Privacy Notice for the “Methana Virtual Guide” Website and App
Last updated: 9 May 2025

1. Controller (Art. 4(7) GDPR)

Tobias Schorr – Nature Discovery Tours
📧 tobiasschorr@methana.de | 📞 +49-179-4761831
(No Data Protection Officer appointed; please use the contact above.)

2. Scope

This Notice applies to www.methana.de (including sub-pages for “Methana Virtual Guide”) and the “Methana Virtual Guide” app (together, the “Service”).

3. Legal Bases (Art. 6 GDPR)

Contractual necessity (Art. 6(1)(b)): providing core web/app functionality.

Consent (Art. 6(1)(a)): location access, push notifications, embedded third-party content, optional features.

Legitimate interests (Art. 6(1)(f)): IT security, crash/error diagnostics, server logs.

Legal obligations (Art. 6(1)(c)): statutory retention, compliance.

4. Your Rights

You may exercise your rights of access, rectification, erasure, restriction, portability, objection (Art. 21) and withdrawal of consent at any time with effect for the future.
You may lodge a complaint with a supervisory authority (e.g., your local authority in the EU).

5. Processing Activities & Data Categories

5.1 Website (server logs)

IP address (shortened where feasible), timestamp, URL, referrer, user agent, OS, HTTP status — for delivery, stability and security (Art. 6(1)(f)). Typical retention: 7–30 days.

5.2 App (“Methana Virtual Guide”)

Device/language settings;

Location data (optional, consent) for maps/routing/POIs; no continuous background tracking;

Usage and UGC: features used (map, gallery), locally recorded routes, content you publish;

Crash reports for diagnostics (Art. 6(1)(f));

Push notifications (optional);

Device permissions: location, camera/photos, storage — requested only when needed and only after OS-level consent (Art. 6(1)(a)).

5.3 Contact / Support

Email address and message content, processed to handle your request (Art. 6(1)(a/b)). Retained until the request is resolved and as required by law.

5.4 Newsletter (currently inactive)

If introduced later: double opt-in; unsubscribe at any time.

5.5 Payments / Purchases (if introduced)

Handled by platform/payment providers. Legal basis: Art. 6(1)(b/c/f).

5.6 Embedded content (e.g., YouTube)

Playback may set cookies and collect personal data by the provider; consent may be required.

5.7 Maps / Tile providers

When loading map tiles (e.g., OpenTopoMap/OpenStreetMap providers), your IP address and technical metadata are transmitted to the provider (Art. 6(1)(a) or (f) depending on implementation).

6. Recipients / Processors (Art. 28 GDPR)

Hosting/IT service providers; Firebase (Google LLC) for crash reporting/Firestore (if used), under Data Processing Addendum and strict instructions.

7. International Data Transfers (Art. 44 et seq.)

Where providers are located outside the EU/EEA (e.g., Google LLC, USA), we rely on Standard Contractual Clauses (SCCs) under Art. 46(2)(c) and implement additional safeguards (e.g., encryption). If an adequacy mechanism is available and applicable, we use it.

8. Cookies & Local Storage

We use only essential cookies/local storage for operation and security. Non-essential cookies/trackers are used only with your consent (opt-in, revocable at any time).

9. Retention & Deletion

We keep personal data only as long as necessary for the purposes or statutory duties; afterwards we delete or anonymize. Crash data is deleted on a regular schedule; logs typically 7–30 days.

10. Security

We use SSL/TLS (HTTPS), access controls, data minimization and regular reviews (Art. 32 GDPR).

11. No Automated Decisions

We do not use automated decision-making or profiling under Art. 22 GDPR.

12. Children

The Service is not intended for children under 16. We do not knowingly process such data without parental consent.

13. Changes

We may update this Notice to reflect legal or technical changes. The current version is available on the website and in the app.

14. Contact

Tobias Schorr – 📧 tobiasschorr@methana.de | 📞 +49-179-4761831