Privacy Policy

Effective date: 27 March 2026

1. Controller

The controller responsible for data processing on this website is:

Ralf Ehlert
Auf der Heide 23
32805 Horn-Bad Meinberg
Germany
E-mail: admin@railys.eu

2. General information

This Privacy Policy explains how personal data is processed when using railys.eu and radio.railys.eu.

Personal data means any information relating to an identified or identifiable natural person, for example name, e-mail address, IP address, usage data or content uploaded or published through an account.

Processing is carried out in accordance with applicable data protection law, in particular the GDPR and, where information is stored on or retrieved from end-user devices, the TDDDG.

3. Categories of processed data

Depending on how you use the platform, we may process in particular:

• technical access data such as IP address, date and time of access, requested page, referrer, browser type, operating system and device information,
• account data such as username, e-mail address, encrypted password and voluntary profile information,
• content data such as comments, channel details, favorites, playlists, uploads, embeds, content metadata, descriptions or other user-submitted information,
• communication data when you contact us, for example your name, e-mail address and message content,
• settings and usage data such as language preferences, player settings, app/PWA settings, consents, locally stored states and technical status data,
• data related to push notifications or optional third-party content.

4. Website access / server log files

When railys.eu or radio.railys.eu is accessed, the web server automatically records technical information. This may include in particular:

• IP address,
• date and time of access,
• requested address/content,
• browser type and browser version,
• operating system,
• referrer URL where transmitted,
• technical status information.

This processing is necessary to provide the website securely and reliably, to analyze errors and to defend against misuse or attacks.

Legal basis: Art. 6(1)(f) GDPR

5. Hosting

The platform is operated through an external hosting provider. In the course of hosting, the technical data required for operation may be processed, in particular server log files, databases, backups and security data.

Where the hosting provider processes personal data on our behalf, such processing is carried out under a data processing agreement pursuant to Art. 28 GDPR.

Legal basis: Art. 6(1)(f) GDPR, Art. 28 GDPR

6. Cookies, local storage, cache, PWA and similar technologies

The platform uses technically necessary and function-related storage technologies, in particular:

• cookies,
• local storage / session storage,
• browser cache,
• service worker cache,
• other technically required device storage mechanisms.

These technologies may be used in particular for:

• login status,
• language settings,
• age prompts or content releases,
• player and radio settings,
• favorites or playback states,
• PWA / app features,
• offline functions,
• update notices,
• security and convenience functions.

Where access to information on your device is strictly necessary, such access is based on Section 25(2) TDDDG. Where consent is required, processing will take place only on the basis of your consent.

Legal bases: Section 25(2) TDDDG, Art. 6(1)(f) GDPR; where consent is required, additionally Section 25(1) TDDDG and Art. 6(1)(a) GDPR

7. User account, registration and profile

If you create or use a user account, we process the data you provide during registration or later in your profile. This may include in particular:

• username,
• e-mail address,
• password in encrypted / hashed form,
• profile image,
• channel name,
• description texts,
• voluntary profile details,
• usage and account status data.

This data is processed in order to provide the account, enable login, offer account functions, prevent misuse and technically operate the platform.

Legal basis: Art. 6(1)(b) GDPR; additionally Art. 6(1)(f) GDPR

8. Age information / age prompts

Where technically implemented, an age prompt or age-related information may be processed on individual pages, for certain functions, or in connection with account use, uploads or content releases.

Such processing is used solely for technical access control, feature assignment or internal protective mechanisms. It does not automatically mean that the entire platform is intended exclusively for adults.

Legal basis: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR; where explicit consent is requested, Art. 6(1)(a) GDPR

9. Uploads, embeds, comments and other user content

If you upload, embed, comment on, describe or otherwise publish content, we process the data required for that function. This may include in particular:

• uploaded files,
• embedded source information,
• titles,
• descriptions,
• categories,
• thumbnails,
• timestamps,
• channel or account assignment,
• comments,
• moderation and status information.

This processing is necessary to provide the relevant function and to technically manage and display your content on the platform.

Please do not publish personal data of third parties unless you have a valid legal basis or the required consent.

Legal basis: Art. 6(1)(b) GDPR; additionally Art. 6(1)(f) GDPR

10. Videos, audio, radio and embedded content

Railys.eu is a music and media platform. Depending on the content, the platform may include in particular:

• own content,
• locally hosted or platform-hosted media,
• user-uploaded content,
• embedded content from external platforms,
• links to external sources,
• audio streams and radio features.

When audio or video content is accessed, technical connection data is processed in order to enable playback.

YouTube and other third-party platforms

Where content from third-party platforms such as YouTube is embedded or linked, loading or playing that content may establish a connection to the servers of the relevant third-party provider. In that context, the provider may process in particular your IP address, browser and device information, usage data and the page you visited.

If privacy-enhanced mode is technically enabled on a page, the embed may use a more privacy-friendly YouTube domain. However, data may still be transmitted to YouTube or Google once playback is actively started.

We can influence third-party processing only to the extent that such influence is technically possible through the chosen integration.

Legal bases: Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR; where required, Art. 6(1)(a) GDPR and Section 25(1) TDDDG

11. Push notifications and app / PWA functions

If you enable push notifications or use the platform as an app / Progressive Web App, the following data may in particular be processed:

• technical push identifiers or tokens,
• browser or device information,
• delivery status of push notifications,
• technical app/PWA settings,
• local cache and update information.

This processing is carried out solely to provide the notifications, app features, offline features or update functions you requested.

Push notifications can be disabled at any time in your browser, device or operating system settings.

Legal basis: Art. 6(1)(a) GDPR; for technically necessary app functions additionally Art. 6(1)(f) GDPR and Section 25(2) TDDDG

12. Contact form and e-mail contact

If you contact us via a contact form or by e-mail, we process the data you send to us, in particular:

• name,
• e-mail address,
• message content,
• any other information you provide voluntarily.

The data is used exclusively to handle and respond to your request.

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR

13. Recipients of data

Personal data is disclosed only where necessary. Recipients may include in particular:

• hosting and technical service providers,
• e-mail and communication service providers,
• providers of embedded third-party content,
• browser / push services or operating system services,
• public authorities where there is a legal obligation.

Personal data is not sold and is not disclosed for advertising purposes.

14. Transfers to third countries

Where external services based outside the European Union or the European Economic Area are integrated, personal data may be transferred to third countries, in particular the United States.

This may apply especially where content from third-party platforms is played or where push / platform services of external providers are used.

Where an adequacy decision or other lawful safeguards under Art. 44 et seq. GDPR exist for the relevant provider, transfers are based on those safeguards. Otherwise, transfers take place only where legally permitted or where you have given your consent.

15. Retention period

Personal data is stored only for as long as necessary for the relevant purposes or as required by statutory retention obligations.

The following principles apply in particular:

• server and security logs only as long as technically necessary,
• account data generally until account deletion or until the purpose no longer applies,
• communication data until the request has been fully processed, subject to statutory retention obligations,
• data stored locally on your device until you delete it yourself or until technical storage cycles expire.

16. Your rights

Subject to the applicable legal requirements, you have the following rights:

• right of access under Art. 15 GDPR,
• right to rectification under Art. 16 GDPR,
• right to erasure under Art. 17 GDPR,
• right to restriction of processing under Art. 18 GDPR,
• right to data portability under Art. 20 GDPR,
• right to object under Art. 21 GDPR,
• right to withdraw consent with effect for the future,
• right to lodge a complaint with a supervisory authority.

17. Requirement to provide data

Where personal data is required for registration, contact, uploads or certain platform functions, providing that data is necessary in order to use the relevant feature. Without such data, the feature may not be available or may only be available to a limited extent.

18. Data security

We implement appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, unauthorized disclosure or unauthorized alteration.

19. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy with future effect, in particular in the event of technical changes, new functions or changes in the legal situation.

The current version is available on railys.eu.