Privacy

Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Germany

Hosting and server logs

The site runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. Hetzner processes the data on our behalf (Art. 28 GDPR).

With every request the server keeps a log: your IP address, date and time, the address requested, the server's response and the identifier of your browser. We need this to run the site securely and reliably and to detect attacks and errors. The legal basis is our legitimate interest in this (Art. 6 (1) (f) GDPR). The logs are deleted after 14 days at the latest and are not analysed to identify people.

Cookies

We only use cookies the site technically needs. That is why there is no cookie banner.

• _urbivio_key: protects forms against misuse (protection against forged requests). It is deleted when you close the browser.
• urbivio_tiles: remembers which cards you hid on the start page. It is only created when you save your choice, holds only the names of the hidden cards and lasts at most one year. If you show all cards again, it is deleted.

The legal basis is § 25 (2) no. 2 of the German TDDDG (technically necessary) and Art. 6 (1) (f) GDPR.

Visitor count

To see whether and how the site is used, we count ourselves, without a cookie and without a third-party service: how often pages, layers and views are opened, in which language, which website people come from (only its domain) and how often the interface is called. To count a visitor only once a day, we form a check value from the IP address and browser identifier with a random key that changes every day. It stays in memory only and is never stored; the next day nobody can be recognised again. Only daily sums, that is numbers, are stored, and deleted after 400 days. The legal basis is our legitimate interest in improving the service (Art. 6 (1) (f) GDPR); we do not access your device for this.

What we do not do

There are no third-party analytics services, no tracking and no ads. Fonts, maps and all other content come from our own server, so your data do not go to other servers. The open interface at /api/v1 only serves the cities' open data, no data about visitors.

E-mail

If you write to kontakt@urbivio.net, we use your address and your message only to reply (Art. 6 (1) (f) GDPR). We delete them once the matter is settled, unless the law requires us to keep them.

Your rights

You have the right of access to your data, to rectification, erasure and restriction of processing, to data portability and to object to processing based on legitimate interest (Art. 15 to 21 GDPR). Just send us an e-mail.

You can also lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.