Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Jörn von Grabe / Mallorca-Touren
Lucile-Grahn-Straße 31
81675 Munich Germany
Email: servus@mallorca-touren.com

Further information about the provider can be found in our Legal Notice (Impressum).

2. General Information on Data Processing

The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable legal provisions, in particular the GDPR and the TDDDG.

You can generally visit our website without actively providing personal data. However, when you access the website, certain technical data is processed in order to operate, secure and provide the website.

3. Hosting and Server Log Files

When our website is accessed, the hosting provider automatically collects information in so-called server log files. This includes in particular:

IP address of the requesting device
date and time of access
accessed page or file referrer URL
browser type and browser version
operating system
used hostname of the accessing computer

This data is processed in order to provide the website technically, ensure system security and stability, and detect and defend against misuse and attacks.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of our website.

The log files are stored only for as long as necessary for the purposes stated above.

4. Cookies and Consent Management

Our website uses cookies and similar technologies. We distinguish between technically necessary functions and optional services.

We use a consent management tool to manage your consent for certain categories. Your selection, the time of your decision and technical proof data are stored so that we can document your consent or refusal and respect your settings.

The following categories are currently used on our website in particular:

Functional: technically necessary services required for the operation of the website
Statistics
: services used for reach measurement and analysis
External Media
: embedded external content, especially maps and tracks

The Functional category is required for the technical operation of the website. Statistics and External Media are only activated if you have expressly consented to them.

Legal bases: Art. 6(1)(c) GDPR insofar as processing serves to document granted consent, Art. 6(1)(f) GDPR for the management of your privacy settings, and Section 25 TDDDG and/or Art. 6(1)(a) GDPR for optional services requiring consent.

You may change or withdraw your consent at any time with future effect via the consent tool on our website.

5. Contact by Email or Contact Form

If you contact us by email or via a contact form, we process the data you provide in order to handle your enquiry. This includes in particular:

name
email
address
content of your message
any other information voluntarily provided

The data is processed exclusively for the purpose of handling your enquiry and communicating with you.

Legal basis: Art. 6(1)(b) GDPR if your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of enquiries.

Your data will be deleted once your enquiry has been conclusively processed, unless statutory retention obligations require otherwise.

6. Interactive Maps, Tracks and Weather Maps

We provide interactive maps, tour tracks and weather maps on our website. The tour tracks and GPX content are maintained by us and provided via our own website. For the map display we use the WordPress plugin Maps Marker Pro. From a data protection perspective, however, what matters is not the plugin as such, but whether external map or weather services are loaded when a map is displayed.

Depending on the selected map or weather view, content may be loaded from the following external providers:

OpenStreet
MapOpenTopo
MapMetGIS
for weather data and weather maps

When external map or weather content is loaded, your browser establishes a connection to the servers of the respective provider. In doing so, the following data may in particular be transmitted to the respective provider:

your IP address
date and time of access
the page accessed
technical information about browser and device
where applicable, interaction data when using map functions

External map and weather content is only loaded on our website if you have consented to the External Media category in the consent tool. Processing then takes place on the basis of Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG. You may withdraw your consent at any time with future effect via the consent tool.

Please note that the respective external providers are responsible for any further processing of data on their side.

7. Web Analytics with Google Analytics 4

Provided that you have consented to the Statistics category, we use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The integration is carried out via the WordPress plugin Site Kit by Google.

Google Analytics uses cookies and similar technologies to collect information about the use of our website. The following information may in particular be processed:

pages viewed and screen views
interactions on the website
technical information about browser and device
referrer information
approximate location
pseudonymous identifiers
duration and frequency of visits

We use Google Analytics to statistically analyse the use of our website and improve our offering.

According to Google, IP addresses of EU users are not logged or stored in Google Analytics 4. We nevertheless inform you that the use of Google Analytics may involve processing operations by Google and, depending on the configuration, transfers of data cannot be fully ruled out.

Legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG.

You can withdraw your consent at any time with future effect via the consent tool. You may also prevent the storage of cookies by adjusting your browser settings accordingly.

Further information on data protection at Google can be found in Google’s privacy policy and in the information provided on Google Analytics.

8. Embedded PayPal Donation Button

An embedded PayPal donation button is integrated into our website. If you use it, data will be transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, insofar as this is necessary for the display, provision or execution of the donation process.

Depending on the technical implementation, data may already be transmitted to PayPal when the button is loaded or, at the latest, when it is used. This may in particular include:

IP address
technical browser and device data
date and time of access
information about the page visited
data entered by you as part of the donation process

Legal basis is Art. 6(1)(b) GDPR insofar as processing is necessary to carry out a donation process initiated by you. Insofar as consent is required for the technical integration or execution of the button, processing takes place on the basis of Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG.

Further information can be found in PayPal’s privacy policy.

9. Storage Period

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

This means in particular:

server log files: only for the period necessary to ensure operation and IT security
contact enquiries: until the enquiry has been fully processed, thereafter only insofar as statutory retention obligations apply
records of consent: for as long as necessary to document your consent or withdrawal
statistical data from Google Analytics: in accordance with the retention periods configured in our Analytics account
payment or donation data: insofar as necessary to carry out and document the donation process or as required by law

10. Your Rights

Under the GDPR, you have in particular the following rights:

right of access to the personal data we process about you
right to rectification of inaccurate data
right to erasure of your data
right to restriction of processing
right to data portability
right to object to processing
right to withdraw any consent given, with future effect

If you would like to exercise any of these rights, an informal message to the contact details given above is sufficient.

11. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The authority responsible for us is in particular:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18 91522 Ansbach Germany Email: poststelle@lda.bayern.de Website: www.lda.bayern.de

12. Legal Bases of Processing

Unless a more specific legal basis is stated in this privacy policy, the following legal bases in particular may apply:

Art. 6(1)(a) GDPR – consent Art. 6(1)(b) GDPR – processing for the performance of a contract or in order to take steps prior to entering into a contract Art. 6(1)(c) GDPR – processing for compliance with a legal obligation Art. 6(1)(f) GDPR – processing based on legitimate interests Section 25 TDDDG – storage of information on end devices or access to such information, insofar as consent is required or a statutory exception applies

13. No Automated Decision-Making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

14. Current Version and Changes to this Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or reflects changes to our website and services. The current version of the privacy policy applies to your next visit.

DE | EN