Privacy Policy
Last updated: 28.10.2026
1. Data controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) is: Melanie Ginting Eichenweg 4 21357 Wittorf Germany Email: [email protected]
2. General information on data processing
Scope of personal data processing We process our users' personal data only insofar as this is necessary to provide a functioning website along with our content and services. The processing of our users' personal data takes place regularly only with the user's consent or where the processing of the data is permitted by law. Legal bases for processing - Art. 6 (1)(a) GDPR: consent - Art. 6 (1)(b) GDPR: performance of a contract - Art. 6 (1)(c) GDPR: legal obligation - Art. 6 (1)(f) GDPR: legitimate interest Data deletion and storage duration The personal data of the data subject is deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if provided for by the European or national legislator.
3. Provision of the website and server log files
Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer (server log files). The following data is collected: - IP address of the user - Date and time of access - Pages and files accessed - Amount of data transferred - Source/referrer from which you arrived at the page - Browser and browser version used - Operating system used Log files are stored to ensure the functionality of the website. The data also helps us to optimise the website and ensure the security of our IT systems. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest). Storage duration: log files are deleted after a maximum of 30 days. Hosting and content delivery network The website, including all content and images, runs on our own server in Germany. Requests pass through the content delivery network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which delivers the site faster from locations close to you, especially in Asia, and protects it against attacks. For this, Cloudflare processes your IP address and the request data listed above and temporarily caches content of the website. Cloudflare may also process data in the USA; the transfer relies on EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework, under which Cloudflare is certified. Legal basis: Art. 6 (1)(f) GDPR. Our legitimate interest is the secure and fast delivery of the website.
Audience measurement (Umami)
To understand how our website is used, we run Umami, an open-source analytics tool, on our own server in Germany. No other provider receives the data; as with the website itself, requests pass through Cloudflare (see section 3). Umami sets no cookies and stores nothing on your device. The following data is processed: - the page visited and the referring page - browser, operating system, device type, screen size and language - country and region, derived from the Cloudflare request - clicks on affiliate links (target domain and position of the link on the page) Your IP address is not stored. Visits are counted with a one-way hash of the IP address, browser information and a value that changes every month, so visitors cannot be recognised beyond that month or tracked across websites. We only look at aggregated statistics. Legal basis: Art. 6 (1)(f) GDPR. Our legitimate interest is measuring the reach of our content and improving the website.
4. Cookies and consent management
Our website uses cookies. Cookies are small text files stored on your device. We distinguish between: Technically necessary cookies (Art. 6 (1)(f) GDPR) These cookies are strictly necessary for the operation of the website (e.g. storage of your cookie settings and your NEXT_LOCALE language preference). Optional cookies (Art. 6 (1)(a) GDPR) These cookies are only set after your explicit consent. They include cookies for: - Affiliate tracking (Travelpayouts and partners) You can revoke your consent at any time via the cookie banner or the "Cookie settings" link in the footer.
5. Maps — OpenStreetMap
Maps on this website are drawn in your browser with the open-source library MapLibre GL JS. The map data comes from OpenStreetMap (© OpenStreetMap contributors, Open Database License), prepared by Protomaps. All map files — map tiles, fonts and symbols — are delivered by our own map server maps.ginka.info in Germany; as with the website itself, requests pass through Cloudflare (see section 3). No data is sent to OpenStreetMap, Protomaps or any other map provider, and no cookies are set. Loading a map is handled like any other page content and is covered by the server log files described in section 3. Legal basis: Art. 6 (1)(f) GDPR. Our legitimate interest is showing locations without involving third parties. The "View on Map" link on business pages opens Google Maps in a new tab only when you click it. From then on, Google's privacy policy applies: https://policies.google.com/privacy
Travelpayouts (affiliate network)
We use Travelpayouts as an affiliate network to enable bookings via partners such as Agoda, Booking.com, Trip.com and others. When you click an affiliate link, a cookie is set that allows us to receive a referral commission if you complete a booking. The following data is processed: - Click timestamp - Click source (which link on our site) - IP address (anonymised) - Browser information Travelpayouts is a service of Travelpayouts LTD, Cyprus. Legal basis: Art. 6 (1)(a) GDPR (consent). Travelpayouts' privacy policy: https://www.travelpayouts.com/legal/privacy_policy/
CJ (affiliate network)
Our links to Booking.com, Agoda and 12Go run through the affiliate network CJ (Commission Junction). These links are plain links without any script on our website: only when you click one does your browser go via a CJ server to the provider. CJ then records the click and may set its own cookies so that a booking can be attributed to us. Our website itself does not set any cookies for this. The following data is processed by CJ when you click: - Click timestamp - Click source (which link on our site) - IP address - Browser information CJ is a service of Commission Junction LLC, Santa Barbara, USA. Data may therefore be processed in the USA. Legal basis for providing the link: Art. 6 (1)(f) GDPR (our legitimate interest in referral commissions). Cookies on CJ's side are governed by CJ's own privacy policy. CJ's privacy policy: https://www.cj.com/legal/privacy
Other affiliate partners
When you click an affiliate link to the following providers, you leave our website and are subject to the privacy policies of the respective provider: - Agoda Pte. Ltd. (Singapore) — https://www.agoda.com/info/privacy.html - Booking.com B.V. (Netherlands) — https://www.booking.com/content/privacy.html - Trip.com Group (Singapore) — https://www.trip.com/m/privacy.html - Klook Travel Technology Limited (Hong Kong) — https://www.klook.com/privacy/ - 12Go Asia (Thailand) — https://12go.asia/en/privacy
Classified ads (berape.com)
On our marketplace page (/marketplace) we embed the classifieds widget of berape.com. berape.com is operated by the same controller (Melanie Ginting, Lau Jambu, see section 1) and runs on its own server in Germany. When you open the page, your browser loads the widget script and the ads directly from berape.com. In doing so, your IP address, browser information and your search entries (keyword, category, location) are transmitted to berape.com. No cookies are set by the widget. If you sign in to post or manage an ad, the sign-in token is stored in your browser's local storage for this site; you can remove it by signing out or clearing site data. When you contact a seller, you are forwarded to WhatsApp. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in offering a local marketplace); for posting ads Art. 6 (1)(b) GDPR. berape privacy policy: https://berape.com/privasi
6. Contact by email
When you contact us by email, the data you provide (email address, name if applicable, and other information you share) is stored to respond to your request. Legal basis: Art. 6 (1)(f) GDPR (legitimate interest in responding to your request). The data is deleted as soon as it is no longer needed, at the latest after 24 months.
7. Rights of the data subject
You have the following rights regarding your personal data: - Right of access (Art. 15 GDPR) - Right to rectification (Art. 16 GDPR) - Right to erasure (Art. 17 GDPR) - Right to restriction of processing (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) - Right to object (Art. 21 GDPR) - Right to withdraw consent (Art. 7 (3) GDPR) - Right to lodge a complaint with a supervisory authority (Art. 77 GDPR) To exercise your rights you can contact us at any time at [email protected]. Competent supervisory authority Die Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover, Germany Phone: +49 (0511) 120-4500 Email: [email protected] Website: https://www.lfd.niedersachsen.de
8. Data security
We take appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our website uses SSL encryption (HTTPS).
9. Currency and changes to this privacy policy
As our website and offers continue to develop, or due to changes in legal requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed at any time on this page.