Slowfoxes

Privacy Policy

1. Privacy at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified. For detailed information on data protection, please refer to the privacy policy listed below this text.

Data Collection on This Website

Who is responsible for the data collection on this website? Data processing on this website is carried out by the website operator. Her contact details can be found in the section "Information about the controller" in this privacy policy.

How do we collect your data? Your data is collected in two ways. On the one hand, your data is collected when you provide it to us. This may be, for example, data you enter when signing up for our newsletter or when using an AI chat feature provided on the website.

Other data is collected automatically or with your consent when you visit the website via our IT systems. This is primarily technical data (e.g. internet browser, operating system, referrer URL, time of page access, IP address, or information about the device used). This data is collected automatically as soon as you enter this website.

What do we use your data for? Part of the data is collected to ensure the website is provided free of errors. Other data may be used to measure reach, analyse user behaviour, provide interactive functions, and handle affiliate tracking or the newsletter service.

What rights do you have regarding your data? You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given consent to data processing, you can revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions about data protection.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behaviour may be statistically analysed. This is done primarily with analysis programmes and integrated services from third-party providers.

Detailed information on these analysis programmes and services can be found in the privacy policy below.


2. Hosting and Content Delivery

We host the content of our website and associated media content with the following provider:

Vercel (Hosting and Vercel Blob)

The provider is Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (hereinafter "Vercel"). Vercel is a platform for hosting and delivering web applications. We use Vercel to provide the website and also use the Vercel Blob service to store and deliver image and media files embedded on this website.

When you visit our website, Vercel processes personal data of website visitors, in particular technical connection data such as IP address, browser information, system information, and log data required for the provision and security of the website. Vercel describes this processing in its privacy policy and additionally refers to security and compliance measures as well as certification under the EU-U.S. Data Privacy Framework.

The use of Vercel is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the most reliable, performant, and secure presentation of our website and in stable delivery of the embedded media content.

Data transfer to the USA can be based on the provider's certification under the EU-U.S. Data Privacy Framework. Vercel states that it is certified under the Data Privacy Framework.

Data processing agreement

Processing is governed by Vercel's standard terms of service, which incorporate a Data Processing Addendum and the Standard Contractual Clauses for international transfers.

Neon (managed PostgreSQL database)

The provider is Neon Inc., 209 Havemeyer Street, 3rd Floor, Brooklyn, NY 11211, USA (hereinafter "Neon"). Neon provides our managed PostgreSQL database, in which all structured website data is stored — in particular user accounts, newsletter subscriptions, anonymous interaction events (see "Anonymous Server-side Event Logging"), and content used to render our pages.

When you visit our website or use a feature that requires data storage, Neon processes the data submitted by our application as part of the database operation. Neon does not have independent access to this data for its own purposes; it acts as a processor on our behalf.

The use of Neon is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the reliable, performant, and secure operation of our database backend.

Data transfer

Our database is hosted in the European Union (eu-central-1, Frankfurt, Germany). Neon Inc. is, however, established in the United States and may, in the course of providing support and operations, gain access to personal data. To the best of our knowledge, Neon is not certified under the EU-U.S. Data Privacy Framework. The transfer is therefore based on the Standard Contractual Clauses of the European Commission pursuant to Art. 46(2)(c) GDPR, which form part of Neon's Data Processing Addendum.

Data processing terms

Processing is governed by Neon's standard terms of service, which incorporate a Data Processing Addendum and the Standard Contractual Clauses for international transfers.

Further information can be found at: https://neon.com/privacy-policy


3. General Information and Mandatory Notices

Data Protection

The operator of these pages takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the internet (e.g. communication by email or the use of internet-based services) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information About the Controller

The controller responsible for data processing on this website is:

Yuliia Balyka Fritz-Riedel-Str. 16, 10407 Berlin, Germany Email: hello@slowfoxes.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage Duration

Unless a more specific storage period has been stated within this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

General Information on the Legal Bases for Data Processing on This Website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data under Art. 9(1) GDPR are processed. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or the access to information on your end device, data processing is additionally based on § 25(1) TDDDG (German Telecommunications-Digital Services Data Protection Act). Consent can be revoked at any time. If your data is required for the performance of a contract or for pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, we process your data if required to fulfil a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also take place on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The specific legal bases applicable in each individual case are set out in the following paragraphs of this privacy policy.

Recipients of Personal Data

In the course of our business activities, we work with various external bodies. This sometimes also requires the transfer of personal data to these external bodies. We only pass on personal data to external bodies if this is necessary for the performance of a contract, if we are legally obliged to do so, if we have a legitimate interest under Art. 6(1)(f) GDPR in passing on the data, or if another legal basis permits the transfer. When using processors, we only pass on personal data on the basis of a valid data processing agreement. Recipients may include hosting and content delivery providers, analytics providers, newsletter service providers, technical infrastructure and AI service providers, and providers of map services.

Revocation of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The lawfulness of data processing carried out before the revocation remains unaffected by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is connected with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes.

Right to Lodge a Complaint With the Competent Supervisory Authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.

Information, Correction, and Deletion

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing, as well as, if applicable, the right to have this data corrected or deleted.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time for this purpose.

No Automated Decision-Making

Decisions based solely on automated processing — including profiling — within the meaning of Art. 22 GDPR which produce legal effects concerning you or similarly significantly affect you do not take place on this website.

SSL / TLS Encryption

This site uses SSL / TLS encryption for security reasons and to protect the transmission of confidential content.


4. Data Collection on This Website

Cookies

Our websites use so-called "cookies". Cookies are small data packets and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session or permanently. Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies may originate from us or from third-party companies. Third-party cookies enable the integration of certain services from third-party companies within websites, e.g. for reach measurement, the provision of interactive functions, or the attribution of affiliate transactions.

Cookies have different functions. Many cookies are technically necessary, as certain website functions would not work without them. Other cookies may be used to analyse user behaviour, manage consent, or for affiliate and marketing purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested, or to optimise the website are stored on the basis of Art. 6(1)(f) GDPR in conjunction with § 25(2) no. 2 TDDDG, unless a different legal basis is specified. If consent to the storage of cookies and comparable recognition technologies has been requested, processing takes place exclusively on the basis of this consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG; consent can be revoked at any time.

You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or in general, or to activate the automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be limited.

Your consent is managed via an individually implemented in-house consent tool. Further information can be found in section 9 of this privacy policy.

Server Log Files

The provider of this site automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

  • browser type and browser version

  • operating system used

  • referrer URL

  • hostname of the accessing computer

  • time of the server request

  • IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of her website — for this purpose, the server log files must be recorded. For security and traceability reasons, the log data is stored for a limited period of generally no more than 14 days and then deleted. Data whose further retention is required for evidentiary purposes (e.g. in the event of a security incident) is excluded from deletion until the respective incident has been finally clarified.

Enquiry by Email

We do not offer a contact form on this website. If you wish to contact us, email is the only form of communication we provide. The contact address can be found in the imprint and in this privacy policy under "Information about the controller".

If you contact us by email, your enquiry including all personal data arising from it (e.g. name, email address, content of the message) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the enquiries addressed to us pursuant to Art. 6(1)(f) GDPR or on your consent pursuant to Art. 6(1)(a) GDPR if this has been requested; consent can be revoked at any time.

The data you send us via enquiries will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.


5. Newsletter

Newsletter Data

If you would like to receive the newsletter offered on the website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis.

For the handling of the newsletter dispatch, we use the service Klaviyo. The provider is Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA. Klaviyo processes the data you enter for the purpose of subscribing to the newsletter on our behalf. Klaviyo is certified under the EU-U.S. Data Privacy Framework (including the UK Extension and the Swiss-U.S. DPF); the transfer of personal data to the USA can be based on this certification. In addition, Klaviyo incorporates the Standard Contractual Clauses of the European Commission into its Data Processing Addendum.

Data processing is based on your consent pursuant to Art. 6(1)(a) GDPR. Registration for our newsletter uses the double opt-in procedure. This means that after you register, we will send an email to the email address you provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within a reasonable period, your information will be blocked and deleted after a reasonable period.

The data stored with us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe, or added to a block list if necessary to prevent future mailings. Data stored with us for other purposes remains unaffected.

After you unsubscribe from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist if necessary to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters pursuant to Art. 6(1)(f) GDPR. Storage in the blacklist is not time-limited. You may object to the storage if your interests outweigh our legitimate interest.

Performance Measurement, Open and Click Tracking in Newsletters

Our newsletters sent via Klaviyo generally contain a so-called counting pixel (tracking pixel) as well as links provided with individual identifiers. With the help of these technologies, we can determine:

  • whether and when you have opened a newsletter message sent by us,

  • which links contained in the newsletter you have clicked on,

  • technical accompanying information such as the time of retrieval, IP address, the device or operating system used, and the email client.

The data collected in this way is assigned to your profile ID stored at Klaviyo and may be used to build a usage profile in order to tailor the newsletter to your individual interests, evaluate the relevance of our content, and target future mailings to specific audiences. In particular, we record when and how you interact with our newsletters in order to optimise our offering for you. This data is not merged with other personal data stored by us outside the scope of the newsletter service.

In addition, the links contained in the newsletter may contain UTM parameters. These parameters allow us to evaluate, when you click on a link, which newsletter or campaign brought you to our website. UTM parameters are processed by Klaviyo and may also be processed within the scope of reach measurement on our website.

Performance measurement including open and click tracking as well as the associated profiling is carried out exclusively on the basis of your express consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. We obtain this consent separately as part of the newsletter registration. You may object to performance measurement at any time by unsubscribing from the newsletter. Revocation of consent is also possible by unsubscribing from the newsletter; after revocation, the corresponding data will no longer be used for performance measurement. A separate revocation of tracking alone while continuing to receive the newsletter is unfortunately not technically possible.


6. Analysis Tools and Advertising

Vercel Analytics (Vercel Web Analytics)

We use Vercel Analytics, an analysis service provided by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. With the help of Vercel Analytics, we can evaluate the behaviour of website visitors in pseudonymised or aggregated form in order to improve the performance, stability, and usability of our website. In particular, page views, technical performance data, information about the browser and device, and other usage-related events may be processed. According to the provider, Vercel Analytics operates without the use of persistent cookies or comparable recognition technologies on your device and does not use personal identifiers for cross-device recognition.

Since Vercel Analytics dispenses with the setting of cookies or comparable recognition technologies and processes only aggregated or pseudonymised reach data that is required to ensure stable and performant operation of the website, we treat this service as technically necessary. Processing is based on Art. 6(1)(f) GDPR in conjunction with § 25(2) no. 2 TDDDG. Our legitimate interest lies in the statistical analysis of user behaviour as well as in the optimisation and security of our web offering.

Data transfer to the USA can be based on the provider's certification under the EU-U.S. Data Privacy Framework.

Data processing agreement

We have concluded a data processing agreement with Vercel.

Google Analytics 4 (with Consent Mode V2)

We use Google Analytics 4, a web-analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics 4 helps us understand how visitors use our website so we can improve it.

Consent Mode v2 (Advanced)

Our site implements Google's Consent Mode v2 in Advanced mode. This works as follows:

 If you accept analytics cookies: GA4 sets first-party cookies (_ga, ga*) and collects your pseudonymous interactions, including IP address (anonymised before storage), browser language, page URLs, referrer, session and click events. Data is used to produce traffic statistics.

If you reject: No cookies are set and no personal identifiers are stored. Google still receives cookieless, aggregated modeling signals — basic ping data with no individual identifiers — which Google uses to model and report aggregate traffic patterns. No personal data is processed in this mode.

IP anonymisation is always enabled.

Data transfer

Where Google Analytics 4 transfers data to Google LLC in the United States, this transfer is governed by the EU-U.S. Data Privacy Framework and Google's Standard Contractual Clauses.

Legal basis

For cookied measurement (after consent): Art. 6(1)(a) GDPR (consent), § 25(1) TDDDG.

For cookieless modeling signals (denied state): Art. 6(1)(f) GDPR (legitimate interest in measuring site performance without identifying individuals).

Storage duration

Google Analytics 4 data is retained for 14 months in our property. Browser cookies (_ga) persist for up to 2 years.

You can withdraw consent at any time via the privacy settings in the footer of our site. You can also install the Google Analytics Opt-out Browser Add-on (https://tools.google.com/dlpage/gaoptout?hl=en).

Anonymous Server-side Event Logging

We record a small number of anonymous interaction events on our own servers (hosted on Vercel and Neon). Examples include: clicks on the "Subscribe" button, clicks on "Book your experience", search-bar submissions, and clicks on Sign-in. The purpose is to understand which features and destinations are most useful so we can improve our service.

What we collect

  • Event name (e.g. newsletter_subscribe_click)

  • A small set of non-identifying properties (e.g. site language, page category, content type)

  • Country (derived from your IP address by our hosting provider; the IP address itself is never stored)

  • A timestamp

What we do NOT collect

IP addresses, user identifiers, device fingerprints, cookies, cross-site tracking data, or any data that could identify you individually.

Legal basis

Art. 6(1)(f) GDPR — our legitimate interest in measuring usage of our service in a privacy-preserving way. Because no personal data is processed, this logging operates without consent and outside the scope of § 25 TDDDG.

Storage duration

24 months. Older records are deleted automatically by a daily background job.

Recipients

This data is held on our infrastructure providers — Neon Inc. (database) and Vercel Inc. (hosting) — under standard data processing agreements. It is not shared with third parties for marketing or other purposes.

Your rights

Because the data contains no identifiers linking it to you, individual access, rectification or deletion requests are technically not possible. You can disable this logging in your own browser by setting localStorage.setItem('va-disable', '1') on our domain, or by using any browser extension that blocks first-party JavaScript on our site.

Ahrefs Analytics

We use Ahrefs Analytics, a cookieless web-analytics service provided by Ahrefs Pte. Ltd., 16 Raffles Quay, #33-03 Hong Leong Building, Singapore 048581 (hereinafter "Ahrefs"). With the help of Ahrefs Analytics, we collect anonymised statistics on visits to our website, such as page views, referring sources, browser type, country (derived from the IP address), and device category.

According to the provider, Ahrefs Analytics processes only aggregated and anonymised data and does not set cookies or use comparable recognition technologies on your device. IP addresses are not stored after country derivation. Visitors are not tracked across sessions or websites.

Because Ahrefs Analytics dispenses with cookies and comparable technologies and processes only aggregated, anonymous reach data, we treat this service as technically necessary. Processing is based on Art. 6(1)(f) GDPR in conjunction with § 25(2) no. 2 TDDDG. Our legitimate interest lies in the statistical analysis of user behaviour as well as in the optimisation of our web offering.

Data transfer

The use of Ahrefs Analytics involves the transfer of data to Singapore. The European Commission has not issued an adequacy decision for Singapore. The transfer is therefore based on the Standard Contractual Clauses of the European Commission pursuant to Art. 46(2)(c) GDPR, which form part of Ahrefs' Data Processing Addendum.

Data processing agreement

Processing is governed by Ahrefs' standard terms of service, which incorporate a Data Processing Addendum and the Standard Contractual Clauses for international transfers.

Further information can be found at: https://ahrefs.com/legal/privacy


7. Plugins and Tools

AI Chat / Use of the Anthropic API

On this website, we provide an AI-powered chat function. For the technical provision of this function, we use the API of the provider Anthropic, PBC, 548 Market Street, PMB 90375, San Francisco, CA 94104, USA (hereinafter "Anthropic").

Processed data. When you use the chat function, the content you enter (prompts), any context input we add, the responses generated by the model, times of use, and technical metadata (e.g. IP address of the request, timestamp, information about the API model used) are transmitted to Anthropic and processed there to generate the response. Storage of this content at Anthropic is governed by the commercial terms of use and the Data Processing Addendum agreed between us and Anthropic.

Purposes. Processing is carried out for the purpose of providing and improving the chat function, handling your enquiries, technical error analysis, and, where applicable, preventing misuse.

Legal basis. The use of the AI chat function is voluntary and is based exclusively on your express consent pursuant to Art. 6(1)(a) GDPR. We obtain your consent before your input is transmitted to Anthropic for the first time. You can revoke your consent at any time with effect for the future by discontinuing use of the chat function or by changing your selection via our consent tool. The lawfulness of processing carried out up to the point of revocation remains unaffected by the revocation.

Transfer to third countries. Using the chat function involves the transfer of personal data to the USA. To the best of our knowledge, Anthropic is not certified under the EU-U.S. Data Privacy Framework. The transfer is therefore based on the Standard Contractual Clauses of the European Commission pursuant to Art. 46(2)(c) GDPR, which form part of Anthropic's Data Processing Addendum for commercial API customers. In addition, we base the third-country transfer on your express consent pursuant to Art. 49(1)(a) GDPR; you will be informed of this separately before using the chat function. We expressly point out that the USA does not maintain a level of data protection that fully corresponds to that of the European Union, and that in particular access by US security authorities cannot be entirely ruled out.

No entry of sensitive data. You should not enter any sensitive personal data (in particular no health data, no data on racial or ethnic origin, no religious or philosophical beliefs, no data on sexual life or sexual orientation), no account details, passwords, access credentials, or other confidential information via the chat function. Also refrain from entering personal data of third parties. Any processing of special categories of personal data under Art. 9 GDPR takes place exclusively at your own initiative and under your own responsibility.

Further information can be found at: https://www.anthropic.com/legal/privacy

Google Maps

This website uses the Google Maps map service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using Google Maps, personal data may be transmitted to Google. This includes in particular your IP address and, where applicable, location and usage data. Google explains the processing of personal data in its privacy policy and refers to its data transfer mechanisms, including certification under the EU-U.S. Data Privacy Framework for Google LLC and its covered US subsidiaries.

Google Maps is only loaded on our website after you have given your consent via our consent tool. Until then, we display a neutral placeholder instead of the map. Processing is based exclusively on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Insofar as the integration of Google Maps involves the transfer of personal data to the USA, we additionally base this transfer on your express consent pursuant to Art. 49(1)(a) GDPR. Consent can be revoked at any time with effect for the future.

More information on how Google handles user data can be found in Google's privacy policy at: https://policies.google.com/privacy?hl=en


8. Affiliate Links and Affiliate Tracking

This website may contain affiliate links. If you click on such an affiliate link and subsequently make a purchase or other defined transaction with the respective provider, we may receive a commission.

For the purpose of attributing transactions, affiliate partners or networks commissioned by them may use cookies or comparable recognition technologies. In particular, information may be processed about the fact that you reached the partner's offer via a specific link from our website. Depending on the partner, other technical information such as timestamps, referrer information, browser data, or pseudonymous identifiers may be processed.

Insofar as consent is required for the setting or reading of such cookies or technologies, processing takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent can be revoked at any time. Insofar as no consent is required or processing takes place only after clicking the link within the environment of the respective partner, further data processing is governed by the privacy policy of the respective partner company.

Please note that we have no full control over the specific data processing by the respective affiliate partners after you leave our website. The privacy notices of the respective provider on whose website you are redirected are decisive in this respect. As soon as specific affiliate partners or networks are integrated on this website, we will update this privacy policy accordingly and name the respective partners.


9. In-House Services

Consent Management via In-House Consent Tool

On this website, we use a self-implemented tool for the management of consent. With this tool, consent for the use of certain technologies or services can be granted, documented, and revoked. In particular, information about the consent status, the time of consent, any device or browser information used, and technical log data is processed.

Processing takes place in order to fulfil legal obligations for the proof and management of consent. The legal basis is Art. 6(1)(c) GDPR in conjunction with the data protection evidence obligations, as well as Art. 6(1)(f) GDPR. Insofar as consent-based technologies are used for the storage of information on the end device or access to such information, § 25 TDDDG additionally applies. Records of consent are stored for the duration of the statutory evidence obligations and then deleted.


10. Conclusion and Currency

Status of this privacy policy: 21 May 2026.

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to the services, tracking technologies, newsletter processes, chat functions, affiliate partners, or other data processing activities used on this website. The new privacy policy will then apply to your next visit.

Stay inspired

Get slow travel tips delivered to your inbox

By subscribing to newsletter, you agree to our privacy policy.