Privacy notice

This notice explains what data is generated when you visit this website and what happens to it. It describes only the processing that actually takes place.

Data controller

Kim Bäumchen
c/o Online-Impressum 10574
Europaring 90
53757 Sankt Augustin
Deutschland E-Mail: themepassfinder@mail.online-impressum.de

Processing when the site is accessed

When a page is requested, the web server processes the IP address, time, address requested, volume of data transferred, browser identification and, where applicable, the referring page. The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in secure and trouble-free operation. Logs are rotated daily and deleted after approximately 15 days at the latest.

Audience measurement

The server alone derives a pseudonymous checksum from the IP address and browser identification and thereby counts at most one unique visit per device and calendar day. The IP address and browser identification are not stored; the pseudonymous identifiers are deleted after 90 days at the latest. Page views are recorded separately and only as a total per calendar day and page path, without any link to an identifier. Neither cookies nor an external analytics service are used; requests with Do Not Track or Global Privacy Control are excluded. The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in assessing the use of this service.

Storage on the device

Merely accessing the site stores nothing on the device. If a language is selected from the menu, the browser stores the cookie tpf_lang containing the language code for no more than one year. If the light or dark theme is selected, the browser stores that choice under tpf-theme in local storage. Both are strictly necessary for the setting expressly requested (section 25(2)(2) TDDDG); the legal basis for any further processing is Article 6(1)(f) GDPR.

Feedback form

Information submitted is stored in order to process the feedback and is deleted after twelve months at the latest. The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in the accuracy of the published information. Providing a contact address is voluntary.

Recipients

Die Seite wird bei Oracle Cloud Infrastructure (Oracle Deutschland B.V. & Co. KG) in der Region Frankfurt am Main betrieben; Grundlage ist ein Vertrag zur Auftragsverarbeitung nach Artikel 28 DSGVO.

The server alone retrieves the European Central Bank reference rates, postcode data and attraction reports, without transmitting any visitor data. Map tiles from CARTO (CARTO Inc., USA) are loaded only after express confirmation; the browser then transmits the IP address and the map section displayed. A connection to an external provider arises only when an external link is clicked; that provider then receives the IP address and browser identification and may set its own cookies.

Transfers to countries outside the European Economic Area take place only in so far as a provider named above is established there. They are based on an adequacy decision or on standard contractual clauses pursuant to Article 46 GDPR; a copy of the safeguards is available at the address given above.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place. There are no user accounts for visitors. The provision of personal data is neither required by law nor by contract; without the data arising technically on access, however, the site cannot be delivered.

Rights of data subjects

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Any consent given may be withdrawn at any time with effect for the future. There is also the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

Affiliate programmes

Active affiliate networks: Awin, Kwanko, Partnerize (Merlin Entertainments), Takeads, tradetracker. No third-party scripts or tracking pixels are loaded for affiliate links. When a marked affiliate link is clicked, the only referrer transmitted is the domain themepassfinder.de. The network may set its own cookies there; its privacy information applies in that respect.

Route calculation

Routes are calculated by the public OSRM demo server <code>router.project-osrm.org</code>; the request is made solely by the server.

Postcodes

Postcodes are first resolved locally. Without a match, only the server queries api.postcodes.io or api.zippopotam.us; only the country and postcode are transmitted, not the IP address of the person making the request. Results are kept in memory for no more than 24 hours and are not stored permanently.

Queue times

On supported park pages, only the server queries api.wartezeiten.app using a fixed park identifier. No visitor data is transmitted and no history is created. The browser opens the Wartezeiten.APP website only when a source link is clicked.

Language selection

On automatic entry, the server first selects a supported language using the browser’s preference (Accept-Language). If none matches, it uses the saved language choice, then the language in the link, and finally German. You can deliberately switch languages; subsequent internal navigation keeps that choice. The IP address is not used to select the language. When the language is deliberately changed, the travel-group settings, including age, height and any disability information, are held briefly in the sessionStorage of that browser tab only, removed when the destination page loads and not transmitted to the server.

Operator notifications

When feedback is received, the server reports only its arrival and the selected category via ntfy — not the message text, not the email address and not the IP address.

‹ Back to the website