Privacy policy
This is an English translation for your convenience. Only the German version (Datenschutzerklärung) is legally binding.
Protecting your personal data matters to us. Below we explain which personal data is processed when you visit this website and when you book a tour, for what purposes this happens, and what rights you have.
1. Controller
Hamburg Radtour
Bernd Kaupert
Nienstedtener Straße 13
22609 Hamburg
Germany
Phone: +49 172 511 76 57
E-mail: kaupert@hamburg-radtour.de
2. Legal bases for processing
We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Telecommunications and Digital Services Data Protection Act (TDDDG). The main legal bases are:
- Art. 6(1)(a) GDPR and Section 25(1) TDDDG: your consent,
- Art. 6(1)(b) GDPR: performance of a contract and pre-contractual measures, for example handling a booking enquiry,
- Art. 6(1)(c) GDPR: compliance with legal obligations, for example retention obligations,
- Art. 6(1)(f) GDPR: legitimate interests, for example the secure and stable operation of this website.
3. Hosting and server log files
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We have a data processing agreement with the hosting provider in accordance with Art. 28 GDPR.
When you visit the website, information transmitted by your browser is collected automatically (server log files): IP address, date and time of access, page accessed, amount of data transferred, referrer URL, browser type and version, and operating system. This data is technically necessary to deliver the website and to ensure its security (Art. 6(1)(f) GDPR). It is not combined with other data sources. The log files are held by our hosting provider, deleted there at regular intervals and not analysed by us. They are only kept longer in the event of a security incident.
4. SSL / TLS encryption
For security reasons, this website uses SSL / TLS encryption. You can recognise an encrypted connection by the padlock symbol and by “https://” in your browser’s address bar.
5. Contact by e-mail or phone
If you contact us by e-mail or phone, we process your details (for example name, contact details, content of your enquiry) in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a booking, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries).
6. Contact and booking forms
On this website we offer a contact form and a form for booking enquiries. For this we use the WordPress plugin WPForms. The form data is processed on our server and sent to us by e-mail; entries are not stored with external providers.
Contact form: name, e-mail address and your message.
Booking form: preferred tour, preferred date, time, number of people, name, e-mail address, mobile phone number and, optionally, a message.
We need this information to answer your enquiry and to plan and confirm your tour (Art. 6(1)(b) GDPR). The mobile phone number is a required field so that we can reach you at short notice on the day of the tour, for example if the weather changes or if you have questions about the meeting point. Without the required details we cannot process your booking enquiry.
To protect against spam, the form uses invisible technical checks (for example a hidden field and a minimum time before submission). No data is passed on to third parties in the process.
7. Cookies
This website does not set any cookies for advertising or analytics purposes and does not embed any third-party services that set cookies. Technically necessary cookies are only set when you log in to the administration area of the website. No consent is required for this (Section 25(2) TDDDG).
8. Video and audio
Videos and audio files on this website are stored on our own server at STRATO and are delivered directly from there. No data is transferred to YouTube, Vimeo or other platforms, and no cookies are set in the process. When you play them, the same information applies as under “Hosting and server log files”.
9. Fonts
The fonts used on this website are stored locally on our server. When you access the pages, no connection is made to servers of Google or other font providers.
10. Links to social networks, partners and Google Maps
On our website we link to our profiles on Facebook, Instagram and YouTube, to partner and review platforms (for example Tripadvisor, GetYourGuide, Hamburg Tourism) and, for directions, to Google Maps. These are simple links; merely visiting our website does not transfer any data to these providers. Only when you click a link does the privacy policy of the respective provider apply.
11. Sharing with tour guides
To run your tour, we pass your name, your mobile number and the date and time of the booking to the guide assigned to it. The number is used solely to reach you at short notice on the day of the tour, for example if the weather changes or there are questions about the meeting point. The guide receives no further details. Beyond that, we do not share your data with third parties, and never for advertising purposes. The legal basis is Art. 6(1)(b) GDPR.
12. Google Search Console and PageSpeed Insights
To maintain this website we use Google Search Console and Google PageSpeed Insights, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These services show us which search terms lead people to our pages and how quickly the pages load. Google processes aggregated data from its own search for this purpose. No Google service is embedded in the pages themselves: visiting our website transfers no data to Google and sets no cookies. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a findable and fast website.
13. Storage period
We only store personal data for as long as is necessary for the respective purpose. Enquiries that do not lead to a booking are deleted as soon as they have been dealt with. Data relating to booked tours is kept for as long as statutory retention obligations apply (usually six or ten years under German commercial and tax law).
14. Your rights
Within the framework of the statutory provisions, you have the right at any time to:
- information about the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR).
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object to the processing at any time on grounds relating to your particular situation.
To exercise your rights, an informal message to kaupert@hamburg-radtour.de is sufficient.
15. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
datenschutz-hamburg.de
16. Automated decision-making
There is no automated decision-making, including profiling.
17. Status of this privacy policy
As of October 2026. We will update this privacy policy whenever our website or the legal requirements change.