Privacy Policy (Datenschutzerklärung)

1. Controller / Verantwortliche Stelle

The controller responsible for data processing on this website is:

[YOUR NAME OR COMPANY NAME]
[YOUR STREET ADDRESS]
[YOUR POSTAL CODE] [YOUR CITY]
Germany
Contact: Via our contact form

2. Overview of Data Processing

Personal data means any information relating to an identified or identifiable natural person. This includes information such as your name, email address, IP address, or other data that can be used to identify you directly or indirectly.

This privacy policy explains what personal data we collect when you visit our website, why we collect it, how we use it, and what rights you have regarding your data. We are committed to protecting your privacy and handling your data in accordance with the EU General Data Protection Regulation (GDPR/DSGVO).

3. Data Collection on This Website

3.1 Server Log Files

Our hosting provider automatically collects and stores information in server log files that your browser transmits when you visit our website. This information includes:

• IP address
• Date and time of access
• Browser type and version
• Operating system
• Referrer URL (the page you visited before)
• Pages accessed on our website

Purpose: This data is collected to ensure the security and stability of our website, to detect and prevent technical errors and abuse, and to improve our service.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and stable website operation).

Storage duration: Server logs are typically stored for up to 30 days and then automatically deleted, unless we need to retain them longer for security or legal reasons.

3.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies and similar technologies to analyze how visitors use our website. The information generated includes:

• Pages visited
• Time spent on pages
• Traffic sources (how you found our website)
• Geographic location (country/city level)
• Device and browser information
• Anonymized IP address

IP Anonymization: We have activated IP anonymization on this website. Your IP address is shortened by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before transmission to the United States.

Purpose: We use Google Analytics to understand how visitors use our website so we can improve user experience, content, and functionality.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in analyzing website usage for improvement purposes).

Data transfer to third countries: Google may transfer data to servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework.

Your options: You can prevent Google Analytics from tracking you by:

• Adjusting your browser settings to block cookies
• Installing the Google Analytics Opt-out Browser Add-on

More information: Google Privacy Policy

3.3 Contact Form

When you submit our contact form, we collect the following information:

• Your name
• Your email address
• Subject of your message
• Your message content
• Optionally: suggested cities or activities you want to share with us

Purpose: We collect this data to respond to your inquiry, process your feedback, and consider your suggestions for new cities or activities to feature on our website. If you suggest a city or activity, we may explore it and potentially add it to our platform, but we will never publicly display your personal contact information without your explicit consent.

Legal basis: Art. 6 para. 1 lit. b GDPR (processing necessary for performance of pre-contractual measures at your request) and/or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries and improving our service).

Storage duration: We store contact form data for as long as necessary to process your inquiry and any follow-up communication. Typically, this data is deleted after 2 years unless there is a legal obligation to retain it longer.

4. Data Recipients and Third Parties

4.1 Hosting Provider

This website is hosted on Netlify (Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). Server log files are processed by Netlify as part of their hosting service.

More information: Netlify Privacy Policy

4.2 No Selling or Marketing Use of Your Data

We do not sell your personal data. We do not share your data with third parties for their marketing purposes. Your data is only processed by us and our technical service providers (hosting, analytics) as described in this policy.

5. Cookies

This website uses cookies. Cookies are small text files that are stored on your device when you visit a website. They help us provide certain features and improve user experience.

Cookies we use:

• Google Analytics cookies: Used to track anonymized usage statistics (as described in section 3.2)

Managing cookies: You can configure your browser to refuse cookies or notify you when cookies are being sent. Please note that some features of our website may not function properly if you disable cookies.

6. Storage Duration

We store your personal data only as long as necessary for the purposes stated in this privacy policy or as required by law. Specific storage periods are mentioned in the relevant sections above.

7. Legal Bases for Data Processing

We process your personal data based on the following legal grounds under the GDPR:

• Art. 6 para. 1 lit. a GDPR: Consent (where you have given explicit consent)
• Art. 6 para. 1 lit. b GDPR: Performance of a contract or pre-contractual measures
• Art. 6 para. 1 lit. f GDPR: Legitimate interests (e.g., website security, analytics for improvement)

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You can request that we correct inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data in certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You can request that we limit how we process your data.
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.
• Right to lodge a complaint: You can file a complaint with a data protection supervisory authority if you believe your rights have been violated.

To exercise any of these rights, please contact us via our contact form

The supervisory authority responsible for Germany is your local State Office for Data Protection (Landesamt für Datenschutzaufsicht) or the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

9. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as contact form submissions. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar and the lock icon.

When SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

10. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, legal requirements, or website features. The current version is always available on this page.

Significant changes will be clearly indicated, and we encourage you to review this policy periodically.

11. Questions?

If you have any questions about this privacy policy or how we handle your data, please contact us via our contact form.