Privacy Policy

1. Controller

The controller responsible for data processing within the meaning of the GDPR is:
Jegor Velitski
Shadow Guide Berlin
Kolonnenstraße 8
10827 Berlin, Germany
Phone: +49 152 08288851
Email: shadowguideberlin@gmail.com

2. Contact form and booking enquiries

The contact form on this website opens your local email client with a pre-filled message when submitted. No form data is stored or processed server-side by this website. Your message is sent directly from your email provider to the address above.

When you send an enquiry, I process the personal data you provide (name, email address, tour, preferred date, number of people, message) to respond to your request and to take steps prior to entering into a contract.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures and contract performance) and Art. 6(1)(f) GDPR (legitimate interest in answering your enquiry).

Retention: Your email correspondence is kept in my inbox for as long as is needed to handle your enquiry and to comply with statutory retention obligations (in particular tax-law retention periods of up to 10 years). It is deleted afterwards.

Recipients: Email traffic is handled via Google Mail (Google Ireland Limited). No further disclosure takes place.

3. Server log files and hosting

This website is hosted on Lovable's infrastructure (with Cloudflare as an edge provider). On every request, technical data transmitted by your browser is automatically recorded in server log files:

• IP address (processed truncated / anonymised)
• Date and time of the request
• Requested URL, HTTP status code, transferred volume of data
• Referrer URL and user agent (browser, operating system)

These data are processed solely to ensure stable operation, to defend against attacks and to evaluate system security. They are not merged with other data sources, and no user profiles are created.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and reliable operation of the website).
Retention: typically a few days, at most until any security-related incident has been conclusively investigated.

4. Cookies and local storage

This website does not set marketing or tracking cookies. Only your chosen language is stored in your browser's localStorage (key sg-lang), so that your language preference is kept for your next visit. This storage is strictly necessary to provide the function you actively selected (§ 25(2) no. 2 TDDDG).

If analytics or audience-measurement tools are introduced in the future, your consent will be obtained beforehand via a cookie banner, and this policy will be updated accordingly.

5. Links to social networks

The footer of this website contains plain HTML links to my Instagram and YouTube profiles. No social plug-ins are embedded; no data is transmitted to Meta or Google until you actively click the link. The privacy policies of the respective providers apply on those platforms.

6. Your rights as a data subject

Under the GDPR you have the following rights:

• Access to your processed data (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing (Art. 21)
• Withdrawal of consent with effect for the future (Art. 7(3))

To exercise these rights, an informal email to the address above is sufficient.

7. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority. The competent authority for me is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de

8. Data security

This site is served over an encrypted TLS connection (HTTPS) to protect your data in transit against unauthorised access.

9. Changes to this privacy policy

I update this privacy policy if the legal situation or the actual data processing on this website changes. The version published on this page applies.