View Hubs
Legal Governance

Privacy Policy & Data Protection

Effective Date: January 1, 2026. This policy details how Reelroostjollyfed collects, safeguards, and processes personal information under the General Data Protection Regulation (GDPR) and international privacy frameworks.

1. Data Controller Identification

The entity responsible for data processing on this website (the "Controller") is:

Reelroostjollyfed Hospitality Guides GmbH
Commercial Register: HRB 748291 (Amtsgericht Freiburg im Breisgau)
Seestraße 14B, 78464 Konstanz, Germany
Corporate Email: [email protected]
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Data Collected

We collect minimal personal data necessary to deliver informative travel journalism and manage user communication:

  • Inquiry Submission Data: When you transmit an inquiry via our contact interface, we collect your full name, email address, topic interest, and message content.
  • Technical Access Logs: Upon visiting the site, our web servers log your IP address (anonymized after 7 days), browser user-agent string, operating system, referencing URL, and timestamp. This data is collected pursuant to Art. 6(1)(f) GDPR (legitimate interest) to protect infrastructure integrity and mitigate denial-of-service threats.
  • Cookie Preference Records: We store your consent status for functional or analytical tools in your local browser storage.

3. Purpose and Legal Basis of Processing

All processing activities are conducted strictly within lawful grounds established under Art. 6 GDPR:

  • Responding to User Inquiries (Art. 6(1)(b) & (a) GDPR): Processing is necessary to take steps at your request prior to answering your travel correspondence, supported by your explicit form consent.
  • Security and Site Maintenance (Art. 6(1)(f) GDPR): Our legitimate interest in preserving cybersecurity, preventing malicious abuse, and verifying proper server routing.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Adherence to statutory retention periods under German commercial and fiscal codes (Handelsgesetzbuch, Abgabenordnung).

4. Cookies & Local Storage

We utilize persistent local storage keys (`reelroost_cookie_choice`) to remember whether you accepted or declined non-essential preferences. Essential session tokens do not track behavior across third-party websites. For a full breakdown of specific categories and expiration dates, consult our dedicated Cookie Policy.

5. Third-Party Processors & Hosting Architecture

Our static hosting infrastructure operates exclusively on hardened European data centers. We maintain signed Data Processing Agreements (DPAs) in compliance with Art. 28 GDPR with our hosting vendors. We do not sell, rent, monetize, or transfer your contact data to commercial advertisers or hotel booking aggregators.

6. Retention and Erasure Standards

Personal data submitted through our contact interface is retained only for the duration required to resolve your query, after which it is archived and deleted within six months, unless statutory retention duties apply. Server connection logs are automatically purged on a rolling seven-day schedule.

7. Your Statutory Rights (GDPR & CCPA)

Under European data protection law and applicable California privacy regulations, you retain explicit rights regarding your personal information:

  • Right of Access (Art. 15 GDPR): You may request formal confirmation and copies of any personal records stored about you.
  • Right to Rectification (Art. 16 GDPR): You may require correction of inaccurate or incomplete records.
  • Right to Erasure / "Right to Be Forgotten" (Art. 17 GDPR): You may demand deletion of your records where no prevailing legal ground mandates retention.
  • Right to Restrict Processing (Art. 18 GDPR): You may limit active data processing while disputes over accuracy or legitimacy are resolved.
  • Right to Data Portability (Art. 20 GDPR): You may obtain your provided data in a structured, machine-readable format.
  • Right to Object (Art. 21 GDPR): You may object at any time to processing based on legitimate interest.
  • California Consumer Privacy Act (CCPA): We affirm that we do not sell or share consumer personal information for commercial cross-context behavioral advertising.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. You also hold the right to lodge a formal complaint with the supervisory authority: The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.