Privacy policy

1. Controller

2. General

This website is a purely informational site. It contains no forms, no login, no shopping basket and no comment function. No cookies are set, no analytics or tracking services are used and no advertising networks are integrated.

All components of the site – texts, images, fonts and style sheets – are delivered from our own server; in particular, no external fonts such as Google Fonts are embedded. The only exception is the YouTube video player: it is loaded only once you expressly click the preview image (see section 7). Without that click, no third-party content is loaded.

3. Server log files

When this website is accessed, the hosting provider automatically records data transmitted by your browser. As a rule, these are:

• IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• volume of data transferred and notification of successful retrieval
• browser and operating system used
• where applicable, the previously visited page

This data cannot be attributed by us to any specific person. It is not merged with other data sources.

Legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically faultless operation and the security of the website.

Storage period: the log files are deleted automatically after the period set by the hosting provider. They are retained longer only where there is a specific reason to investigate a security incident; in that case the data concerned is exempt from deletion until the incident has been finally resolved.

4. Hosting

This website is hosted by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany. The provider processes the data mentioned above on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR. The servers are located in Germany.

5. Contacting us

If you contact us by e-mail or telephone, we process the details you provide solely in order to deal with your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in answering enquiries. Your details are deleted once the matter has been finally dealt with and no statutory retention obligations stand in the way.

6. Encryption

This website is delivered over an encrypted connection (SSL/TLS), recognisable by the “https” in your browser's address bar. This prevents the transmitted data from being read by third parties.

7. YouTube videos (two-click solution)

Videos from the YouTube service are embedded on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We do not embed the videos directly. Instead you first see a preview image that is loaded from our own server. As long as you do not click this preview image, no connection to Google is established and no data is transmitted to Google.

Only when you click “Load video” is the player loaded from a Google server. In doing so, Google learns your IP address as well as details about your browser, operating system and the page called up; Google may use cookies or comparable techniques. If you are logged in to Google at that moment, the access can be attributed to your account.

We use the extended data protection mode (youtube-nocookie.com). This reduces the collection of data but does not exclude it.

Legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, which you give by clicking “Load video”. You may withdraw it at any time with effect for the future by reloading the page and not starting the video again.

A transfer to the USA cannot be ruled out. For such transfers Google relies on standard contractual clauses and on its certification under the EU-US Data Privacy Framework.

For further details on how user data is handled, please see Google's privacy policy at https://policies.google.com/privacy.

8. Our own upload tool and the YouTube API

To maintain our own YouTube channels “MCP Schnittstellen” and “MCP Interfaces” we operate a program of our own that uses the YouTube API Services (hereinafter “the tool”). We use it to upload finished videos to our own channels and to maintain their details: title, description, tags, category, thumbnail, visibility, publishing date and the disclosure of AI-generated content.

The tool is not a public offering. It runs solely on a computer belonging to the controller, is operated solely by the controller and is not available to third parties. There is no sign-in for third parties and there are no user accounts. The tool is of no relevance to visitors of this website; it is not active when these pages are accessed.

By using the tool, the user agrees to be bound by the YouTube Terms of Service. These are available at https://www.youtube.com/t/terms. Google's handling of user data is governed by the Google Privacy Policy at https://policies.google.com/privacy.

What data the tool accesses, uses and stores: via the YouTube Data API v3 it accesses data of our own channels only – channel name and channel ID as well as the details and the processing status of our own videos. It does not retrieve data of other channels, no personal data of viewers and no comments by third parties. The details retrieved are used for the respective working step and are not stored in a database of our own; they are not analysed, not combined with other data sources and not passed on to third parties. The credentials required for sign-in (OAuth tokens) are held solely locally on the controller's computer, are protected by file permissions and are not transmitted.

No third-party content, no access to end devices: the tool does not embed any third-party content, in particular no advertising, and it does not store, collect or read any information on or from users' end devices.

Revoking access: the tool's access to the data of a Google account can be revoked at any time via the security settings of the Google account, namely at https://security.google.com/settings/security/permissions (also reachable at https://myaccount.google.com/permissions).

Deletion: if access is revoked, we delete all data received via the API relating to the person concerned within 30 days. The locally stored credentials are deleted as soon as they are no longer needed.

Please address questions and complaints about data protection to the address given in section 1 or to kontakt@mcp-interfaces.com.

9. Your rights

You have the right at any time to information about the data stored about you (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Where processing is based on Art. 6 (1) (f) GDPR, you also have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR).

To exercise these rights, please contact us at the address given above.

10. Right to lodge a complaint

11. Changes

This privacy policy applies to the state of the website described above. If the offering is extended – for example by forms, directly embedded videos or reach measurement – it will be amended accordingly.

12. Note on this translation

This page is an English translation of the German privacy policy at mcp-schnittstellen.de. The processing described is governed by German and European law; in case of any discrepancy, the German version applies.