Privacy Policy – Siebenecken.app
Person in Charge
Sieben Tourism Association, Inc.
Kreishausstraße 2–4
32312 Lübbecke
Represented by:
Chair: Kai Abruszat
Vice Chairs: Dr. Henning Vieker and Marko Steiner
Managing Director: Clarissa Schablowski
Court of Registration: Bad Oeynhausen Local Court
Association Registration Number: 1741
Tax ID Number: 331/5851/0652
Phone: (0 57 41) 276-430
Email: tourismusverband@luebbecke.de
Website: www.muehlenkreis.de/Die-westfälischen-Sieben
Data Processors and Technical Service Providers
SCORTEX Technologies – Seeger & Krämer GbR
43 Desteler Street
32351 Stemwede
Phone: 05745 910 900 0
Email: info@scortex.de
Website: scortex.de
Hetzner Online GmbH (hosting provider)
25 Industriestraße
91710 Gunzenhausen
Germany
Functional Software, Inc. (Sentry, error reports)
45 Fremont Street, 8th Floor
San Francisco, CA 94105, USA
Storage in the EU (Frankfurt am Main)
Purposes and Legal Bases for Data Processing
The Siebenecken.app Progressive Web App processes personal data for the purposes described below and on the basis of the legal grounds specified in accordance with Article 6 of the GDPR.
Hosting and Server Logs
Data Processing: The web server automatically collects information each time Siebenecken.app is accessed, including IP address, date and time of access, browser type, operating system, and referring page.
Purpose: To ensure the technical infrastructure, system security, and error analysis.
Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in technical availability and security).
Data processors: Hetzner Online GmbH (servers in Germany) and SCORTEX Technologies.
Retention Period: Server logs are automatically deleted 90 days after they are collected.
Cookies and Local Storage
Data Processing: Siebenecken.app uses browser cookies and local storage to save user settings and app status.
Purpose: To ensure functionality and improve user-friendliness.
Legal basis: Article 6(1)(f) of the GDPR (legitimate interest) for technically necessary storage.
Retention Period and Type:
- "NEXT_LOCALE" cookie: User's language setting – 30 days
- "settings" cookie: Font size setting – 365 days
- "popupDismissed" cookie: Status of the welcome overlay – session cookie (deleted when the browser is closed)
- localStorage "progress": Progress in chapters and tours—is stored until manually deleted by the user
- Service Workers and Cache API: Caching of app resources for offline use—stored until the browser cache is manually cleared
Web Analytics with Umami
Data Processing: Siebenecken.app uses a self-hosted Umami analytics platform on its own servers in Germany. The following data is collected: page views, time spent on the site, browser type, operating system, and approximate geographic location (country/city).
Purpose: To analyze the use of Siebenecken.app in order to optimize the app and the user experience.
Legal Basis: Article 6(1)(f) of the GDPR (legitimate interest in analyzing usage).
Recipient: SCORTEX Technologies (technical management of the analytics platform). No data is disclosed to third parties.
Retention Period: Analytics data is automatically deleted 24 months after it is collected.
sessionStorage: The session key "__sk" (UUID) is stored only for the duration of the current browser session and is not transmitted to servers.
Maps
The app loads map images, elevation data, and map fonts from its own servers (tiles.erleben.app, hosted by Hetzner in Germany). No data is transmitted to map providers such as Mapbox or the OpenStreetMap Foundation. The map data comes from OpenStreetMap (© OpenStreetMap contributors, ODbL) and is processed on these servers.
Error Reports with Sentry
If a technical error occurs in the app, it sends an error report to the Sentry service via its own server. The report includes the error message, the URL, the browser, and the operating system, but not the IP address. In addition, Sentry stores a recording of the screen activity surrounding the error—that is, displayed content, clicks, and swipe gestures. Anything you type into input fields is anonymized in this recording. The reports are stored in a data center in Frankfurt am Main and are deleted after 90 days at the latest. The provider is Functional Software, Inc. in the U.S. For access from the U.S., the EU Commission’s Standard Contractual Clauses apply.
GPS and Location Data
Data Processing: Siebenecken.app collects GPS location data exclusively for the check-in feature, to verify the user's proximity to a point of interest (within 500 meters).
Purpose: To enable the check-in feature for interacting with locations in the app.
Legal basis: Art. 6(1)(a) of the GDPR (express consent of the user via the operating system permission).
Storage: GPS data is not transmitted to the server and is not stored. Processing takes place exclusively on the user's device.
User Permission: Sharing your location requires the user's active permission via the operating system's permission settings (iOS or Android).
Audio Guides
Processing: Audio files for audio guides are provided exclusively by Siebenecken.app's own servers (files.[domain]). No external audio services are used.
Purpose: To provide audio guide content.
Legal basis: Art. 6(1)(f) of the GDPR (legitimate interest in providing content).
Storage: Audio files are temporarily stored in the user's app cache.
YouTube embed (if available)
Processing: If YouTube videos are embedded in Siebenecke.app, they are integrated via youtube-nocookie.com (enhanced privacy mode). YouTube does not set any cookies before the video is activated.
Purpose: To provide multimedia content.
Legal basis: Art. 6(1)(f) of the GDPR (legitimate interests).
Recipient: Google Ireland Limited.
Data Transmission: A connection to YouTube is established only when you click on the video. When this happens, your IP address and device information are transmitted to Google. Google's Privacy Policy applies.
Rights of Data Subjects
Users have the following rights with respect to the data controller:
- Right of Access (Art. 15 of the GDPR): Users may request information about what personal data is being processed about them.
- Right to Rectification (Art. 16 of the GDPR): Inaccurate data may be corrected.
- Right to Erasure (Art. 17 GDPR): Users may request the erasure of their data under certain conditions.
- Right to Restriction of Processing (Art. 18 GDPR): Processing may be restricted.
- Right to Data Portability (Art. 20 GDPR): Users may receive their data in a structured, commonly used, and machine-readable format.
- Right to Object (Art. 21 GDPR): Users may object to the processing of their data, in particular for the purposes of direct marketing or profiling.
To exercise these rights, users may contact the data controller:
Right to File a Complaint
Users have the right to file a complaint with the relevant supervisory authority if they believe their rights have been violated.
Competent supervisory authority for the Sieben e.V. Tourism Association in Lübbecke (North Rhine-Westphalia):
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
Kavalleriestraße 8–10
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de