The protection of your personal data matters to us. This policy informs you, pursuant to Articles 13 and 14 of the General Data Protection Regulation (GDPR), which personal data we process when you visit this website and use our services.
1. Controller
The controller responsible for data processing on this website is:
[FULL LEGAL NAME OF THE OPERATOR]
[STREET AND HOUSE NUMBER]
[POSTAL CODE AND CITY]
Germany
Email: contact@thetravelersarchive.earth
[No data protection officer has been appointed, as the conditions of Article 37 GDPR are not met.]
2. Your rights
In respect of your personal data you have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and a right to object to processing (Art. 21 GDPR). Any consent you have given may be withdrawn at any time with effect for the future. An informal message to the address above is sufficient to exercise these rights.
3. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work, or the place of the alleged infringement (Art. 77 GDPR).
4. Access data and server log files
When you access this website, your browser automatically sends information to our host's server, which is temporarily stored in what are known as server log files. This includes in particular the page requested, the date and time of access, the volume of data transferred, the referrer, the browser used and its version, the operating system, and the IP address.
The legal basis is our legitimate interest in the technical provision, stability, and security of the website (Art. 6 (1) (f) GDPR). Log files are deleted after [RETENTION PERIOD, E.G. 7 DAYS] unless they are needed to investigate a security incident.
5. Hosting
This website is hosted by an external service provider:
[STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. Please confirm or adjust.]
The host processes the data arising through the website on our behalf (Art. 6 (1) (f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with the host.
6. Cookies and consent
This website uses cookies and comparable storage technologies. Technically necessary cookies required to operate the website and its functions (for example to secure your session and your access status) are set on the basis of our legitimate interest (Art. 6 (1) (f) GDPR) and Section 25 (2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).
For all non-essential storage operations (such as reach measurement or embedded third-party content) we obtain your consent pursuant to Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. Your consent is voluntary and can be withdrawn at any time with effect for the future. Details are set out in our Cookie Policy.
7. Contacting us
If you contact us by email, we process your details in order to handle your enquiry. The legal basis is our legitimate interest in responding (Art. 6 (1) (f) GDPR) or, where the enquiry is aimed at a contract, Art. 6 (1) (b) GDPR. The data is deleted once it is no longer required and no statutory retention obligations prevent this.
8. Notifications and newsletter (Mailchimp)
To send notifications about new entries and changes, as well as contract and access emails, we use the service Mailchimp, operated by The Rocket Science Group LLC (Intuit Inc.), USA.
Sign-up uses the double opt-in procedure: after you register you receive an email asking you to confirm. The legal basis is your consent (Art. 6 (1) (a) GDPR), and for contract-related emails Art. 6 (1) (b) GDPR. You can end delivery at any time via the unsubscribe link or the management function. Mailchimp processes your data on our behalf (Art. 28 GDPR).
9. Payment processing (Stripe)
For paid access levels and donations we use the payment service Stripe, operated by Stripe Payments Europe Ltd., Ireland, and Stripe, Inc., USA. When you make a purchase, the data required for payment (for example name, email address, and payment details) is transmitted directly to Stripe and processed there. We ourselves do not receive or store complete payment data such as card numbers. The legal basis is performance of the contract (Art. 6 (1) (b) GDPR). Stripe's own privacy terms apply in addition.
10. Transfers to third countries
Some of the services named (in particular Mailchimp and Stripe) may process personal data in the USA. Where providers are certified under the EU-US Data Privacy Framework, transfers take place on that basis; in addition, the European Commission's standard contractual clauses (Art. 46 GDPR) are used. [Please confirm certifications and legal bases during the legal review.]
11. Retention period
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (in particular commercial and tax law periods).
12. Status
This privacy policy is dated [DATE]. As the website develops or the legal requirements change, an update may become necessary.
This English text is a translation for convenience. The German-language version of this policy is the legally binding one.