Privacy Policy

General Information

The protection of your personal data is very important to us. We process your data exclusively based on the applicable legal provisions (GDPR, TTDSG).

Use of Cookies, LocalStorage, and Similar Technologies

We use only technically necessary cookies and LocalStorage entries to ensure the basic functionality of our website. We do not use them for analytics or marketing purposes. Technically necessary cookies and local storage entries do not require separate consent (§ 25 Abs. 2 No. 2 TTDSG).

Details about LocalStorage Usage

We store starting points for search queries (either freely selectable or based on the location provided by the browser), filter settings, and session information in LocalStorage. This storage is based on §25 para. 2 no. 2 TTDSG and Art. 6 para. 1 lit. f GDPR (legitimate interest in a technically flawless and optimized provision of our services).

Web Analytics with Matomo

We use Matomo for statistical analysis of website usage. Matomo is operated on our own servers in Germany. IP addresses are anonymized immediately after collection. No cookies are set. Processing is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR (optimization of our web offering).

Map Display with Mapbox

For displaying interactive maps, we use Mapbox. Provider is Mapbox Inc., Washington, D.C., USA. Integration of this external service is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. When accessing pages with embedded maps, information, including your IP address, may be transmitted to Mapbox servers. Mapbox is committed to GDPR compliance. Telemetry data is disabled by us, so no analytical or usage data is transmitted to Mapbox. The use of Mapbox is technically necessary (§ 25 Abs. 2 No. 2 TTDSG).

Content Delivery Networks (CDN)

To deliver content faster, we use the services of Netlify, Amazon CloudFront and S3 (AWS), and jsDelivr. It's unlikely but not impossible that static files (e.g., images, scripts) are delivered via servers located outside the EU. An adequate level of data protection is ensured by standard contractual clauses (SCCs). IP addresses are processed in a technically necessary scope only, and no permanent storage of personal data takes place. The used CDN services rely on providers committed to compliance with the General Data Protection Regulation (GDPR). The use of these services is based on § 25 Abs. 2 No. 2 TTDSG and does not require separate consent.

Backend Servers

Our backend (e.g., API servers and database) is operated exclusively on servers located in Germany. No personal data is processed outside the EU.

Data Processing for Location and Route Search

For searching starting and destination locations as well as calculating routes, geocoding and routing services are used. Communication takes place exclusively via our own servers, so no direct transmission of personal data to external service providers occurs. For place suggestions, we may use Google Places, Nominatim, or VAO (Verkehrsauskunft Österreich). For route calculations, VAO, Targomo, or our own server may be used. The use of these services is technically necessary to ensure the core functionality of our application. Therefore, no consent is required pursuant to §25 (2) No. 2 TTDSG.

Server Logfiles

When visiting our website, information is automatically stored in server logfiles (e.g., IP address, date and time of access, retrieved file, browser type, and operating system). The servers are located exclusively in Germany. Storage is based on IT security reasons and the optimization of our services according to Art. 6 para. 1 lit. f GDPR. Log data is deleted regularly. No profiling takes place and the log files are deleted after maximum 14 days.

Embedding in Websites

Note: Our web application may be embedded in the websites of our business customers. The respective operators are responsible for their own privacy practices (e.g., when accessing the entire website).

Your Rights

You have the right to request information about your stored personal data at any time, as well as the right to rectification, restriction of processing, data portability, or deletion of these data. Furthermore, you can object to processing or revoke any consent given with effect for the future. You also have the right to lodge a complaint with a supervisory authority.

Contact

If you have any questions regarding data protection, please contact us at: hallo@naturtrip.org