Privacy policy
Version: October 2026 · In case of differences, the German version applies.
1. Controller
Jascha Franke
Strothwiesen 5
31603 Diepenau
Germany
Email: admin@kitebuggytexel.com
2. Overview
This website sets no cookies, uses no analytics or advertising services and loads no content from third-party servers when you open it. Personal data is only processed to the extent technically necessary to run the site – and for Google Maps and YouTube only once you explicitly load them with a click. There is no automated decision-making, including profiling (Art. 22 GDPR).
3. Hosting and server logs
The website runs on a server of Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. A data processing agreement with Contabo is in place (Art. 28 GDPR).
When a page is requested, the server automatically records: IP address (shortened: the last 8 bits for IPv4 and the last 80 bits for IPv6 are set to zero, so it can no longer be linked to an individual connection), date and time, requested address, amount of data transferred, status code, the previous page (referrer), browser and operating system, and technical details of the connection (e.g. protocol and encryption version). This is needed to deliver the site, keep it stable and secure, and fend off attacks.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Logs are deleted after 7 days. You are not obliged to provide this data, but without it the site cannot be delivered.
4. Cloudflare
The website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare forwards requests to our server, encrypts the connection, speeds up delivery and protects against attacks. In doing so, Cloudflare processes the technical data listed above, in particular your IP address.
The legal basis is Art. 6(1)(f) GDPR. A data processing agreement with Cloudflare is in place. Data may be transferred to the USA; Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR).
5. Contact by email
If you email us, we process your address and the content of your message to answer your request. The email is forwarded via Cloudflare Email Routing to the operator’s mailbox at Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and stored there. Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR. Messages are deleted once they have been dealt with.
6. Google Maps (only after a click)
On the “Location” page you can load a map from Google Maps. The map is only loaded when you click “Load map”. Only then does your browser connect to Google, and Google receives your IP address in particular; Google may also set cookies.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR). Data may be transferred to the USA; Google is certified under the EU-US Data Privacy Framework. Consent applies to that single visit only. More information: Google privacy policy.
7. YouTube (only after a click)
On the “Videos” page you can play videos from YouTube. A video is only loaded when you click “Load video”, using the privacy-enhanced mode (youtube-nocookie.com). After the click, YouTube/Google receives your IP address and information about the video; cookies may be used during playback.
The provider is Google Ireland Limited. The legal basis is your consent given by the click (Art. 6(1)(a) GDPR). The same applies to transfers to the USA as for Google Maps.
8. Links to Facebook and Instagram
We link to our pages on Facebook and Instagram (Meta Platforms Ireland Limited). These are plain links: no data is transferred until you click a link. Meta’s privacy policy applies there.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on legitimate interest (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7(3)). Just write to admin@kitebuggytexel.com.
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the authority responsible for us: Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany.