Privacy policy
Last updated: 1 February 2023. This English version explains how we process personal data when providing the LostPlaceUltimate application. Terms referring to people apply to all genders.
Controller
Benjamin Keller (BeKa.NRW)
Alverskirchenerstr. 22
48351 Everswinkel, Germany
Email: dsgvo@lostplaceultimate.eu
Data and purposes
We may process account data, location data, contact details, content submitted by users, usage data and technical communication data. Processing supports operation of the service, account management, community functions, support, security and technical infrastructure.
Legal bases
We process data where necessary to perform a contract or take pre-contractual steps (Art. 6(1)(b) GDPR), and where necessary for our legitimate interests in securely and reliably providing the service (Art. 6(1)(f) GDPR). Consent is used where required and may be withdrawn at any time.
Security and retention
We use appropriate technical and organisational safeguards to protect confidentiality, integrity and availability. Connections are protected using TLS. Data is deleted or restricted when its purpose or legal basis ends, unless statutory retention or the establishment, exercise or defence of legal claims requires continued storage.
Hosting and logs
Our hosting provider processes IP addresses and request metadata to deliver the service, maintain stability and defend against abuse. Server logs may be retained for up to 30 days unless they are required as evidence. Hosting services are provided by STRATO AG, Pascalstraße 10, 10587 Berlin, Germany.
Accounts and community features
Registration processes usernames, email addresses and password credentials. Users may choose pseudonyms. Public comments and community contributions are visible to others. Their content, time and associated technical information may be retained for moderation, security and legal enforcement. After account deletion, conversation content may be anonymised where necessary to preserve coherent discussions; users may request deletion.
Contact and submissions
When you contact us, report a place or suggest a new entry, we process the supplied contact and content data to review and answer the request. Only provide information that is necessary for this purpose.
Embedded services
Google Maps processes IP addresses and, where permitted by the device, location data to display maps. Provider: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. See Google's privacy policy. Locally hosted Font Awesome files do not transmit data to Font Awesome. Where fonts are loaded from Google servers, Google receives the technical request data required to deliver them.
International transfers
Where data is processed outside the EEA, we rely on an adequacy decision, approved safeguards such as the European Commission's standard contractual clauses, or another lawful transfer mechanism under Articles 44–49 GDPR.
Your rights
You may request access, rectification, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests and withdraw consent at any time. You also have the right to lodge a complaint with a competent supervisory authority.
Updates
We update this policy when our processing or legal obligations change. Please review it regularly. For privacy requests, contact dsgvo@lostplaceultimate.eu.