1. Controller
Controller pursuant to Art. 4(7) EU General Data Protection Regulation (GDPR):
immerVR GmbH
Im Zollstock 12
91093 Hessdorf
Germany
Managing Director: Daniel Pohl
Email: support@immervr.com
If you have any questions about data protection or wish to exercise your data protection rights, please contact us using the email address above.
2. Scope
This Privacy Policy applies to immerNews and the associated website and services operated by immerVR GmbH.
We process personal data only to the extent necessary to provide, secure and operate the website and the services selected by you.
We do not sell personal data.
3. Hosting and server log files
immerNews is hosted by:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access the website, the web server automatically processes technical information transmitted by your browser. This may include your IP address, date and time of access, requested page or file, HTTP status code, amount of data transferred, referrer URL, browser type and version, language settings and operating system.
This processing is technically necessary to provide the website and to ensure its stability and security.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of immerNews.
Server log data is stored only for as long as necessary for security, error analysis and technical operation and is subsequently deleted or anonymized in accordance with the applicable retention rules.
STRATO processes hosting data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Some functions of immerNews use infrastructure operated by us under immervr.de and hosted by Hetzner Online GmbH in Germany. This currently includes the newsletter signup and verification service and may include self-hosted interactive 3D content embedded in articles. When your browser connects to these resources, technical request information such as your IP address, request time, requested resource, response status and browser information is processed as necessary to deliver and secure the respective service.
Server access logs on this Hetzner infrastructure are configured to anonymize IP addresses. Technical logs are used for secure operation and troubleshooting and are retained only in accordance with our applicable log-retention configuration. More specific information about newsletter-related processing is provided in Section 6 below.
4. Cookies and consent settings
To operate immerNews and keep it secure, we use cookies and similar technologies where they are technically necessary. These can support WordPress and security functions, commenting features, and remembering your privacy choices.
For technologies that require consent, activation depends on your permission. You can change your choices or withdraw that permission using the website’s Privacy Settings.
The newsletter form’s ALTCHA integration does not set cookies or use localStorage or sessionStorage. Its software loads when you start using the form or press “Load verification”. Section 6 describes this verification and the associated data processing.
Website statistics are collected with the locally operated Koko Analytics installation described in section 5. We do not use Google Analytics.
5. Website statistics
We use Koko Analytics to obtain basic statistical information about the use of immerNews, such as page views, approximate visitor numbers and referring websites.
Koko Analytics is operated locally on our WordPress installation and does not use cookies in our configuration. To distinguish visits during the same day, a one-way identifier is generated from technical information transmitted by the browser, including the IP address and user-agent, together with a secret value that changes daily. The IP address and user-agent are not stored by Koko Analytics for this purpose, and the temporary identifiers are deleted daily.
The resulting statistics are stored locally on our server and are not transmitted to Koko Analytics or another analytics provider. We use these statistics to understand which content is of interest to our readers and to improve immerNews.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is obtaining privacy-friendly statistical information about the use of our website in order to evaluate and improve our content.
6. Newsletter and Brevo
You can voluntarily subscribe to one or both of the following email newsletters:
immerNews – news, reviews, hands-on articles and guides on immersive cameras and media.
immerGallery Updates – product updates, new features and tutorials for immerGallery.
We process your email address and newsletter selection to provide the newsletters you have chosen, on the basis of your consent pursuant to Art. 6(1)(a) GDPR.
For newsletter delivery and subscription-confirmation emails, we use Brevo, formerly Sendinblue. Brevo processes newsletter data on our behalf under a data processing agreement. Brevo states that the servers hosting its databases are located in the European Union.
Signup and double opt-in
Our newsletter form sends your submission to the signup service operated by us under immervr.de, hosted with Hetzner Online GmbH in Germany. Your browser does not connect to Brevo merely to display or submit this form.
Our service checks the submission for automated or repeated requests. If accepted, our server sends your email address and the eligible newsletters you selected to Brevo to request a confirmation email. This server-to-server request does not include your browser’s IP address or the ALTCHA verification proof.
We use a double opt-in procedure. A new subscription becomes active only after you confirm it using the link in the confirmation email. Following this link connects your browser to Brevo, which processes the information required to confirm the subscription, including technical connection information such as your IP address.
Brevo sends these confirmation messages as transactional emails. It processes delivery and confirmation records, such as the recipient address, relevant timestamps, delivery or bounce status and confirmation events. Opening and link-click events for confirmation messages may also be recorded in connection with the recipient. These records are separate from the anonymous newsletter campaign statistics described below.
Registration and confirmation records help us document your consent. The temporary security records in our signup service are separate from the subscription and confirmation records held in Brevo.
Protection against automated registrations
We use a self-hosted ALTCHA verification component to protect the signup service against automated requests and unwanted confirmation emails. Its software is supplied from our server at immervr.de when you first use the email field or newsletter choices, or activate the “Load verification” button. Activating the verification checkbox starts a short calculation in your browser.
The verification component does not contact an external CAPTCHA provider. Our signup integration does not set cookies or use localStorage or sessionStorage. ALTCHA’s optional collection of pointer and scrolling interactions is disabled. These statements concern the signup integration; other website functions are described separately in this policy.
To provide and secure this service, we process your IP address, request time and technical verification information. When you submit the form, we also process your email address and newsletter selection. Loading the verification software alone does not submit the email address entered in the form.
For temporary request limits and protection against repeated use of a verification, we store keyed identifiers derived from IP addresses and email addresses, together with request times, newsletter identifiers and verification-use records. These identifiers are pseudonymous personal data. The abuse-prevention database does not store readable email addresses or IP addresses.
Rate-limit records expire after 24 hours and are removed from the active database by hourly cleanup, normally within approximately 25 hours of their creation. Verification-use records expire sooner and are removed by the same cleanup. This period applies only to records in the active abuse-prevention database. Server logs, any backup copies and Brevo subscriber or confirmation records have separate retention arrangements. The retention of Hetzner server logs is described in section 3.
The legal basis for this limited abuse-prevention processing is Art. 6(1)(f) GDPR. Our legitimate interests are protecting the signup service and preventing misuse of email addresses.
Newsletter campaign statistics
Brevo’s Anonymous Email Tracking feature is enabled for our newsletter campaigns. Brevo may technically measure email openings and link clicks to create overall campaign statistics. With anonymous tracking enabled, opening and clicking information is not associated with identifiable individual newsletter contacts in the reports available to us.
We receive aggregate statistics such as overall opening and click rates. We cannot determine from these statistics which particular subscriber opened a newsletter campaign or clicked a link in it. This statement concerns newsletter campaigns, rather than the transactional confirmation messages described above.
Withdrawal of newsletter consent
You may withdraw your newsletter consent at any time, for example by using the unsubscribe link contained in each newsletter or by contacting us at support@immervr.com.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. After unsubscribing, your address will no longer be used for the newsletter delivery covered by your withdrawal. Limited information may be retained where necessary to document the previous consent, comply with legal obligations or ensure that an unsubscribed address is not inadvertently added to the mailing list again.
Privacy information from Brevo is available at:
https://www.brevo.com/legal/privacypolicy/
7. RSS feed
immerNews provides RSS feeds that can be accessed without creating a user account or providing an email address.
When an RSS reader requests a feed from our server, the same technical server log data described under “Hosting and server log files” may be processed.
8. Contact by email
If you contact us by email, we process the information provided by you, including your email address and the content of your message, in order to respond to your enquiry.
The legal basis is Art. 6(1)(b) GDPR where the communication concerns contractual or pre-contractual matters and Art. 6(1)(f) GDPR for other enquiries. Our legitimate interest is communicating with users, readers, business partners and other interested persons.
Messages are stored only as long as necessary to handle the enquiry and to comply with applicable legal retention obligations.
9. Comments
If comments are enabled for an article and you submit a comment, we may process information such as your chosen name, email address, comment text, date and time of submission and IP address.
Your email address is not published.
Comments may be reviewed manually before publication. The processing of comment and moderation data serves the operation of the discussion function, prevention of abuse and spam, protection of our rights and the rights of third parties, and compliance with legal obligations.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interests are providing a moderated discussion function, preventing misuse and maintaining the security and integrity of the website.
Published comments may remain stored for as long as the associated article and discussion remain available. Rejected comments, spam and moderation data are deleted when they are no longer required.
Where WordPress offers the option to remember comment details in your browser, this may involve cookies. Where required, these are handled in accordance with the website’s consent settings.
10. YouTube and external media
immerNews may embed videos from YouTube.
Where technically implemented, external YouTube content is blocked until you actively consent to loading it. Before consent, no direct YouTube embed should be loaded through the respective placeholder.
If you choose to load a YouTube video, your browser establishes a connection to YouTube/Google. In this process, technical information such as your IP address, device and browser information and information about the requested content may be processed by Google. If you are signed in to a Google account, Google may be able to associate your use with that account.
The legal basis for loading consent-dependent YouTube content is Art. 6(1)(a) GDPR.
You can withdraw or change your consent through the Privacy Settings.
11. Interactive 3D content
Some immerNews articles may contain interactive 3D models. These models are displayed using a viewer hosted by us under immervr.de on infrastructure provided by Hetzner Online GmbH in Germany.
When an article containing such a viewer is loaded, your browser connects to immervr.de to retrieve the viewer and the respective 3D model. In doing so, technical connection information, including your IP address, is necessarily processed to deliver the content. Server access logs are configured to anonymize IP addresses.
The viewer software and 3D model files are served directly from our infrastructure. The 3D rendering itself takes place locally in your browser.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is providing interactive editorial content about immersive media and related technologies in a privacy-friendly manner.
12. Social media and external links
immerNews contains links to external platforms and social media services, which may include YouTube, Discord, X, Facebook, Instagram and other services.
Our normal social-media icons are simple external links. Merely loading an immerNews page does not establish a connection to those platforms through these links.
If you click an external link, you leave immerNews and the respective provider processes data under its own responsibility. Please refer to the privacy information of the respective provider.
13. Affiliate links
Some articles on immerNews may contain affiliate links to products or services from third-party providers.
If you click an affiliate link, you leave immerNews and are redirected to the respective provider. The provider may process technical and referral information and may use cookies or similar technologies to attribute a later purchase to immerNews. If you make a qualifying purchase, immerVR GmbH may receive a commission.
Affiliate links do not establish a connection to the respective provider merely by loading an immerNews page. Data processing by the respective provider begins when you follow the link and is subject to that provider’s privacy information.
14. Backups
We create backups of the website and its database to ensure availability, integrity and recovery in the event of technical problems or data loss.
Backups may temporarily contain copies of personal data that were present on the website at the time the backup was created.
Backup copies may be transferred over an encrypted connection to a server hosted by Hetzner Online GmbH. After automated integrity checks, backup archives are stored in encrypted form in a separate backup storage environment that is not accessible from the website.
The processing of personal data for backup and recovery purposes is based on Art. 6(1)(f) GDPR. Our legitimate interest is maintaining the availability, integrity and recoverability of immerNews and protecting against data loss.
Backups are protected against unauthorized access and are retained only in accordance with our backup and retention schedule. Deleted information may therefore remain in backup copies until the respective backup is automatically deleted in accordance with that schedule.
15. Recipients and processors
Where necessary for operating immerNews, personal data may be processed by service providers acting on our behalf, in particular hosting, backup infrastructure and email service providers.
We enter into data processing agreements pursuant to Art. 28 GDPR where required.
If a service involves a transfer of personal data outside the European Economic Area, we use the safeguards required under applicable data protection law where necessary.
16. Storage duration
Unless a more specific storage period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective purpose.
Data may be retained for a longer period where required by statutory retention obligations or where necessary to establish, exercise or defend legal claims.
17. Your rights under the GDPR
Subject to the applicable legal requirements, you have the right to:
- access your personal data (Art. 15 GDPR);
- request rectification of inaccurate data (Art. 16 GDPR);
- request erasure of your data (Art. 17 GDPR);
- request restriction of processing (Art. 18 GDPR);
- receive data in a portable format where applicable (Art. 20 GDPR);
- object to processing based on legitimate interests (Art. 21 GDPR);
- withdraw consent at any time with effect for the future (Art. 7(3) GDPR);
- lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).
To exercise your rights, please contact support@immervr.com.
18. Changes to this Privacy Policy
We may update this Privacy Policy when the website, our services, legal requirements or the providers we use change.
The version published on this page is the current version.
Last updated: 22. September 2026