Cookie settings

Choose what we may load. You can change this at any time. More in the privacy policy.

Privacy Policy

Responsible Party

Tom Radlbeck | Dr.-Müller-Str. 18 | 92637 Weiden i.d. OPf. | info@grancanariaguide.de

Hosting and Server Logs

The site is operated on our own server. The web server logs standard connection data, including IP address, date and time, requested URL, browser type, and previously visited page. We need these logs to deliver the site, detect attacks, and fix errors. The legal basis is Article 6(1)(f) GDPR. We delete the logs after 7 days.

We store your selection for optional content only in your browser (localStorage, entry gcg-consent), for a maximum of 12 months. We do not set a cookie for this. The storage of this setting in the browser is done to provide your chosen cookie settings based on § 25(2) No. 2 TDDDG.

You can change or delete your selection at any time via the "Cookie Settings" link. The legal basis for the subsequent use of optional services is Article 6(1)(a) GDPR. The banner currently offers the "External Media" category. Without this consent, we do not load external content such as videos from YouTube or Vimeo.

Statistics

We count visits to public pages on our own server, without cookies and without sharing with third parties. We store the requested path, the day, the device class (from window width: mobile, tablet, or desktop), the browser family, the hostname of the previously visited page, and, if present, the campaign source (utm_source). We store search terms from the site search only on the search page and for a maximum of 80 characters.

To recognize whether the same person visits multiple times on the same day, we create an identifier from IP address and browser. A random value, known only to our server and replaced the next day, is included in the calculation. We do not store the IP address itself. The identifier cannot be attributed beyond the day.

We do not count visits with Global Privacy Control or "Do Not Track," visits from logged-in admins, and identifiable bots. We keep the entries for approximately 26 months to allow comparison with the previous year. The legal basis is Article 6(1)(f) GDPR. You can object by enabling Global Privacy Control or "Do Not Track" in your browser. We will then not store the visit.

We do not count admin areas, login, media files, and technical paths.

LGBT Section

Pages under /lgbt may allow conclusions about sexual orientation. This is a special category under Article 9 GDPR. We only count visits to these pages if you have consented to statistics. The banner does not currently offer this consent, so we do not store such visits. We do not store search terms related to sexual orientation or gender identity.

The web server may briefly see the requested URL together with the IP address in the server logs. The section on server logs applies to this.

Bookmark List

The bookmark list is stored only in your browser (localStorage, entry gcg-merkliste, maximum 100 entries). To display it, the page requests the public information of the bookmarked places, routes, and posts. We do not set a cookie and do not store your list on our server. No account or email address is connected.

The storage in localStorage serves exclusively to provide the bookmark list function you explicitly requested (§ 25(2) No. 2 TDDDG).

If you use the "Share list" function, a link is generated that directly contains the entries. Anyone who has the link can see these entries. The legal basis for processing when using the share function is Article 6(1)(b) GDPR, as you actively initiate this process yourself.

Route Planner

Start, stops, means of transport, and durations are stored only in your browser (localStorage, entry gcg-route; for the LGBT theme world separately under gcg-route-lgbt). You can delete this data yourself at any time using the "Clear all" button. Storage in localStorage is necessary to provide you with the requested route planning in your browser (§ 25(2) No. 2 TDDDG).

To calculate the route, the page sends the starting point and stops to our server without setting cookies. The server calculates the route and does not store the information. Coordinates and locations are not logged and not linked to an account.

"My location" requests your position only after you actively tap it. It remains in your browser and is only used as the starting point for this calculation. A share link contains the plan only in the part after the #character. Your browser does not send this part to our server when accessing the link. Anyone who receives the link can see the start and stops. For export as PDF, your browser sends the calculated route to our server once - no data is stored in this process either.

The legal basis for the temporary calculation of the route on our server is Article 6(1)(b) GDPR. Only when you select the "Open in Google Maps" option are the start and stops transmitted to Google Ireland Limited. The legal basis for this is your consent according to Article 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Google's privacy policy applies: https://policies.google.com/privacy

Packing Lists

Which items you have checked off is stored exclusively in your browser (localStorage, entry gcg-pack as well as the respective name of the list). We do not store your check status on our servers. Storage in localStorage is done to provide the packing list function you are using (§ 25(2) No. 2 TDDDG).

Maps

The map tiles are delivered by our own server. This connection appears in the server logs as described above. Map data comes from OpenStreetMap contributors. A link "View on OpenStreetMap" or "Check on map" only opens OpenStreetMap when you tap it. Opening hours are queried by the server from Google using a Places ID, without visitor data.

Contact Form

If you write to us via the contact form, we store your name, email address, subject, message, the language of the page and the time, so we can handle your request and reply to follow-up questions. The message is kept in the database on our own server. In addition, our self-hosted newsletter software may notify us of new messages by email; this email contains your message.

Data transmission in the form is encrypted (SSL/TLS). We do not share this data with third parties without your consent.

Processing is based on Article 6(1)(b) GDPR if your request relates to the fulfilment of a contract or is necessary for pre-contractual measures. In all other cases, it is based on our legitimate interest in handling requests addressed to us (Article 6(1)(f) GDPR).

We delete messages once the request has been dealt with, and automatically six months after receipt at the latest. Mandatory statutory retention periods remain unaffected.

Submitting Events

You can suggest events to us via the “Submit an event” form. We store the event details, your name (optional), your email address, the language of the page and the time. We only use your name and email address for questions; they are never published. After our review, we only publish the event details, edited by us where necessary.

For the English version, we machine-translate the event details after approval using an AI service (Anthropic PBC, USA). Your name and email address are not transferred. Our self-hosted newsletter software may notify us of new submissions by email.

The legal basis is your consent under Article 6(1)(a) GDPR, which you give in the form and can withdraw at any time with effect for the future. We automatically delete your name and email address 30 days after the event. Rejected submissions are deleted completely 30 days after rejection.

Spam Protection (ALTCHA)

We protect the contact form and the event form against automated submissions with ALTCHA. ALTCHA runs entirely on our own server: your browser fetches a small computing task, solves it and sends the result along with the form. No cookies are set, nothing is stored in your browser and no data is transferred to third parties.

To limit abuse, we count requests and submissions per IP address. These counters are only held in the server's memory, are not stored permanently and are no longer used after one hour at the latest. The legal basis is our legitimate interest in a working service without spam (Article 6(1)(f) GDPR).

Videos

The site only loads YouTube videos after your consent, using YouTube's enhanced privacy mode (youtube-nocookie.com). The provider is Google Ireland Limited, Dublin. Your IP address may be transmitted to Google and to the USA. Privacy policy: https://policies.google.com/privacy

The site also only loads Vimeo videos after consent, with "Do Not Track". The provider is Vimeo.com Inc., New York, USA. Privacy policy: https://vimeo.com/privacy

The legal basis is Article 6(1)(a) GDPR.

Links to partner offers run through a short address on our site (/go/...) and then redirect you to the partner. We only count which product was accessed and when, without IP address, without cookies, and without browser identification. The partner's own rules apply there. The visit there is recognizable to you. The legal basis for counting is Article 6(1)(f) GDPR.

Pinterest

The save button only opens Pinterest when you tap it. Then Pinterest's privacy policy applies.

Newsletter

For the newsletter, we process your email address. You confirm registration via a link in the email (double opt-in). The addresses are stored in our own newsletter software on our server. If the registration doesn't arrive there immediately, we briefly hold the email address and a technical token in a queue and delete the entry as soon as it's transferred.

We don't segment the distribution list by topics or visited pages. You can unsubscribe via the link in each email. The legal basis is Article 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future.

Error Pages

For non-existent addresses, we only store the path and how often it was accessed, without IP address and without cookies. The legal basis is Article 6(1)(f) GDPR.

Your Rights

You have the right to access, rectification, deletion, restriction of processing, and data portability, as well as the right to object to processing based on Article 6(1)(f) GDPR. You can revoke consent at any time.

You can direct complaints to a data protection supervisory authority, for example the authority responsible for your place of residence or our registered office.

There is no comment function on this site.