Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

Anna Schober
Postal address: see legal notice

Email: info@headoffernweh.de

2. General information

Personal data is any information that can be used to identify a person directly or indirectly. We process personal data only where this is necessary to operate this website securely and reliably, to respond to enquiries or on the basis of consent.

This website does not use user accounts, a contact form or a comment function. Optional analytics services are loaded only if you have first consented through the consent manager.

3. Hosting by Hostinger and server log files

This website is hosted by Hostinger. The provider and processor is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Germany is selected as the server location.

When you visit the website, your browser sends technically necessary data to Hostinger’s servers. This may include your IP address, the date and time of access, the requested file or URL, request type, HTTP status code, amount of data transferred, referrer URL, browser type, operating system and hostname of the accessing device. Hostinger keeps server and access logs for this purpose. Processing is necessary to deliver the website, ensure its stability and security, analyse errors and prevent misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, uninterrupted and technically necessary operation of this website. We have entered into a data processing agreement with Hostinger pursuant to Article 28 GDPR. Hostinger is therefore required to process personal data only on our instructions and within the scope of the agreed services.

Log data is deleted or anonymised as soon as it is no longer required for these purposes, unless security-related retention or a legal obligation requires longer storage. The availability of individual logs in the Hostinger control panel may vary depending on the type of log and hosting plan.

Hostinger may use affiliated companies and contractually bound sub-processors. Where data is processed outside the European Union or European Economic Area, Hostinger states that it relies in particular on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

Further information is available in Hostinger’s Privacy Policy and Data Processing Addendum.

4. Contact by email

If you contact us by email, we process your email address, the content of your message and any information you provide voluntarily in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where your enquiry relates to steps prior to entering into a contract or to the performance of a contract. In all other cases, processing is based on Article 6(1)(f) GDPR; our legitimate interest is responding to enquiries.

Gmail is used to receive email. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States cannot be ruled out. Messages are deleted once the enquiry has been fully resolved and no statutory retention obligations or legitimate interests require further storage.

5. Local storage for the packing list

The interactive packing list in the Dolomites article stores the boxes you tick exclusively in your browser’s local storage. The data is not transmitted to us or to third parties. This storage is necessary so that your selected status remains available when you reopen the page. The legal basis for local storage is Section 25(2) no. 2 TDDDG; no further processing of personal data by us takes place. You can remove the saved status using the “Reset list” button or by deleting this website’s data in your browser.

6. Consent management with Klaro!

We use the Klaro! consent manager, which is hosted locally on this website, to request, record and apply your choices regarding optional services. Klaro! stores your decision in the technically necessary headoffernweh-consent cookie for 180 days. No connection is made to an external Klaro service.

Storing your choice is necessary so that you are not asked again on every page view and so that services can be blocked or enabled according to your decision. The legal basis for storing the consent decision is Section 25(2) no. 2 TDDDG. Where the record is required to meet legal proof obligations, processing is based on Article 6(1)(c) GDPR.

You can change or withdraw your choice at any time through “Cookie settings” in the footer. Withdrawal applies to the future. Alternatively, you can delete this website’s data in your browser.

7. Google Analytics 4

Following your explicit consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics operates in Basic Consent Mode: before you consent, neither the Google Analytics script nor a connection to Google Analytics is loaded.

After consent, page views, approximate location information, technical details about your browser and device, referrer information, interactions and a pseudonymous identifier may be processed. The purpose is to understand how the blog is used and to improve its content. The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR.

Google may also process data on servers in the United States. Transfers to certified US companies may rely on the EU–US Data Privacy Framework; additional safeguards such as Standard Contractual Clauses may also be used. Further information is available in Google’s Privacy Policy.

After you consent, Google Analytics sets the _ga and _ga_P1ZTRJE7FL cookies. They are used to distinguish users and sessions pseudonymously. Their lifetime is technically limited to a maximum of 60 days and is not extended on subsequent page views. When consent is withdrawn, the consent manager deletes these cookies where they are present in the browser.

The retention period for event-related data in Google Analytics is set to 2 months. You can withdraw your consent at any time through “Cookie settings”.

8. Interactive maps with OpenStreetMap

Some travel guides contain an optional interactive map built with Leaflet and map tiles from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (OSMF).

The detailed map is not loaded automatically. Only after you select “Load detailed map” does your browser retrieve the Leaflet files from unpkg.com and the required map tiles directly from OSMF servers. The providers may process your IP address, browser and device information, operating system, referring page, time of access and requested resources. Processing outside the European Union or European Economic Area cannot be ruled out.

Your deliberate selection is the legal basis for loading the map under Article 6(1)(a) GDPR and Section 25(1) TDDDG. No map consent is stored on your device. You can use the complete article without loading the detailed map. Leaving or reloading the page ends the active map session, although requests already transmitted cannot be reversed.

Further information is available in the OpenStreetMap Foundation Privacy Policy and the UNPKG website.

9. GetYourGuide affiliate widgets

Some travel guides can load widgets supplied by GetYourGuide Deutschland GmbH, Sonnenburger Straße 73, 10437 Berlin, Germany, after you give explicit consent. The widgets display bookable activities and tours. If you book through an affiliate link contained in a widget, I may receive a commission. The price does not change for you.

The script from widget.getyourguide.com is loaded only after your consent. GetYourGuide may process your IP address, technical browser and device information, the page visited, times, clicks and a pseudonymous visitor identifier. The script may store gyg_visitor_id and other information beginning with gyg_ in cookies, local storage or session storage. It may also connect to collector.getyourguide.com to attribute views, clicks and a later booking to the affiliate partner.

The legal basis for storing or accessing information on your device is Section 25(1) TDDDG. The legal basis for the subsequent processing of personal data is Article 6(1)(a) GDPR. Without consent, the widget remains blocked and no connection to GetYourGuide is made. You can withdraw your consent at any time through “Cookie settings” in the footer. When consent is withdrawn, this website removes known GetYourGuide cookies and browser storage entries where technically possible.

More information about processing, recipients and possible international transfers is available in the GetYourGuide Privacy Policy.

10. Legal bases and retention periods

Unless this privacy policy states otherwise, we process data on the basis of Article 6(1)(a) GDPR where consent has been given, Article 6(1)(b) GDPR for contractual or pre-contractual measures, Article 6(1)(c) GDPR for legal obligations and Article 6(1)(f) GDPR for legitimate interests. Data is deleted once the relevant purpose no longer applies and no statutory retention obligations or overriding legitimate interests prevent deletion.

11. Your data protection rights

Subject to the statutory requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR and data portability under Article 20 GDPR. You may withdraw consent at any time with effect for the future.

Where processing is based on Article 6(1)(e) or (f) GDPR, Article 21 GDPR gives you the right to object to processing on grounds relating to your particular situation.

12. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority generally responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany. You may also contact another competent supervisory authority.

13. Updates to this privacy policy

We update this privacy policy when the website, the services used or the legal requirements change. The version published on this page applies.

14. Language version

This English version is provided for convenience. In the event of any discrepancy, the German privacy policy is authoritative.