Privacy policy

1. Controller

The controller (Art. 4(7) GDPR) for personal data processed on heimatpuls.com is:

The operator of heimatpuls.com
E-mail: [email protected]

You can also reach us through the contact page. This policy is written to meet the information duties of the EU General Data Protection Regulation (GDPR) and the German Telecommunications-Digital-Services Data Protection Act (TDDDG).

2. In short

• The site sets no cookies and loads no analytics or advertising tags.
• Two small preferences (your age confirmation and your acknowledgement of the cookie notice) are kept in your own browser.
• When you load a page, your browser fetches fonts and photographs from third-party servers, which see your IP address.
• If you use the contact form, we use what you send only to reply to you.

3. Visiting the site

When you open a page, the web server that hosts heimatpuls.com receives the technical data your browser sends with every request: your IP address, the page requested, the time, the referring page and your browser type. This data is needed to deliver the page (Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website). The site is delivered through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as our processor for hosting, content delivery and protection against attacks; data may be processed in the USA under the EU-US Data Privacy Framework. Cloudflare's privacy policy: cloudflare.com/privacypolicy. Logs are deleted automatically after a short rotation period and are not combined with any other data.

4. Browser storage

The site uses the local storage of your browser, not cookies, for two values:

• hp_age_ok — set when you confirm that you are 18 or older, so that the age notice does not reappear on every page;
• hp_consent — set when you close the cookie notice, so that it does not reappear on every page.

These values are strictly necessary for the function you requested (§ 25(2) TDDDG) and stay on your device. We cannot read them from our servers. You can delete them at any time through your browser's site-data settings.

5. Fonts and images

Typefaces are loaded from Google Fonts (Google Ireland Ltd., Dublin) and photographs from Unsplash (Unsplash Inc., Montréal, Canada, via its image delivery network). To deliver a file, these services receive your IP address and standard request headers. The legal basis is our legitimate interest in a fast, consistently designed site (Art. 6(1)(f) GDPR). Google's privacy policy is at policies.google.com/privacy; Unsplash's at unsplash.com/privacy. If you would rather avoid these requests, a content blocker will stop them without breaking the site; system fonts are used as a fallback.

6. Contact form

The contact form asks for your name, your e-mail address, a subject and your message. We use these only to read and answer your enquiry (Art. 6(1)(b) GDPR, taking steps at your request before any contract, and Art. 6(1)(f) GDPR). Your message is kept for as long as needed to deal with it and is deleted afterwards unless a legal retention duty applies. We do not pass it to the casinos or hotels described on this site unless you ask us to. Please do not send us payment details or special-category data.

7. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You also have the right to lodge a complaint with a supervisory authority; this is the data protection authority of the German federal state in which the controller is based. To exercise your rights, write to us through the contact page.

8. Minors

This website is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us information, let us know and we will delete it.

9. Changes

We will update this policy if the way the site works changes. The date at the top shows the current version.