Privacy Policy

Protecting personal data is important to us. This Privacy Policy explains what data are processed when you visit Radtouren-OPR.de, the purposes for which this takes place, and the rights of data subjects.

1. Controller

The controller responsible for data processing on this website is:

Harald Kühn
Am Waldrand 6
16816 Neuruppin
Germany

Email: info@radtouren-opr.de
Telephone: 0162 3412366

2. Hosting and server log files

When this website is accessed, the web server automatically processes technical access data. This may include, in particular, the IP address, date and time, the page or file accessed, the amount of data transferred, retrieval status, browser, operating system and the previously visited page, insofar as this information is transmitted.

Processing is carried out to provide the website technically, ensure its stability and security, analyse errors, and detect and defend against attacks or misuse. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in operating the website securely and without disruption.

Server log files are retained only for as long as necessary for operation, security and error analysis. Longer retention takes place only where necessary to investigate a security incident or fulfil statutory obligations.

3. Own server-side usage statistics

Radtouren-OPR.de uses its own server-side usage statistics to understand the use of public content and improve the service. Actual page views, date and time, the sequence of pages viewed, active use time while a page is visible, the time actually played for podcast episodes, the language version and an approximate region of origin are recorded.

The full IP address and raw browser identifier are not stored in the statistics database. The server uses a secret key to create a pseudonymous visitor identifier. It is used to count a visitor only once within the selected reporting period and to display related page views. The statistics do not set analytics or marketing cookies and do not use local storage or a persistent browser identifier.

The approximate location is derived from the IP address on our own server. At most the country, state or region and an approximate town are stored; the IP address and geographic coordinates are then discarded. The assignment may be inaccurate, especially for mobile networks, corporate networks or VPN connections, and is therefore marked as approximate. The local location database is supplied by DB-IP; visitor IP addresses are not transmitted to DB-IP.

Raw events are stored for no more than 90 days. Pseudonymised activity reports containing page sequence, active time, podcast listening time and approximate region are stored for no more than 24 months and are then deleted automatically. Logged-in administrators and recognisable automated bots are excluded. The report is visible only in the protected administration area and contains no visitor names or contact details.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is the secure, comprehensible and needs-based improvement of our multilingual information service. Partner reports contain only aggregated values and no individual visitor activity.

4. Contact form, email and telephone

When using the contact form or contacting us by email or telephone, the information provided is processed to handle the enquiry. This may include name, email address, telephone number, message, time and technical verification values for form security.

The contact form uses a local computational CAPTCHA, a hidden verification field and CSRF protection. A copy of the message is not automatically sent to the sender.

The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry concerns pre-contractual or contractual communication. Otherwise, the legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in handling enquiries and protecting against misuse. The data are deleted once the enquiry has been completed and provided that no statutory retention obligations or legitimate grounds prevent this.

5. Technically necessary storage on the end device

The website uses only technically necessary functions on the end device. A session may be used, in particular, for login, form security and CSRF protection. A selected language may be stored technically insofar as this is necessary for the requested display.

Our own usage statistics do not use analytics or marketing cookies and use neither Local Storage nor a permanent identifier in the browser for visitor identification. The legal basis for access to the end device that is strictly necessary is § 25(2) TDDDG. Further processing is based on Art. 6(1)(f) GDPR.

6. Images, videos, podcasts and other files

Images, videos, podcasts and other information files may be provided directly from our own or commissioned servers. Accessing them generates the server data necessary for technical delivery. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in providing information and illustrative material and in secure operation.

External video platforms are not automatically embedded merely by opening a page. If this changes, this Privacy Policy will be amended and consent will be obtained where required.

7. Multilingual content

The website provides content in several languages. The language selection is processed as part of the page access and in the aggregated usage statistics. This serves clear, user-friendly presentation and the improvement of language versions. The legal basis is Art. 6(1)(f) GDPR.

8. Recipients and service providers

Personal data are disclosed only where this is necessary for technical operation, handling an enquiry, fulfilling statutory obligations or safeguarding legitimate interests. Technical service providers are engaged in accordance with data protection requirements.

Aggregated statistical reports for the partners presented contain no full IP addresses, raw browser identifiers or information directly identifying website visitors.

9. Retention period

Raw events from our usage statistics are stored for no more than 90 days. Pseudonymised activity reports containing page sequence, active time, podcast listening time and approximate region are stored for no more than 24 months and are then deleted automatically. The criteria stated in this notice apply to contact and server data.

10. Rights of data subjects

Data subjects have, in accordance with statutory provisions, the right in particular to access, rectification, erasure, restriction of processing, data portability and objection. Consent that has been granted may be withdrawn with effect for the future.

To exercise these rights, notification to: info@radtouren-opr.de is sufficient.

11. Right to object under Art. 21 GDPR

Where personal data are processed on the basis of Art. 6(1)(f) GDPR, an objection may be lodged at any time on grounds relating to the data subject’s particular situation. Processing will then cease unless compelling legitimate grounds or grounds for the establishment, exercise or defence of legal claims prevail.

12. Right to lodge a complaint

Data subjects may lodge a complaint with a data protection supervisory authority. The competent supervisory authority in Brandenburg is:

Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Telephone: 033203 356-0
Email: poststelle@lda.brandenburg.de
Website: www.lda.brandenburg.de

13. Security

This website uses SSL/TLS encryption. In addition, technical and organisational measures are used to protect data against loss, manipulation and unauthorised access.

14. Currency

This Privacy Policy is amended when technical functions, legal requirements or data processing activities change.

Version: August 2026