Privacy Policy

Last updated: October 2026

This English translation is provided for convenience only. In case of discrepancies, the German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Joshua Schultheis
c/o flexdienst – #21926
Kurt-Schumacher-Straße 74
67663 Kaiserslautern
Germany
Email: info@bilateral-briefing.com

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Overview

I process personal data only to the extent necessary to operate this website, to provide the newsletter and subscriptions, and to communicate with you. The legal bases are in particular:

  • Art. 6(1)(a) GDPR (consent),
  • Art. 6(1)(b) GDPR (contract and pre-contractual measures),
  • Art. 6(1)(c) GDPR (legal obligation),
  • Art. 6(1)(f) GDPR (legitimate interests).

Storing information on your device or accessing information stored there is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit the website, information transmitted by your browser is automatically recorded (server log files):

  • IP address,
  • date and time of access,
  • page or file accessed,
  • referrer URL (previously visited page),
  • browser type and version, operating system,
  • amount of data transferred and HTTP status code.

This data is technically necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR. The log files are automatically deleted after a short period unless they are needed to investigate a security incident. A data processing agreement pursuant to Art. 28 GDPR has been concluded with IONOS.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

5. Cookies

This website uses only technically necessary cookies and similar technologies. These include:

  • a cookie from Steady (see section 6) that stores your login as a subscriber so that you can read unlocked content,
  • WordPress cookies that are set only for logged-in members of the editorial team.

The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(b) or (f) GDPR. I do not use tracking or advertising cookies. You can delete or block cookies in your browser settings at any time; however, you will then no longer be able to access subscriber content.

6. Subscriptions, paywall and newsletter via Steady

For subscriptions, the paywall and newsletter delivery, I use the Steady platform operated by Steady Media GmbH, Voltastr. 5, 13355 Berlin, Germany.

Integration on the website: To make the paywall and subscription options work, a script is loaded from Steady’s servers (steady.page, steadycdn.com) when you visit this website. In the process, your IP address is transmitted to Steady. The legal basis is my legitimate interest in reliably financing my independent journalism (Art. 6(1)(f) GDPR) and, if you are a subscriber, the performance of the subscription contract (Art. 6(1)(b) GDPR).

Taking out a subscription: If you take out a subscription, you enter your data (e.g. name, email address, payment details) directly with Steady. Steady handles the conclusion of the contract, payment and billing, and uses payment service providers for this purpose (e.g. PayPal, credit card providers, GoCardless). I receive from Steady the information I need to look after my subscribers, such as name, email address and chosen subscription plan – but not complete payment details. The legal basis is Art. 6(1)(b) GDPR. Data relevant for tax purposes is retained in accordance with statutory retention obligations (Art. 6(1)(c) GDPR).

Newsletter: If you sign up for the newsletter, your email address is stored by Steady and used to send it. Sign-up uses the double opt-in procedure: you will receive an email asking you to confirm your subscription. The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the unsubscribe link in every issue or by emailing me. Your data will be deleted after you unsubscribe unless statutory obligations or an active paid subscription require otherwise. Whether and to what extent Steady evaluates opens or clicks when sending newsletters is described in Steady’s privacy policy.

Further information can be found in Steady’s privacy policy: https://steady.page/en/privacy

7. Contact by email

If you send me an email, I process the information you provide (email address, name, content of the message) in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, and otherwise my legitimate interest in handling your request (Art. 6(1)(f) GDPR). I delete the data as soon as it is no longer required and no statutory retention obligations apply.

Tips sent to the editorial team, for example from sources or whistleblowers, are treated confidentially and within the framework of journalistic source protection.

8. Embedded third-party content

Individual articles may contain embedded content from other providers, such as videos, social media posts or podcasts. Such content is only loaded once you agree to this with a click. Only then is a connection established to the respective provider, which receives at least your IP address and the information about which page you visited, and may set cookies. If you are logged in with the provider, it may associate the visit with your account. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future.

The following providers in particular may be involved:

Some of these providers also process data in the USA. Where certified, these companies or their US parent companies are committed to an adequate level of data protection under the EU-U.S. Data Privacy Framework (Art. 45 GDPR); otherwise, the transfer is based on standard contractual clauses (Art. 46 GDPR).

9. Social media profiles

The Bilateral Briefing is present on LinkedIn, X, Bluesky, Instagram and Facebook. On this website, these profiles are merely linked. Simply visiting this website does not transmit any data to these networks; the respective provider’s privacy policy only applies once you follow a link.

When you visit my profiles on these platforms, the operators process your data under their own responsibility, for example for statistics and advertising. For the statistics functions (“Insights”) of my Facebook and Instagram pages, I am jointly responsible with Meta Platforms Ireland Limited (Art. 26 GDPR). In an agreement, Meta has undertaken to assume primary responsibility for this processing and to fulfil data subject rights: https://www.facebook.com/legal/terms/page_controller_addendum. The same applies to LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). The legal basis for my presence on these platforms is my legitimate interest in distributing my journalistic work (Art. 6(1)(f) GDPR).

Privacy information of the platforms:

10. Your rights

Within the scope of the statutory provisions, you have the right at any time to:

  • access the data stored about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw any consent given, with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where I process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an email to info@bilateral-briefing.com is sufficient.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for me is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
(State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate)
Hintere Bleiche 34, 55116 Mainz, Germany
https://www.datenschutz.rlp.de

11. Storage period

Unless a more specific storage period is stated in this policy, I store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations (in particular under commercial and tax law).

12. Changes

I will update this privacy policy if the website, the services used or the legal situation change. The version published here applies.

Scroll to Top