Karlsfurs Suitwalk

Privacy Policy

The German version of this privacy policy is authoritative. This English translation is provided for convenience.

Last updated: 2026-04-22

1. Privacy at a Glance

General Information

This section is a short summary of what happens to your personal data when you visit this site. Personal data is any data that can be used to identify you. The full details are in the sections that follow.

Data collection on this website

Data processing on this website is carried out by the website operator. Their contact details are below under "Information about the responsible party".

We collect data in two cases: when you actively give it to us (e.g. when registering for a walk or submitting a gallery link), or when your browser sends it automatically as you load a page (e.g. IP address, browser, time of access).

2. Hosting

This website runs on a dedicated server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Personal data is processed there. A data processing agreement under Art. 28 GDPR is in place with Hetzner.

For details, see Hetzner's privacy policy.

The legal basis is Art. 6 (1) lit. f GDPR. We have a legitimate interest in the reliable provision of this website.

3. General Information and Mandatory Notices

Information about the responsible party

The party responsible for data processing on this website is:

Ben Scholzen
Kaiserstr. 128
76133 Karlsruhe
Germany

Phone: 015678 324831
Email: mail@dasprids.de

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data. For data-protection enquiries, email mail@dasprids.de.

Storage period

Where no more specific period is given, your data stays with us until the purpose for processing no longer applies. If you submit a justified deletion request or revoke consent, we delete your data, unless statutory retention obligations require us to keep it.

Legal bases for data processing

Where you have consented, we rely on Art. 6 (1) lit. a GDPR. Where data is required for the performance of a contract or pre-contractual measures (such as registering for a walk), Art. 6 (1) lit. b GDPR applies. We also process some data on the basis of our legitimate interest under Art. 6 (1) lit. f GDPR, for example to ensure technical operation.

Note on data transfers to third countries

For sign-in we use providers based outside the EU (Google, Telegram). If you use these sign-in options, personal data may be transferred to third countries, in particular the United States (Google) and the United Arab Emirates (Telegram). For the United States there is an adequacy decision by the EU Commission (EU-US Data Privacy Framework). For the UAE there is no adequacy decision and no appropriate safeguards within the meaning of Art. 46 GDPR. Transfers there happen solely on the basis of your explicit consent. Details are in section 5.

Your rights

Under the GDPR you have the following rights against us:

  • Information about the personal data we hold about you (Art. 15 GDPR),
  • Correction of incorrect data (Art. 16 GDPR),
  • Deletion of your data (Art. 17 GDPR),
  • Restriction of processing (Art. 18 GDPR),
  • Data portability (Art. 20 GDPR),
  • Objection to processing based on legitimate interests (Art. 21 GDPR),
  • Withdrawal of consent with effect for the future (Art. 7 (3) GDPR),
  • Complaint to a supervisory authority (Art. 77 GDPR), in particular at your habitual residence, your place of work, or the place of the alleged breach.

For information, correction, or deletion, contact the address given in the imprint or mail@dasprids.de. You can also delete your account and the associated data directly via the "Account" section of this site.

Right to object (Art. 21 GDPR)

If we process your data on the basis of our legitimate interests under Art. 6 (1) lit. f GDPR (in particular for technical operation and server logs), you may object at any time. We will then stop processing the data in question, unless we can demonstrate compelling legitimate grounds that override your interests, or unless the processing serves to assert, exercise, or defend legal claims.

No automated decision-making

We do not use automated decision-making within the meaning of Art. 22 GDPR. No profiling takes place.

SSL/TLS encryption

This site uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

4. Data Collection on This Website

Account data

When you sign in, we create an account. We store the following profile data persistently (until you delete your account):

  • the display name from your sign-in provider,
  • the provider (Google or Telegram) and the user ID at that provider,
  • when signing in via Google, your email address, if Google provides it,
  • when signing in via Telegram, your Telegram username (@username), if your profile has one,
  • the URL of your profile picture at the sign-in provider, if available,
  • the timestamps of account creation and last sign-in.

Which of these we receive from each provider is described in section 5. The legal basis is Art. 6 (1) lit. b GDPR (performance of a contract; without an account it is not possible to register for a walk).

Cookies

This site sets only technically necessary cookies. They are required for sign-in, language, and theme to work. No analytics or advertising cookies are used. Specifically, we set:

  • karlsfurs_session (30 days): Identifies your session after successful sign-in.
  • PARAGLIDE_LOCALE (400 days): Stores your preferred language.
  • theme (400 days): Stores your choice between light and dark mode. Set only when you make a choice; in the default "system" mode no cookie is written.

The legal basis for setting the cookies is § 25 (2) no. 2 TDDDG (strictly necessary cookies); the subsequent processing of the personal data they contain is based on Art. 6 (1) lit. f GDPR.

Server log files

The web server (nginx) automatically logs every request. The following are recorded:

  • IP address,
  • time of the request,
  • requested URL,
  • referrer URL,
  • user-agent (includes browser type, version, and operating system).

This data is used solely for the stable operation of the site and to defend against attacks. It is not merged with other data sources. Log files are rotated automatically after at most 14 days (default nginx rotation).

The legal basis is Art. 6 (1) lit. f GDPR; the legitimate interest is secure operation.

Walk registration data

When you register for a walk, we store:

  • the display name you provide (stored separately from your profile name; later profile changes do not propagate retroactively),
  • the participation type (fursuiter, spotter, photographer, or guest),
  • whether you take part in the walk and/or the meal,
  • the time of registration,
  • a link to your account.

The legal basis is Art. 6 (1) lit. b GDPR (organising the event). The data is kept during the registration period and for statistics about past walks. You can withdraw your registration at any time via the website.

Gallery submissions

If you submit a link to photos or videos of a past walk, we store the URL, title, kind (gallery/video), time of submission, and a link to your account. After approval by a moderator, the link, title, and kind are publicly displayed. The link to your account is not publicly visible.

The title field is pre-filled with your profile name from the sign-in provider when you submit, and is publicly visible after approval. If you do not want to appear by name, change the title to any other text before submitting.

You can withdraw your own pending submissions at any time via your account.

Account deletion

You can delete your account at any time in the "Account" section. When you do:

  • A registration for the next upcoming walk is deleted.
  • Registrations for past walks are anonymised (your name is removed). Anonymised data can no longer be attributed to a person and, under Recital 26 GDPR, is no longer considered personal data. Your withdrawal therefore takes full effect.
  • Gallery submissions are either deleted or anonymised, at your choice. Anonymising removes the title; the link itself remains visible in the public gallery.

5. Sign-in

Google Sign-In

You can sign in with "Sign in with Google". The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We read the following fields from the identity token (ID token) issued by Google: Google ID (sub), name, email address (if included in the token), and the URL of your profile picture, if available. No further permissions are requested; in particular we do not access Gmail, Drive, Contacts, or any other Google service.

During sign-in Google may transfer personal data to servers in the United States. Google is certified under the EU-US Data Privacy Framework; the third-country transfer is based on an adequacy decision by the EU Commission (Art. 45 GDPR).

The legal basis for the sign-in itself is your consent under Art. 6 (1) lit. a GDPR. You can withdraw it at any time by deleting your account on this site.

For more information, see Google's privacy policy.

Telegram sign-in

Alternatively, you can sign in via Telegram. The provider of Telegram login is Telegram FZ-LLC, Business Central Towers, Sheikh Zayed Road, Dubai, United Arab Emirates.

When signing in, you are redirected to Telegram and authorise our bot. Telegram passes us your Telegram user ID, your first name and (if present) last name from your Telegram profile (combined as the display name), your Telegram username (@username) if you have one, and the URL of your profile picture if available. We use these details to create and manage your account.

For the United Arab Emirates there is no adequacy decision by the EU Commission, and no appropriate safeguards within the meaning of Art. 46 GDPR are in place. The transfer therefore happens solely on the basis of your explicit consent under Art. 49 (1) lit. a GDPR. You are hereby expressly informed that the level of data protection in the UAE does not correspond to that of the EU, and that authorities there may have wider access powers against which there may be no effective legal remedies.

The legal basis for the sign-in itself is your consent under Art. 6 (1) lit. a GDPR. You can withdraw it at any time by deleting your account on this site.

For more information, see Telegram's privacy policy.

6. Plugins and Tools

Google Maps

Addresses on this website (e.g. the meeting point of a walk) are linked to Google Maps. No maps or scripts from Google are embedded. Data is only transmitted to Google once you click such a link. Google then receives standard HTTP data such as your IP address and the referrer URL.

For more information, see Google's privacy policy.