Privacy Policy

1. Data Controller

The data controller pursuant to Art. 4 No. 7 of Regulation (EU) 2016/679 (GDPR):

Alessio Postorivo
Höferstraße 10
42551 Velbert
Germany
Email: [email protected]

2. Hosting

This website is hosted by a provider with servers located in Germany (Contabo GmbH).
To ensure technical security and stability, a Content Delivery and protection service is used.
IP addresses may be processed in this context.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and stability of the website).

3. Registration and Account

When registering, the following data is processed:

  • Email address
  • Password (stored in encrypted form)
  • IP address (system logs)
  • Usage data associated with the account
  • Review contents

Registration takes place via email verification (Double Opt-In).
Legal basis: Art. 6(1)(b) GDPR (performance of the usage agreement).

4. Reviews

Reviews are published automatically after submission.
Verification only takes place in the event of a report.
Reports can be submitted by email to [email protected].
Reviews are only permitted for registered users.
Anonymous reviews are not permitted.

5. Geolocation

To display relevant content, an approximate location based on the IP address may be determined.
No profiling is carried out.
GPS data is used exclusively with explicit consent.
Legal basis: Art. 6(1)(a) GDPR (consent for GPS).

6. Cookies

Technically necessary cookies:

  • Session cookies
  • Security cookies (CSRF)
  • Login remember function
  • Language settings

Analytics cookies:

  • Analytics tool with IP anonymisation

Analytics cookies are only activated with consent via the cookie banner.

7. Analytics Tool

A statistical evaluation tool is used.
The IP address is anonymised before storage.
Processing takes place exclusively with consent pursuant to Art. 6(1)(a) GDPR.
A transfer of data to third countries cannot be excluded.
This is done on the basis of appropriate safeguards pursuant to Arts. 44 et seq. GDPR.

8. Integration of External Services

External services may be integrated for the display of maps or videos.
These services are only activated with consent.

9. Retention Period

Personal data is stored for the duration of the account or in compliance with any legal retention obligations.
Server log data is stored for security reasons for a maximum of 30 days.

10. Rights of Data Subjects

Data subjects have the right to:

  • Access to data
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Withdrawal of consent
  • Lodge a complaint with a supervisory authority

Competent authority: Landesbeauftragte für Datenschutz Nordrhein-Westfalen.
Requests can be sent to [email protected].

11. Account Deletion and Limited Data Retention

Upon account deletion, personal data is erased or anonymised without undue delay.

Any published reviews may remain online in anonymised form, subject to the user's consent. In that case, the name will be replaced with "No longer registered user".

To prevent abuse and ensure the integrity of the review system, the email address may be retained in a protected and separate form for a maximum period of 30 days from deletion, on the basis of the legitimate interest of the data controller (Art. 6(1)(f) GDPR). After this period, the email address will be permanently deleted.