Privacy
As little data
as possible.
10Zeit wants to think differently not only about companies, but also about data. That’s why we try to process only the data we really need on this website. We don’t use personalised advertising or any tracking that follows your behaviour for advertising purposes or builds personal usage profiles about you.
But right now, 10Zeit can’t work entirely without data and external services either. Our website runs on WordPress and is hosted by Raidboxes. Our emails are hosted by INWX. To protect our form we use Cloudflare Turnstile. For search engine optimisation we use BeyondSEO by rankingCoach.
This means we sometimes work with companies whose structures don’t necessarily match what we envision for 10Zeit in the long run. We don’t want to hide that.
Today we can’t yet fully break away from the structures and big tech companies that make a large part of the internet possible. When we use their services, we also support those structures to some extent. We’re aware of this contradiction.
At the same time, we are also part of an economic system that we’ve all built and supported together over many years. 10Zeit isn’t being created outside that system. We’re trying to start doing things differently from within it. Step by step.
That’s why we explain here, as clearly as we can, what data is processed, why, and which companies are involved.
Who is responsible for your data
The controller of this website within the meaning of the General Data Protection Regulation (GDPR) is:
Joana Assing
Heisterender Chaussee 25
25358 Horst
Germany
Email: hey@10zeit.art
10Zeit is currently an experiment. A founding is planned as soon as enough people take part. There is no company or cooperative yet – we’re currently looking into which legal form 10Zeit should have.
When you simply visit our website
Our website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany (Raidboxes privacy notice). So that your browser can load our website and the website can run securely and reliably, technically necessary connection data is processed.
The server logs may contain in particular your IP address, date and time of access, the address or file requested, referrer URL, browser and browser version, operating system, user agent, protocol used, amount of data transferred and HTTP status code. Our current Raidboxes configuration keeps access and error logs. These are exactly the types of log data described by Raidboxes in its privacy notice.
We don’t use this information to analyse your behaviour, find out who you are or build a personal profile about you. The processing serves in particular to provide our website securely and reliably. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of the website.
Raidboxes states that it generally deletes personal data once it is no longer needed for the respective purpose. We have not yet been able to determine a specific retention period for the access and error logs of our site from the information available to us. That’s why we deliberately don’t state a made-up period here.
Backups
Raidboxes automatically creates backups of our WordPress website. These backups allow the website to be restored after technical problems or data loss.
The entries from our expression-of-interest form are stored in our WordPress database (more on that below). That’s why they’re also included in these backups. When we delete an entry, it disappears from the website immediately. It may remain in older backups until they are automatically replaced by new ones. We haven’t been able to determine clearly from the information available to us how long Raidboxes keeps backups – so we don’t state a made-up period here either.
When you express interest in 10Zeit
On our website you can tell us whether you could imagine joining in with 10Zeit or becoming part of 10Zeit later on. This expression of interest is non-binding. It is neither a membership nor the purchase of shares. It creates no obligation to pay.
Your email address and your answers
If you voluntarily leave us your email address and other details, they are first stored in our WordPress database as not yet confirmed. You immediately receive an email with a confirmation link. Only when you click it is your sign-up valid: then we count you and receive a notification by email.
Double opt-in: why you confirm your sign-up
The confirmation link ensures that nobody signs up using someone else’s email address (the so-called double opt-in procedure). If you don’t click the link within 7 days, we automatically delete your entry – including all details.
So that we can prove you gave your consent, we store the time and IP address of your sign-up and of your confirmation as well as the wording of the consent with your entry. The legal basis is our legitimate interest in being able to prove consent (Art. 6(1)(f) GDPR in conjunction with Art. 7(1) GDPR). We delete this information together with your entry.
If you send us your look from the configurator, we briefly store the image on our server until you confirm. After confirmation, we send it to ourselves by email and delete it from the server. Without confirmation, it is deleted after 7 days at the latest.
We also count how many people have signed up. On the website we only show this total. We never show names or email addresses publicly.
We use your email address for the purpose we tell you about in the form: you receive an email with the confirmation link right after submitting. After that, we only get in touch once more: when 10Zeit gets going. No regular newsletter. No personalised advertising. No selling of your email address.
We use your other answers only to understand whether there is interest in 10Zeit and how we can develop the project further. We don’t create personal advertising or user profiles from them.
The legal basis for processing the data you provide voluntarily is your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future. A message to this address is enough: hey@10zeit.art.
Where is this data stored?
We store your email address, your name (if you give it), who the boxers would be for (if you choose), how you want to take part (Buy, Design, Cheer it on) and the time and IP address of your sign-up and your confirmation. If you send us your look from the configurator, we also store your selection as text (fabric, seams, waistband). This data is kept in two places:
In our WordPress database. It is hosted by Raidboxes, where our website is also hosted (see above). Only we have access to it.
In our email inbox. That’s where the notification we receive for each new entry ends up. We also send your confirmation via the mail server of our email inbox.
Our email inbox is provided by INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany. INWX states that it processes personal data for its services in data centres in Germany. INWX’s email hosting is also offered with Berlin as its location (INWX privacy notice).
How long do we keep your data?
In principle we only keep your details for as long as we need them for the purpose described. When 10Zeit gets going, we send you the promised message. After that, we delete your entry in WordPress and the related emails in our inbox.
If it becomes clear that 10Zeit will not go ahead, we delete them as well. If you withdraw your consent before then, we generally delete the relevant data earlier, unless legal reasons prevent deletion.
If you’re under 16
Our offer is aimed at people aged 16 and over. If you’re younger, please sign up together with your parents.
Protection against spam and bots: Cloudflare Turnstile
To stop our form being filled in en masse by bots or automated programs, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
At 10Zeit we currently use Turnstile in “Managed” mode. Cloudflare decides, based on technical risk signals, which check is needed. To do this, Turnstile processes technical signals. Cloudflare names in particular the IP address, TLS fingerprint, user agent, sitekey and the associated origin. According to Cloudflare, these signals are processed to detect and block bots and are not collected to identify, profile or target individual people (Turnstile privacy policy).
Cloudflare does not receive the content of your expression of interest via Turnstile. Cloudflare expressly states that Turnstile does not access, store or transmit communications, form inputs or other inputs on the page (Cloudflare documentation).
No pre-clearance
We have currently disabled Turnstile’s so-called pre-clearance feature. With pre-clearance enabled, Cloudflare can set a cf_clearance cookie. Since this feature is switched off in our Turnstile configuration, this cookie is not set because of this Turnstile feature (details on pre-clearance).
We use Turnstile to protect our website and our form from automated abuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, abuse-free operation of our website.
Turnstile is only loaded on our home page, because that’s where the form is. No connection to Cloudflare is made on the other pages.
Because Cloudflare is based in the USA, data may be transferred to the USA in the process. According to its own information, Cloudflare is certified under the EU-U.S. Data Privacy Framework. The transfer is therefore based on the European Commission’s adequacy decision (Art. 45 GDPR).
Search engine optimisation: BeyondSEO
For the technical search engine optimisation of our WordPress website we use BeyondSEO by rankingCoach. Among other things, the plugin helps us with the sitemap, robots.txt, RSS, breadcrumbs and optimising our content for search engines.
We use the plugin’s local SEO features and don’t currently connect 10Zeit to a rankingCoach account. Regular keyword synchronisation with rankingCoach is disabled.
According to rankingCoach, BeyondSEO does not communicate with external servers by default. Communication with rankingCoach services is optional and has to be activated (BeyondSEO FAQ). We currently choose not to use these extra features, because we don’t want to transfer data if we can get the function we need without that transfer.
Code Snippets
On our WordPress website we also use the Code Snippets plugin. With it we add certain features to our website using our own code. Our expression-of-interest form also runs on such a code snippet: it stores your details in our WordPress database, counts the entries and sends the notification to us and the confirmation to you. Apart from Cloudflare Turnstile (see above), no external service is involved.
The mere presence of such a plugin does not automatically mean that data is transferred to an external provider. What matters is what the code actually does. If we ever integrate an external service via a code snippet or process additional personal data through one, we will list it here separately.
Form plugin: WPForms Lite
The WPForms Lite plugin is also installed on our WordPress website. We’ve used it to create a simple contact form, but haven’t currently embedded it anywhere on our website. Our expression-of-interest form doesn’t run on WPForms but on our own code (see “Code Snippets”). As long as no WPForms form is embedded on a page, no data about you is processed through it.
Even so, we’ve deliberately switched a few things off: the “Lite Connect” feature, which would transfer form entries to WPForms’ servers as a backup, is disabled. Sending usage data to WPForms (“usage tracking”) is also disabled. If we do use a WPForms form later on, we’ll explain here what data is processed.
Performance optimisation
The Performance+ add-on is currently enabled on our Raidboxes installation; according to the Raidboxes interface, it handles page speed optimisation via FastPixel. We use this feature for technical optimisation and to deliver our website faster.
We’ve checked what your browser loads when you visit our website: all pages, images, scripts and fonts come from our own server at Raidboxes. Your browser doesn’t connect to any FastPixel servers. How the optimisation works technically in the background between Raidboxes and FastPixel is something we’re still clarifying with Raidboxes, and we’ll add it here as soon as we know for sure.
Fonts
For our website we use the fonts Inter and Patrick Hand SC. Both are Google Fonts, but they are not loaded from Google. We’ve stored them on our own server at Raidboxes. So when you visit our website, no connection to Google is made and your IP address is not transferred to Google for this.
“Spread the word” button
With our “Spread the word” button you can share 10Zeit with others. We don’t use social network share buttons for this and don’t load any third-party scripts. On a smartphone, your device’s share menu opens; on a computer, the link to our website is copied to your clipboard. No data is transferred to us or to third parties in the process. Only when you choose an app yourself and share something there do that app’s privacy terms apply.
Boxer configurator
With our configurator under “Design boxers” you can put together your own boxers. Colours, patterns and the preview are calculated entirely in your browser. No data is sent to our server or to third parties, and we don’t set any cookies for it.
Your own image: If you use your own photo as a pattern, it is processed only locally in your browser. It is not uploaded to 10zeit.art and we don’t store it. As soon as you close or reload the page, it’s gone. Please only upload images you have the rights to.
Share and save as image: The image of your boxers is created on your device. When you share it, your device’s share menu opens – you decide which app and who to share it with. We don’t find out about it. The privacy policy of the respective app then applies.
“I want them”: The button takes you to our form and passes your selection (fabric, seams, waistband) along in the link. Only what you enter in the form and submit is stored. What happens then is described above under “When you express interest in 10Zeit”.
Cookies and similar technologies
Our aim is to use cookies and similar storage technologies only where they are technically necessary. We currently don’t use any cookies to track your behaviour for personalised advertising. We use Cloudflare Turnstile without pre-clearance enabled. The cf_clearance cookie that this feature can set is therefore currently not set by this Turnstile feature.
If we later add features that require further cookies or similar technologies, we will check the applicable data protection requirements before activating them and update this policy accordingly.
Yes, we’re on Instagram. So claiming “we don’t use Meta” would simply not be true.
We use Instagram as a communication channel because we can reach people there, and right now it’s hard for a new project like 10Zeit to do without it entirely. At the same time, we’re making a conscious effort to reach people in other ways too and not to become unnecessarily dependent on individual big platforms. That’s why we don’t pull Instagram into our own website any further than necessary.
On 10zeit.art our Instagram profile is only linked via a normal link in the footer. We don’t embed any Instagram posts, reels or feeds on our website and currently don’t use the Meta Pixel. As long as you don’t click the link, no Instagram content is loaded on our website through this normal link.
When you click the link, you leave 10zeit.art and go to Instagram. From that point on, Meta may process data under its own privacy terms. If you are logged in there, Meta may be able to link your visit to your account.
We’re aware that by using Instagram we’re also using – and to some extent supporting – a company and a system whose structures don’t necessarily match what we want to try out with 10Zeit. That contradiction is part of it right now. We’d rather make it visible than pretend it doesn’t exist.
On our contact page we link to our personal LinkedIn profiles. For users in the EU, LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The same applies here: these are completely normal links. We don’t embed any LinkedIn content, buttons or tracking tools (such as the LinkedIn Insight Tag) on our website. As long as you don’t click one of the links, no data is transferred to LinkedIn.
Only when you click a link are you taken to LinkedIn. There, the LinkedIn privacy policy applies. If you’re logged in to LinkedIn, LinkedIn may link your visit to your account.
What we deliberately don’t use
With our current configuration we use neither Google Analytics nor the Meta Pixel. We don’t use personalised advertising and don’t want to know which person looked at which parts of 10Zeit for how long in order to build advertising profiles from it.
The iubenda add-on offered by Raidboxes is disabled for us. WordPress debugging is also disabled. And we don’t load fonts from Google servers (see “Fonts”).
If we later add a new service that processes additional personal data, we will review it and update this privacy policy.
No advertising. No selling of your data.
We don’t sell your personal data. We don’t use your data for personalised advertising. We don’t want to know what else you do on the internet. And we don’t create personal advertising profiles for 10Zeit from your behaviour on our website.
If any of that changes, we’ll say so here.
Your rights
Subject to the legal requirements, you have the following rights in particular:
- Access to the personal data we process about you
- Rectification of inaccurate data
- Erasure of your data
- Restriction of processing
- Data portability
- Objection to certain processing
- Withdrawal of consent given, at any time with effect for the future
- Lodging a complaint with a data protection supervisory authority
For questions about data protection, the processing of your data or exercising your rights, you can write to us: hey@10zeit.art
Links
Here you’ll find the privacy notices of the services we use on this site or link to:
- Raidboxes – privacy
- INWX – privacy
- Cloudflare Turnstile – privacy
- BeyondSEO / rankingCoach – privacy & FAQ
- Instagram / Meta – privacy
- 10Zeit on Instagram
We want to stay easy to understand.
Privacy policies are often texts that hardly anyone reads. That’s why we try not just to list legal terms here, but to explain what actually happens on our website.
If we add a new service that processes data, it goes in here. If we remove a service, we take it out again.
And if there’s something you don’t understand or you want to know what happens to your data, just write to us: hey@10zeit.art
Version 1.7 · As of: 28 September 2026