Your data. Your choice.

Who is responsible?

IT Consulting Totzauer · Matthias Totzauer
An der Zollbrücke 8, 95632 Wunsiedel, Deutschland
[email protected] · +49 162 592 2574

Purpose, data and your choice

The daily Cyber Briefing summarises security reports, CVSS ratings, documented exploitation and general suggested checks. We process your email address, chosen language, topics, minimum score, exploitation filter and message format. We also record the consent text and version, registration and confirmation times and necessary delivery status. No name, employer or customer information is required. Subscription is optional and separate from use of the website or any enquiry.

Consent and confirmation

Sending is based on consent under Article 6(1)(a) GDPR and Section 7 UWG. The checkbox is not preselected. A neutral confirmation email follows registration; the daily newsletter starts only after you actively confirm on the linked page. The confirmation link expires after 48 hours. The regular dispatch begins at 08:00 Europe/Berlin; mail transport and larger recipient lists can cause delivery delays.

Withdraw, change or export

Every newsletter contains an unsubscribe link and access to preferences. No account or password is needed. Withdrawal stops future dispatch and removes your address and preferences from the active mailing list. You can download your current subscription data in the preferences centre. Consent withdrawal does not affect the lawfulness of processing before withdrawal. You may also contact [email protected]. Personal links grant access to your preferences; do not forward them.

Retention and protection

Unconfirmed registrations are removed after no more than seven days. Active subscription details remain until withdrawal. Technical dispatch records are retained for at most 30 days and removed from this application when you unsubscribe. After withdrawal, a restricted pseudonymous record of the consent wording, timestamps and an HMAC reference to the address is retained for up to three years to document consent and withdrawal and defend legal claims (Article 6(1)(f) GDPR). It cannot be used as a mailing list. Temporary abuse-control counters use a keyed hash, expire within at most two hours and are cleaned daily. No raw IP addresses are stored in the newsletter database. The normal website and mail-server security logs and backup processes are separate; see the general privacy notice.

Processors and international transfers

The mailing list is held in the protected database of the ITCST WordPress website hosted at Webtropia. Authorised hosting and technical service providers may access data where necessary to operate the service. Delivery uses the ITCST mail relay and STRATO. Delivery necessarily discloses the address and message to the recipient’s chosen email provider. Cloudflare, Inc. (USA) protects website requests and processes connection data and submitted form content during transport. This is based on our legitimate interest in secure website operation (Article 6(1)(f) GDPR). Processing may occur outside the EEA. Cloudflare describes safeguards including EU standard contractual clauses and the EU–US Data Privacy Framework in its published DPA and privacy information; a copy of the safeguards relevant to this service can be requested from [email protected]. There is no sale of addresses or disclosure for unrelated advertising.

Cloudflare Data Processing Addendum · Cloudflare Privacy Policy

No behaviour tracking

Emails contain no tracking pixels, remote images, analytics parameters or personalised click redirects. Links to reports are ordinary links. Preferences filter the content you requested; they are not used to infer a behavioural profile. No decision with legal or similarly significant effect is made automatically. The signup does not require analytics or marketing cookies.

Your rights

Subject to the legal conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests (Articles 15–21 GDPR). Contact [email protected]. You may complain to a supervisory authority, particularly the Bavarian State Office for Data Protection Supervision (BayLDA).

General privacy notice · Stand: 14.10.2026 · 2026-10-14.1