Privacy & Use of Cookies
Controller
The controller responsible for the processing of personal data on this website is:
Robert Werner
netWER
Mertz-von-Quirnheim-Straße 1d
14471 Potsdam
Germany
Email: info[at]netwer.de
General information on data processing
We process personal data only to the extent necessary to operate and secure this website, respond to enquiries, and present and finance our information service.
Personal data means any information relating to an identified or identifiable natural person. This includes, for example, IP addresses, contact details and information about the use of a website.
The applicable legal bases are specified in the following sections.
Hosting and server logs
This website, the associated email account and the data backups are hosted by:
ALL-INKL.COM – Neue Medien Münnich
Proprietor: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
The provider’s server hardware is operated in data centres located in Germany. The hosting provider processes data on our behalf in accordance with Article 28 GDPR.
When you access the website, the server processes technically necessary connection and access data. This may include, in particular:
- the IP address of the accessing device,
- the date and time of access,
- the page or file accessed,
- the amount of data transferred,
- the browser type and browser version,
- the operating system and device type,
- the previously visited page,
- the access and error status.
The processing is carried out to provide, stabilise and secure the website and to identify technical faults and improper access.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
The data is deleted as soon as it is no longer required for the purposes stated above. In the event of a specific security incident or misuse, the relevant data may be retained until the matter has been fully resolved. Statutory retention obligations remain unaffected.
Encrypted transmission
This website uses an encrypted HTTPS connection. This is intended to protect transmitted data against unauthorised access by third parties.
You can recognise an encrypted connection in particular by the address beginning with https:// in your browser’s address bar.
Contact by email
When you contact us by email, we process in particular:
- your email address,
- your name, where applicable,
- the content of your message,
- the date and time of the communication,
- any other information you provide voluntarily.
The processing is carried out in order to handle and respond to your enquiry.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of communications addressed to us.
The data is deleted once your enquiry has been fully dealt with and no statutory retention obligations or other legitimate grounds for further storage apply.
Website security
To protect this website, failed login attempts, erroneous page requests and suspicious access patterns may be logged and analysed.
The following data may be processed in particular:
- IP address,
- time of access,
- requested web address,
- browser and device information,
- connection and error data.
The processing serves to identify, prevent and investigate attacks, improper access and technical security problems.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in maintaining the security and integrity of the website.
The data is deleted as soon as it is no longer required for the security review. In the event of a specific incident, it may be retained until the investigation has been completed and, where necessary, for longer periods in order to establish, exercise or defend legal claims.
Cookies and privacy settings
This website uses technically necessary cookies or comparable storage technologies where these are required to operate the website or store your privacy choices.
In particular, a cookie may be stored to record whether you have consented to or rejected the loading of optional advertising and affiliate content. Without this storage, your choice would have to be requested again each time you visit the website.
Technically necessary storage and access operations are carried out on the basis of Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a functioning consent-management system.
GetYourGuide and Headout widgets, as well as the associated local advertising and conversion measurement, are activated only after you have given your consent.
The legal basis for this optional processing is Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies.
You may withdraw consent at any time with effect for the future or subsequently allow content that you previously rejected.
Koko Analytics
We use the locally installed WordPress plugin Koko Analytics in a cookieless configuration to statistically analyse the use of this website.
The following information may be analysed in particular:
- pages viewed,
- date and time of access,
- referring websites,
- number of page views,
- number of returning and distinct visits.
To distinguish individual visitors within a single day, Koko Analytics generates a non-reversible value from the IP address, the browser information or user agent, and a secret key that changes daily.
The IP address and complete browser information are not permanently stored in the analytics statistics. Visits cannot be linked across several days. The storage directory used for cookieless visitor recognition is deleted every day at midnight.
In this configuration, Koko Analytics does not store cookies or other information on your device. The analysis is carried out locally on our server. No analytics data is transferred to an external analytics service.
The legal basis for the processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the data-minimising statistical analysis and improvement of our information service.
Advanced Ads and local advertising measurement
We use the WordPress plugin Advanced Ads, including its Tracking add-on, to manage advertising and affiliate elements.
We use the “Frontend” tracking method. An impression is counted only after the relevant advertising element has been loaded in the browser. When the advertising element is loaded or clicked, a request containing the identifier of that element is sent to our own server.
The following statistical values may be recorded in particular:
- the number of impressions of an advertising or affiliate element,
- the number of clicks on the relevant element,
- the identifier of the relevant advertising or affiliate element.
The statistics are stored locally in our WordPress database. Google Analytics tracking is not used. Click Fraud Protection is disabled.
According to the plugin provider, the local tracking methods used by Advanced Ads do not store IP addresses in the statistics database. The Frontend method transmits the advertising identifiers to the website’s own server through a local AJAX request.
The advertising elements and the associated tracking are activated only after you have given your consent in accordance with the privacy settings used on the website.
The legal basis is Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, Section 25(1) TDDDG also applies.
The statistical data is deleted as soon as it is no longer required for the analysis, optimisation and accounting of advertising and affiliate offers and no statutory retention obligations prevent its deletion.
GetYourGuide and Headout
Offers from GetYourGuide and Headout may be displayed on individual pages through JavaScript widgets.
The widgets are loaded only after you have given your consent. Without consent, the widgets and the associated external scripts are not loaded.
After you have given your consent, your browser establishes a direct connection to the servers of the respective provider. The following data may be transmitted in particular:
- IP address,
- date and time of access,
- page viewed,
- browser and device information,
- operating system,
- interactions with the widget,
- cookie or affiliate identifiers, where applicable.
The providers may store cookies or comparable technologies on your device and analyse your use of the widget.
GetYourGuide
The GetYourGuide platform is operated by:
GetYourGuide Deutschland GmbH
Sonnenburger Straße 73
10437 Berlin
Germany
Further information on the processing of personal data is provided in GetYourGuide’s privacy policy.
Headout
The provider is:
Headout Inc.
82 Nassau Street, #60351
New York, NY 10038
USA
When the Headout widget is used, personal data may be processed in the United States and, where applicable, in other countries. Further information on data processing, recipients, transfer mechanisms and data-subject rights is available in Headout’s privacy policy.
The legal bases for loading the widgets are your consent pursuant to Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, Section 25(1) TDDDG.
You may withdraw your consent at any time with effect for the future by selecting “Change privacy settings”.
Bookings, payments and all further contractual processing take place exclusively on the providers’ websites and under their respective data-protection responsibility.
OpenStreetMap
An interactive map using map data and map services provided by the OpenStreetMap Foundation is embedded on the travel and hotel pages.
The provider is:
OpenStreetMap Foundation
St John’s Innovation Centre
Cowley Road
Cambridge CB4 0WS
United Kingdom
The map is loaded automatically when the relevant page is accessed. Your browser establishes a connection to the map servers or content delivery network of the OpenStreetMap Foundation.
The following data may be processed in particular:
- IP address,
- browser and device information,
- operating system,
- page viewed,
- date and time of access,
- requested map areas and map tiles,
- referring website.
The OpenStreetMap Foundation processes IP addresses, browser and device information and information about accessed pages or services in particular. Map tiles may be delivered through a worldwide network of cache servers. The OpenStreetMap Foundation acts as an independent controller.
The integration is based on Article 6(1)(f) GDPR. Our legitimate interest lies in providing a clear visual representation of the location and of travel and accommodation options.
The United Kingdom is covered by an adequacy decision of the European Commission. This generally permits data transfers without additional safeguards under Article 46 GDPR.
Affiliate links and partner programmes
We participate in partner programmes operated by various retailers, booking platforms and affiliate networks.
This website currently contains labelled affiliate or partner links to:
- Amazon,
- Booking.com, through its affiliate programme via CJ Affiliate,
- GetYourGuide,
- Headout.
When you click one of these links, you are redirected to the respective provider or affiliate network.
The following information may be transmitted in particular:
- IP address,
- date and time of the click,
- browser and device information,
- previously viewed page,
- destination page,
- an affiliate, campaign or partner identifier contained in the link.
The partner identifier enables the provider or affiliate network to attribute a subsequent purchase or booking to our website.
If you make a purchase or complete a booking after clicking an affiliate link, we may receive a commission from the relevant provider. This does not result in any additional costs for you.
In the case of standard affiliate links, a connection to the respective provider or affiliate network is generally established only after you click the relevant link. Any further processing on the destination website is carried out under the data-protection responsibility of the respective provider.
Where affiliate offers are embedded through GetYourGuide or Headout widgets, the preceding sections concerning these services also apply. The widgets are loaded only after you have given your consent.
The partner programmes currently used are specifically identified in this privacy policy. Any change or extension of the partner programmes used will be reflected in an updated version.
Recipients of personal data
In connection with the processing described above, personal data may be transferred in particular to the following recipients or categories of recipients:
- hosting and IT service providers,
- providers of maps and external content,
- affiliate networks and booking platforms,
- authorities and other public bodies where disclosure is required by law,
- legal and tax advisers where this is necessary to comply with legal obligations or to establish, exercise or defend legal claims.
Data is disclosed only where a legal basis exists.
Retention period
Unless a more specific retention period is stated in this privacy policy, we retain personal data only for as long as is necessary for the respective processing purpose.
Data may be retained for longer where statutory retention obligations apply or where it is required for the establishment, exercise or defence of legal claims.
Once the processing purpose no longer applies and there are no statutory or legitimate grounds for further retention, the data is deleted or anonymised.
Withdrawal of consent
You may withdraw consent at any time with effect for the future.
To change your consent regarding cookies, advertising elements and external widgets, please use the “Change privacy settings” function.
The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right, in accordance with Article 21 GDPR, to object to the processing on grounds relating to your particular situation.
Following a valid objection, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims.
Rights of data subjects
Subject to the applicable statutory requirements, you have the following rights in particular:
- the right of access to personal data concerning you under Article 15 GDPR,
- the right to rectification of inaccurate or incomplete data under Article 16 GDPR,
- the right to erasure under Article 17 GDPR,
- the right to restriction of processing under Article 18 GDPR,
- the right to data portability under Article 20 GDPR,
- the right to object to certain processing under Article 21 GDPR,
- the right to withdraw consent under Article 7(3) GDPR.
To exercise your rights, please contact:
info[at]netwer.de
Right to lodge a complaint with a supervisory authority
Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority with particular responsibility for the controller’s registered office is:
The State Commissioner for Data Protection
and for the Right of Access to Records of Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
Email: Poststelle@LDA.Brandenburg.de
The supervisory authority publishes its current contact details on its website.
Updates to this privacy policy
We update this privacy policy where the services used, technical procedures or legal requirements change.
Last updated: July 2026