-Party Providers (only with consent, where required)

We integrate external services on our website to provide functions, fonts, or media. Unless these services are technically strictly necessary, they are only loaded after your consent via the consent banner (Art. 6 Para. 1 lit. a GDPR). Technically necessary integrations may be based on Art. 6 Para. 1 lit. f GDPR.

a) Font Awesome (Icons via CDN)

We use Font Awesome to display symbols. A connection to CDN servers (e.g., cdnjs.cloudflare.com) may be established. In particular, your IP address and technical browser data may be processed.

b) Cookie Consent Library via jsDelivr

For the cookie banner, a library is loaded via a CDN (e.g., cdn.jsdelivr.net). A connection to the CDN provider's servers may occur, whereby technical access data (e.g., IP address, time, user agent) may be processed.

c) YouTube Videos (Embedded Content)

We embed videos from the YouTube platform. Operator: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a page with an embedded YouTube video, a connection to YouTube may be established – at the latest when playing. YouTube may process information about the page visit. If you are logged into your YouTube account, YouTube can assign the visit to your profile.

Further information: https://policies.google.com/privacy

9. Presences in Social Networks (YouTube)

We operate an online presence on YouTube to provide information and communicate there. When visiting our YouTube presence, YouTube processes personal data on its own responsibility. Data processing outside the EU may also occur. Please refer to the privacy notices of Google/YouTube for details.

10. WhatsApp Groups & Communities

We offer the possibility to join WhatsApp groups or communities. The service provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Meta).

a) Visibility of Data

By joining, your mobile number and – depending on your WhatsApp privacy settings – profile picture and display name may become visible to other members. If you do not want this, please do not join.

b) Processing by Us

We use groups/communities for communication and organization. The legal basis is your consent through active joining (Art. 6 Para. 1 lit. a GDPR) as well as our legitimate interest in community management (Art. 6 Para. 1 lit. f GDPR).

c) Processing by WhatsApp/Meta

WhatsApp processes data (e.g., metadata, device information) on its own responsibility and may share data within the Meta group. Details: https://www.whatsapp.com/legal/privacy-policy-eea

11. Recipients of Data / Data Processing

If we use service providers (e.g., hosting), this is done within the framework of a data processing agreement according to Art. 28 GDPR, if required. Furthermore, third parties only receive data if this is necessary to provide functions or if you have consented.

12. Data Transfer to Third Countries

When integrating external providers (e.g., Google/YouTube, CDNs), data transfer to third countries (e.g., USA) cannot be excluded. In these cases, the transfer takes place on the basis of legal requirements (e.g., adequacy decisions, standard contractual clauses) and – if required – your consent (Art. 49 Para. 1 lit. a GDPR).

13. Your Rights

You have the following rights regarding your personal data:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Deletion (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing based on Art. 6 Para. 1 lit. f GDPR (Art. 21 GDPR)
Revocation of given consents (Art. 7 Para. 3 GDPR)

14. Right to Lodge a Complaint with the Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.

15. Data Security

We take appropriate technical and organizational measures to protect your data (e.g., access restrictions). Please note that transmission over the Internet (e.g., email) may have security gaps.