digiGUARDEN / DE

Last updated: 20 October 2026

Privacy policy

The short version: this website sets no tracking cookies and uses no analytics. We only process data when it is technically necessary, when you subscribe to our newsletter, or when you explicitly choose to load a YouTube video.

1. Who is responsible

Gallmond GmbH, Dittrichring 15, 04109 Leipzig, Germany
Email: [email protected]

digiGUARD is published by Gallmond GmbH, the controller under the EU General Data Protection Regulation (GDPR). Write to the address above with any privacy question, in English or German.

2. Visiting the website

When you open digiguard.news, your browser automatically sends technical data to our server: your IP address, date and time, the page requested, your browser and operating system, and the page you came from.

  • Why: to deliver the site, detect and block attacks, and fix errors.
  • Legal basis: Art. 6(1)(f) GDPR – our legitimate interest in running the site securely and reliably.
  • Retention: server logs are deleted automatically after 14 days.

The site runs on servers of Hetzner Online GmbH in Germany. Traffic passes through Cloudflare for protection against attacks and faster loading. Fonts are served from our own server; nothing is loaded from Google Fonts.

3. The Weekly Brief newsletter

To send you the newsletter, all we need is your email address.

  • Confirmed sign-up (double opt-in): after you submit the form, we email you a confirmation link. You are only subscribed once you click it, so nobody can sign up someone else’s address. We store when you signed up and when you confirmed so we can prove your consent.
  • Spam protection: the form uses ALTCHA. Your browser solves a small calculation in the background. This runs on our own server, with no cookies and no third parties.
  • Sending: we manage the mailing list with Listmonk, an open-source program running on our own server in Germany. Emails are sent through Amazon Simple Email Service (Amazon Web Services EMEA SARL, Luxembourg) from a data centre in Stockholm, Sweden.
  • No open or click tracking: we do not measure whether you open an issue or click its links.
  • Undeliverable addresses: if a mailbox permanently bounces or someone marks an issue as spam, we automatically stop sending to that address.
  • Unsubscribing: at any time via the link in every issue, or by emailing us. The same link lets you download or delete your stored data yourself.
  • Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future.

4. YouTube videos

Our videos are hosted on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you open a page, no connection to YouTube is made. You only see a preview image served from our own server.

  • Only once you allow YouTube (in the privacy notice, in Privacy settings, or in the player via “Play video” or “Always allow YouTube”) and start a video does the player load from youtube-nocookie.com. Google then receives, among other things, your IP address and technical details about your device, and YouTube may use cookies or similar technologies.
  • Legal basis: your consent, Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
  • Changing your mind: via “Privacy settings” in the footer of every page.
  • Google may transfer data to the United States. Google is certified under the EU-US Data Privacy Framework. Details: policies.google.com/privacy.

5. Browser storage

We do not set cookies. If you choose “Always allow YouTube” (in the player) or “Allow YouTube” (in the notice shown on your first visit), we save that choice in your browser’s local storage so we don’t have to ask on every visit. This is strictly necessary to do what you asked (Section 25(2) no. 2 TDDDG). If you choose “Essential only”, we store that choice in local storage as well, so the notice does not appear on every visit; the legal basis is the same. You can change it at any time via “Privacy settings” in the footer of every page or by clearing your browser storage.

6. Contacting us by email

If you write to us – for example about a partnership at [email protected] – we use your details to answer. The legal basis is Art. 6(1)(b) GDPR where a possible collaboration is concerned, otherwise Art. 6(1)(f) GDPR. We delete the correspondence once it is settled, unless the law requires us to keep it.

7. Links to social networks

We link to our profiles on YouTube, Instagram and TikTok. These are plain links: no data reaches those networks until you click one. Once you are on a platform, its own privacy policy applies.

8. DigiGuard publishing workspace (TikTok, Instagram, LinkedIn)

For our DigiGuard brand we run our own publishing and analytics workspace at social.gallmond.com (TikTok app name: "digiguard.cyber"). When a user connects an account there via login (for example "Login with TikTok"), we retrieve through the platform's official interfaces: account ID (open_id), display name, profile picture and profile link, account statistics (followers, following, likes, number of videos) and the list of published videos with title, thumbnail and view and engagement counts. We also store the access tokens issued by the platform.

  • Purpose: publishing and scheduling posts that the user creates and approves in the workspace, and showing statistics for those posts.
  • Storage: our own server at Hetzner Online GmbH in Germany. No disclosure to third parties, no sale, no use for advertising or profiling.
  • Retention: as long as the account is connected. After disconnecting, the access tokens are deleted; published posts remain on the platform until the user deletes them there.
  • Withdrawal: at any time by disconnecting the channel in the workspace, by revoking access in the platform's settings (on TikTok: Settings → Security → Apps and services) or by email to [email protected].
  • Legal basis: Art. 6(1)(b) GDPR (providing the function requested by the user) or Art. 6(1)(a) GDPR (consent when connecting the account).

The privacy policies of the platforms also apply, in particular TikTok's privacy policy.

9. Service providers and transfers outside the EU

  • Hetzner Online GmbH, Gunzenhausen, Germany: servers for the website and the newsletter software. Data processing agreement under Art. 28 GDPR.
  • Cloudflare, Inc., USA: attack protection and faster delivery. Cloudflare may set a strictly necessary bot-protection cookie (__cf_bm). Transfer basis: EU-US Data Privacy Framework.
  • Amazon Web Services EMEA SARL, Luxembourg: sending newsletter emails from a data centre in Sweden. Basis for any transfer to the USA: EU-US Data Privacy Framework and EU Standard Contractual Clauses.
  • Google Ireland Limited: only with your consent, see section 4.

We do not sell your data or share it for advertising.

10. How long we keep data

  • Server logs: 14 days
  • Newsletter address: until you unsubscribe. Blocked addresses (bounced or reported as spam) are kept so we don’t email them again.
  • Backups of the newsletter system: up to four weeks, then overwritten
  • Your YouTube choice in the browser: until you change it or clear your storage
  • Email enquiries: until settled, then for any statutory retention period

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). Just email [email protected].

You may also complain to a data protection authority, for example in the country where you live. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany, saechsdsb.de.

We update this policy when our service or the law changes; the version published here applies. This English version is provided for convenience – the German version is legally binding.