Privacy

This is a courtesy translation; the German version is legally binding. Read the German version (Datenschutzerklärung).

1. Controller

For more details, see our Legal Notice.

2. Visiting the website and server logs

Whenever you open a page, our server processes technically necessary data: IP address, date and time, requested URL, amount of data transferred, status code, referring page, and browser and operating system (user agent). This is necessary to deliver the site, keep it secure, and prevent abuse (e.g., attacks, excessive requests). The legal basis is Art. 6(1)(f) GDPR (DSGVO); our legitimate interest is the secure and stable operation of the website. Log data is deleted after 14 days at the latest unless it is needed to investigate a specific security incident.

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in Germany; we have a data processing agreement with Hetzner pursuant to Art. 28 GDPR. We send emails (e.g., about your account) via our own mail server, also hosted by Hetzner.

3. Cookies and local storage

We do not use cookies for analytics or advertising. We only use technically necessary cookies:

Session cookie

“travelguide195_session” – maintains your session (e.g., when submitting a comment); expires after 2 hours of inactivity.

XSRF-TOKEN

Protects forms against abuse by other websites (cross-site request forgery); same lifetime.

Saved places

Places you save are stored locally by your browser (localStorage, “wanderly_fav”). This data never leaves your device.

The legal basis is § 25(2) No. 2 TDDDG (German Telecommunications Digital Services Data Protection Act; strictly necessary) and Art. 6(1)(f) GDPR. No consent is required for this; you can delete cookies and local storage in your browser at any time.

3a. Audience measurement

To understand which pages are used, we measure our reach with VisualClicks, a service of DAI-KOMIO e.K. (see above) that runs on our server at Hetzner in Germany. It records pages viewed, time on page, scroll depth, referring page, and general information about device, browser, and country of origin. The measurement works without cookies and without a persistent identifier in your browser; visits are not linked to a person across multiple days, and no data is shared with third parties. If your browser sends the “Global Privacy Control” signal, nothing is recorded. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving our service.

4. User account

For an account, we store your username, first name, last name, email address, country, and your password (only as an irreversible hash). Only your username is publicly visible. Purpose: to link reviews and photos to an account, show them to you for editing, and save routes. The legal basis is Art. 6(1)(b) GDPR (user agreement). After you log in, we also set a cookie that keeps you logged in (“remember_web_…”, for up to 400 days or until you log out). You can delete your account yourself at any time under “My account.” When you do, we delete your name, email address, password, country, saved routes, and login sessions; your reviews and photos remain, no longer linked to you, as “Deleted member.” You can delete individual posts yourself beforehand or have them removed at any time by writing to the address above.

4a. Photos

Photos you upload with a review are resized and saved as a new image file; in the process, all embedded metadata such as camera, time taken, and GPS location is removed. The photos are displayed publicly together with your username. Please only upload your own photos and make sure that identifiable people have given their consent.

4b. Comments and reviews

When you review a place, we store the link to your account, the star rating, the optional month of your visit, and your text. To protect against spam and multiple reviews, we also store an irreversible hash of your IP address – not the IP address itself. Comments are reviewed before publication and then displayed publicly with your username. The legal basis is Art. 6(1)(a) and (f) GDPR. We will delete your post on request – just send a message to the address above.

5. Third-party content

Some content is loaded by your browser directly from other providers’ servers. For technical reasons, the respective provider receives your IP address and the information about which page you visited. We have no influence on this; the provider’s privacy policy applies. The legal basis is Art. 6(1)(f) GDPR (clear presentation with maps and photos).

Maps

Map tiles from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (EU Commission adequacy decision). Details: osmfoundation.org/wiki/Privacy_Policy

Concert images

Concert images come from Ticketmaster (Live Nation Entertainment, USA) and are loaded from their servers. Details: privacy.ticketmaster.de

Hotel photos

Photos of individual hotels are loaded by your browser from Hotelbeds (Hotelbeds Spain S.L.U., Palma de Mallorca, Spain).

We do not load photos of places and cities or fonts from third parties; they are served from our own server. We list the authors and licenses of the photos on our “Photo credits” page. Weather data (MET Norway) and concert dates are retrieved by our server – no data about you is shared in the process.

6. Links to other providers

Links to tickets, hotels, or restaurant websites lead to other providers. Data is only transferred to the respective provider once you click such a link; their privacy policy applies there. Some links may be affiliate links through which we receive a commission on a booking – at no extra cost to you.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, simply contact info@travelguide195.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg Commissioner for Data Protection and Access to Information), Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany.

8. Changes

We update this policy if the website or the legal situation changes. Last updated: November 2026.