Privacy Policy
1. Introduction and Data Controller
We take the protection of your personal data very seriously. This privacy policy informs you about which personal data we collect, how we use it, and what rights you have regarding your data.
Data Controller:
Mostly Harmless
Email: datenschutz2025@mostlyharmless.travel
2. Principles of Data Processing
We only collect data that is absolutely necessary for providing our functions and services. We consciously refrain from collecting unnecessary personal data and follow the principle of data minimization.
3. Data Collection and Processing
Registration and Login:
During registration and use of our service, we collect the following data:
- Email address (for login and communication)
- Username (freely chosen)
- Password (stored encrypted)
- Usage data (Likes, Comments, Itineraries, etc.) (for providing services)
Legal Basis: Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract fulfillment) and Art. 6 para. 1 lit. a GDPR (consent).
4. Cookies and Technical Data
We use only technically necessary cookies to ensure the login function and manage your session. These cookies are required for the proper operation of our website.
Cookies Used:
- Session cookies (for login management)
- Authentication cookies (for secure login)
You can disable the use of cookies in your browser settings, but this may impair the functionality of our website.
5. No Data Sharing with Third Parties
We store and process your data exclusively for providing our services. We do not pass on any data to third-party providers, advertising operators, or tracking services. Your data is neither used for advertising purposes nor passed on to external companies for analysis.
6. Data Security
We implement technical and organizational security measures to protect your data against manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technical developments.
7. Your Rights
You have the following rights regarding your personal data:
- Right of Access: You can obtain information about the data we store at any time
- Right of Rectification: You can have incorrect data corrected
- Right of Erasure: You can request the deletion of your data
Data Export: You can view and download all your data stored with us at any time via your profile → Data Export.
8. Storage Period
We store your personal data only as long as necessary for the fulfillment of the stated purposes or as required by legal retention periods. After termination of your account, your data will be deleted within 30 days.
Inactive accounts will be deleted after two years. You will be notified before your account is deleted.
9. Contact
For questions about the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, please contact:
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is not lawful.
11. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. For your next visit, the new privacy policy will then apply.
Last updated: 13.07.2025