Privacy Policy

Last updated: 28 July 2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation, hereinafter referred to as the GDPR, is:

Michael Heine
Roggensteiner Allee 28
82223 Eichenau
Germany

Email: info@windows-faq.com

2. Scope of this Privacy Policy

This Privacy Policy applies to Windows-FAQ.com and to the pages and services provided under the domain www.windows-faq.com.

It explains which personal data we process when you visit the website, submit a comment, contact us, use embedded content or follow affiliate links. It also explains the purposes of the processing, the applicable legal bases, the recipients of the data, the relevant storage periods and your rights.

Personal data is any information relating to an identified or identifiable natural person. This may include an IP address, an email address, a name, a comment, technical device information or information submitted through a contact form.

Depending on the relevant processing activity, we process personal data on one or more of the following legal bases:

  • Article 6(1)(a) GDPR where you have given your consent.
  • Article 6(1)(b) GDPR where processing is necessary for the performance of a contract or in order to take steps at your request before entering into a contract.
  • Article 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation.
  • Article 6(1)(f) GDPR where processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests, rights or freedoms override those interests.

Where information is stored on your device or information already stored on your device is accessed, the requirements of Section 25 of the German Telecommunications Digital Services Data Protection Act, hereinafter referred to as the TDDDG, also apply.

Where consent is required, the legal basis for storing or accessing information on your device is Section 25(1) TDDDG. Where the operation is strictly necessary to provide a service expressly requested by you, Section 25(2)(2) TDDDG may apply.

4. Hosting by HostPress

This website is hosted by:

HostPress GmbH
Bahnhofstraße 34
66571 Eppelborn
Germany

HostPress provides the technical infrastructure required to operate and deliver this website. Website data is processed on servers in Germany.

When you access this website, the hosting systems automatically process technical connection and request data. This information may be stored in server log files.

The processed information may include:

  • Your IP address
  • The date and time of access
  • The requested page or file
  • The previously visited page, where transmitted by your browser
  • The browser type and browser version
  • The operating system used
  • The hostname of the accessing device
  • The amount of data transferred
  • The HTTP status code
  • Technical error and security information

This processing is required to deliver the website, maintain a stable connection, diagnose technical problems, prevent misuse and protect the website against attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically correct operation of the website.

Server log files are normally retained for up to seven days under the standard hosting configuration. Data may be retained for a longer period where this is necessary to investigate a security incident, prevent further attacks, establish or defend legal claims or comply with a legal obligation.

HostPress processes hosting data on our behalf. Further information is available in the HostPress privacy policy: HostPress Privacy Policy.

5. Website security and anti-bot protection with Imunify360

The hosting infrastructure uses Imunify360 security technology to protect the server and this website against malware, automated attacks, unauthorised access, malicious requests, brute-force attacks and other security threats.

Imunify360 is provided by:

Cloud Linux Software, Inc.
20791 Three Oaks Parkway, Suite 980
Estero, Florida 33929
United States

Imunify360 may analyse incoming requests before the requested page is delivered. Depending on the request and security assessment, the processed information may include:

  • Your IP address
  • The requested URL or URI
  • Request headers
  • HTTP or HTTPS query parameters
  • Browser and device information
  • Screen resolution
  • Approximate location information derived from the IP address
  • The date and time of the request
  • Technical information about suspicious or blocked requests
  • The result of a JavaScript or browser verification

Where a request is classified as unusual or potentially automated, Imunify360 may display a browser verification page. JavaScript must be enabled to complete this check. A short-lived security token or similar technically necessary information may be stored or transmitted in order to verify the browser and prevent the verification from being repeated unnecessarily.

The purpose of the processing is to secure the website, prevent automated misuse, block attacks, detect malicious traffic and maintain the availability of the website.

The legal basis for the processing of personal data is Article 6(1)(f) GDPR. Our legitimate interests are the protection of our website, our hosting systems and other website visitors against attacks, malware and misuse.

To the extent that information is stored on or accessed from your device solely for the security verification, this processing is based on Section 25(2)(2) TDDDG because it is strictly necessary to provide the website securely.

CloudLinux may process certain security information in the United States. Where required, transfers to countries outside the European Economic Area are protected by appropriate safeguards, including adequacy decisions or the standard contractual clauses approved by the European Commission.

Further information is available here: CloudLinux Clients Privacy Policy.

6. Encrypted transmission

This website uses TLS encryption to protect information transmitted between your browser and our server. You can usually recognise an encrypted connection by the use of “https” in the address bar of your browser.

Encryption helps protect transmitted information against unauthorised access by third parties. However, complete security cannot be guaranteed for data transmitted over the internet.

This website uses a consent management solution to obtain, document and manage your choices regarding cookies, analytics services, affiliate tracking, externally loaded fonts and embedded content.

When you make a selection in the consent banner, information about your decision may be stored in a technically necessary cookie or comparable local storage entry. The processed information may include:

  • Your selected consent categories
  • The date and time of your selection
  • The version of the consent notice shown to you
  • A pseudonymous consent identifier
  • Technical browser and device information

The purpose of this processing is to document consent, respect refusals, prevent the consent banner from being displayed unnecessarily and comply with legal accountability requirements.

The legal basis for the processing of personal data is Article 6(1)(c) GDPR and Article 6(1)(f) GDPR. The storage of the consent decision on your device is based on Section 25(2)(2) TDDDG because it is necessary to provide and document the consent management function.

You can withdraw or change your consent at any time with effect for the future through the “Cookie Settings” link provided on this website. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Non-essential services are blocked until the required consent has been given. Refusing consent does not prevent access to the general editorial content of the website. However, certain optional functions, such as externally embedded videos, social media posts, Gravatar images or analytics services, may remain unavailable.

8. WordPress

This website uses WordPress as its content-management system. WordPress processes information required to deliver website content, manage the website and provide administrative functions.

For authorised administrators and registered users, WordPress may use technically necessary login, session and security cookies. These cookies are required to authenticate users, protect the administration area and maintain an active login session.

The legal basis is Article 6(1)(f) GDPR and Section 25(2)(2) TDDDG. Our legitimate interests are the secure administration and operation of the website.

9. Google Analytics 4

We use Google Analytics 4 to understand how visitors use our website and to improve our content, structure, performance and user experience.

The service is provided within the European Economic Area by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, United States, and other Google group companies may also be involved in the processing.

Google Analytics collects information about the use of the website. Depending on the configuration and your consent, this information may include:

  • A pseudonymous client or device identifier
  • Page views and visited URLs
  • The date and time of access
  • The duration of visits and sessions
  • Interactions with pages, links and website functions
  • The referring website or source
  • Browser type and browser version
  • Operating system and device category
  • Screen resolution and language settings
  • Approximate geographic information
  • Technical event and performance information

Google Analytics normally uses first-party cookies such as _ga and _ga_<measurement-ID>. These cookies are used to distinguish pseudonymous visitors and maintain session information. Depending on the configuration, these cookies may remain on your device for up to two years. Their lifetime may be renewed when you revisit the website.

Your IP address is necessarily transmitted to Google when a Google Analytics request is made. According to Google, IP addresses are not logged or stored in Google Analytics 4. For traffic originating in the European Economic Area, IP-address information is used for technical and geographic processing before it is discarded.

We do not send names, email addresses, comment content or other directly identifying information to Google Analytics.

Google Analytics is only activated after you have consented to the “Analytics” category in the consent banner. Until then, Google Analytics tags are blocked and no Analytics cookies are set by this website.

The legal basis for processing personal data is Article 6(1)(a) GDPR. The legal basis for storing information on or accessing information from your device is Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future through the “Cookie Settings” link. After withdrawal, Google Analytics will no longer be activated during subsequent visits unless you give consent again. You can also delete existing Analytics cookies through your browser settings.

The retention period for user-level and event-level data in our Google Analytics property is set to 14 months. After the retention period has expired, the affected data is automatically deleted. Aggregated reports that no longer permit the identification of individual users may be retained for a longer period.

Google may process information on servers outside the European Economic Area, including in the United States. Such transfers may be based on an applicable adequacy decision, including the EU-US Data Privacy Framework where the recipient is certified, or on the standard contractual clauses approved by the European Commission.

Further information is available here:

We use the Complianz consent management solution to obtain, store and manage your choices regarding cookies and services that require consent.

Complianz is provided by Really Simple Plugins, a trade name of Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, the Netherlands.

When you make a selection in the consent banner, information about your decision is stored in technically necessary cookies. This may include the consent categories selected by you, the date and time of your selection, the applicable consent-policy version and technical information required to apply your choice.

Complianz communicates your consent choices to compatible WordPress plugins through the WP Consent API. Google Site Kit uses this consent status to control the behaviour of Google Analytics and other connected Google services.

The purpose of the processing is to obtain and document legally required consent, respect refusals and ensure that optional services are only activated in accordance with your selection.

The legal basis for documenting and managing consent is Article 6(1)(c) GDPR. To the extent that consent settings are stored on your device, the storage is based on Section 25(2)(2) TDDDG because it is technically necessary to remember and apply your privacy choices.

You can change or withdraw your selection at any time through the “Cookie Settings” link available on this website.

11. System fonts

This website uses system fonts that are already installed on the visitor’s device. Depending on the operating system, browser and device, a suitable locally available font is selected automatically.

No font files are downloaded from Google Fonts or another external font provider. Loading the website fonts therefore does not establish a connection to an external font service.

12. Affiliate marketing with Tradedoubler

This website participates in affiliate programmes provided through the Tradedoubler network. Some links and advertisements on this website are therefore affiliate links.

The Tradedoubler network is operated within the NYORDA group. The parent company is:

NYORDA AB
Centralplan 15
111 20 Stockholm
Sweden

Local Tradedoubler companies, participating advertisers and technical service providers may also be involved in processing.

When you follow a Tradedoubler affiliate link and subsequently perform an action on an advertiser’s website, such as making a purchase or submitting an enquiry, tracking information may be used to determine whether the action originated from Windows-FAQ.com.

Where a qualifying transaction is attributed to this website, we may receive a commission from the advertiser. This does not normally increase the price you pay.

The information processed in connection with affiliate tracking may include:

  • Your IP address
  • A cookie or click identifier
  • A publisher or programme identifier
  • The clicked affiliate link
  • The date and time of the click
  • The referring page
  • Browser and device information
  • The advertiser visited
  • An order, transaction or lead identifier
  • The order value, commission value or transaction status
  • Technical fraud-prevention information

We do not normally receive your full name, postal address, payment information or the specific products purchased through Tradedoubler reporting. The advertiser remains responsible for processing the customer and payment information required to complete the transaction.

The purposes of the processing are the attribution of transactions, calculation and payment of commissions, preparation of performance reports, prevention of affiliate fraud and administration of the affiliate programme.

Tradedoubler tracking technologies and affiliate components that store or retrieve information on your device are only activated after you have consented to the “Marketing” category in the consent banner.

The legal basis for processing personal data is Article 6(1)(a) GDPR. The legal basis for storing information on or accessing information from your device is Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future through the “Cookie Settings” link. The withdrawal prevents future activation of Tradedoubler tracking through this website. Information already required for commission accounting, fraud prevention or legal retention obligations may continue to be stored for the relevant purpose.

The applicable cookie names and storage periods may differ between affiliate programmes and advertisers. The current details are displayed in the consent settings where technically available and in the privacy and cookie information provided by Tradedoubler and the relevant advertiser.

Information may be processed by service providers located outside the European Economic Area. Where required, such transfers are protected through an adequacy decision or the standard contractual clauses approved by the European Commission.

Further information is available in the Tradedoubler Privacy Policy.

13. Social media links and embedded content

This website may contain ordinary links to our profiles or pages on social media platforms. A connection to the relevant platform is generally only established when you actively follow such a link.

After following the link, you leave Windows-FAQ.com. The relevant platform then processes information under its own responsibility and in accordance with its own privacy policy.

13.2 Embedded posts, videos and other external media

Individual articles may contain embedded posts, videos, images, timelines, widgets or other content provided by social media and external media platforms.

Such embedded content is initially blocked. Instead of the external content, a local placeholder is displayed. The external content is only loaded after you have consented to the relevant category or actively requested the content through the provided activation function.

The identity of the relevant provider is shown in the placeholder and in the consent settings before the content is activated.

Once activated, your browser establishes a direct connection to the provider’s servers. Depending on the provider and the type of content, the information transmitted may include:

  • Your IP address
  • The page containing the embedded content
  • The referring website
  • The date and time of access
  • Browser and device information
  • Operating system and language settings
  • Cookies and other identifiers associated with the platform
  • Your interactions with the embedded content
  • Information about whether you are logged in to the platform

Where you are logged in to the relevant social media platform, the provider may be able to associate your visit to Windows-FAQ.com and your interaction with the embedded content with your platform account.

The provider may use the information for purposes such as delivering the content, measuring reach, analysing usage, maintaining security, creating user profiles, personalising content or displaying advertising.

The purpose of our integration is to provide relevant videos, posts, screenshots, technical demonstrations and supplementary editorial information.

The legal basis for processing personal data is Article 6(1)(a) GDPR. To the extent that cookies or similar technologies are stored on or accessed from your device, the legal basis is Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future through the “Cookie Settings” link. After withdrawal, embedded content will remain blocked during subsequent visits unless you give consent again.

Some social media providers process information in the United States or other countries outside the European Economic Area. Transfers may be based on an applicable adequacy decision, including the EU-US Data Privacy Framework where the recipient is certified, or on the standard contractual clauses approved by the European Commission.

The current providers, their privacy policies, the purpose of each integration and the applicable consent category are listed in the content placeholder or the consent settings.

14. Contact by email or contact form

You may contact us by email or through a contact form provided on the website. When you contact us, we process the information you provide in order to respond to your enquiry.

The processed data may include:

  • Your name
  • Your email address
  • The subject of your enquiry
  • The content of your message
  • Any files or screenshots voluntarily submitted by you
  • The date and time of the message
  • Technical information generated when the form is submitted

Please do not submit passwords, licence keys, payment information, health information or other particularly sensitive personal data through an unencrypted email or contact form.

Where your enquiry relates to a contract or steps taken before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For general enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to process and respond to enquiries submitted to us.

We retain enquiries only for as long as necessary to process and answer them. Information may be retained for a longer period where statutory retention obligations apply or where the information is required to establish, exercise or defend legal claims.

This website contains links to websites operated by third parties. When you follow an external link, you leave our website. The operator of the linked website is responsible for personal data processed on that website.

We have no control over the data-processing practices of third-party websites. Please review the privacy policy of the relevant website before submitting personal data or using services provided there.

16. Recipients of personal data

We disclose personal data only where this is necessary for the purposes described in this Privacy Policy, where we are legally required to do so or where you have given your consent.

Recipients may include:

  • HostPress GmbH as the hosting provider
  • CloudLinux and authorised subprocessors in connection with Imunify360
  • Google Ireland Limited, Google LLC and authorised Google subprocessors
  • Aut O’Mattic A8C Ireland Ltd., Automattic Inc. and authorised Automattic subprocessors
  • NYORDA, Tradedoubler group companies, participating advertisers and affiliate-programme service providers
  • Social media and external-media providers activated by you
  • Technical service providers acting on our instructions
  • Email and communication service providers where required to process an enquiry
  • Public authorities, courts or law-enforcement agencies where disclosure is legally required
  • Professional advisers where necessary to establish, exercise or defend legal claims

We do not sell personal data.

17. Transfers to countries outside the European Economic Area

Some technical service providers, group companies or subprocessors may be located outside the European Union or the European Economic Area.

Where personal data is transferred to a country for which the European Commission has not adopted an adequacy decision, the transfer will only take place where an appropriate legal safeguard is available.

Such safeguards may include the standard contractual clauses approved by the European Commission and additional technical or organisational measures.

Where a US recipient is certified under the EU-US Data Privacy Framework, the transfer may also be based on the European Commission’s applicable adequacy decision. A provider’s certification status may change and should be verified through the official Data Privacy Framework list.

18. Storage periods

We store personal data only for as long as necessary for the purpose for which it was collected.

The applicable storage period depends on the type of data, the purpose of processing, your consent, contractual requirements, statutory retention obligations and whether the data is required to establish, exercise or defend legal claims.

Where processing is based on consent, processing for the relevant purpose ends after withdrawal, unless another legal basis permits or requires continued storage.

Once the relevant purpose no longer applies and no legal reason for continued storage exists, the data will be deleted or anonymised.

19. Your rights

Subject to the applicable legal requirements, you have the following rights:

  • The right to request access to your personal data under Article 15 GDPR
  • The right to request the rectification of inaccurate or incomplete personal data under Article 16 GDPR
  • The right to request erasure under Article 17 GDPR
  • The right to request restriction of processing under Article 18 GDPR
  • The right to data portability under Article 20 GDPR
  • The right to object to processing under Article 21 GDPR
  • The right to withdraw consent at any time under Article 7(3) GDPR
  • The right to lodge a complaint with a competent data-protection supervisory authority under Article 77 GDPR

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, please contact: info@windows-faq.com.

We may request appropriate information to verify your identity before responding to a request. This is intended to prevent personal data from being disclosed to an unauthorised person.

20. Right to object

Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation.

If you object, we will no longer process the relevant personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.

21. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority responsible for private-sector organisations based in Bavaria is:

Bavarian State Office for Data Protection Supervision
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany

Email: poststelle@lda.bayern.de
Website: www.lda.bayern.de

You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

22. Automated decision-making

We do not use personal data to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Automated security, spam and fraud-prevention systems may analyse requests, comments and affiliate transactions in order to identify attacks, bots, spam or malicious traffic. These security assessments are used to protect the website and do not constitute automated decision-making within the meaning of Article 22 GDPR.

23. Data security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure and unauthorised access.

These measures include encrypted transmission, access restrictions, server-side security systems, software updates, backups, comment moderation, spam protection and measures designed to identify and block malicious requests.

24. Changes to this Privacy Policy

We may update this Privacy Policy where the website, the services used or the applicable legal requirements change.

The version published on this page at the time of your visit applies. The date of the latest revision is stated at the beginning of this Privacy Policy.

Stay informed and not overwhelmed, subscribe now!