This statement explains which personal data is processed when you visit whatsonmadeira.info, for what purpose and on what legal basis. It is based on the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
1. Controller
[TO BE COMPLETED — company name, address and email address exactly as in the imprint. This entry is mandatory under Art. 13(1)(a) GDPR.]
No data protection officer has been appointed, as the conditions of Art. 37 GDPR are not met.
2. Hosting and server log files
The website runs on a server located in [TO BE COMPLETED — server location and name of the hosting provider with whom a data processing agreement under Art. 28 GDPR is in place].
Each page request is automatically logged by the web server: truncated IP address, date and time, requested URL, HTTP status code, volume of data transferred, referrer and browser identification. This data is technically necessary to deliver the site and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, uninterrupted operation). Log files are deleted after 14 days at the latest and are not combined with other data.
3. Cookies and local storage
This website uses no tracking cookies, no Google Analytics, no Meta pixel and no advertising networks. There is therefore no cookie banner.
The following may be set for technical reasons:
- Language selection (WPML): stores the language you chose so you do not have to switch again on every page. Necessary to operate the multilingual site, Art. 6(1)(f) GDPR.
- Editorial login: only for logged-in editors, never for visitors.
The page cache in use (Cache Enabler) and the server-side object cache (Redis) store finished page fragments on the server only. They set no cookies and process no personal data.
4. Fonts — no connection to Google Fonts
The Fraunces and Inter typefaces are served locally from our own server (plugin “OMGF / host-webfonts-local”). Loading a page establishes no connection to Google Fonts or any other external font service, and no IP address is transmitted to Google.
5. Affiliate links
This website contains partner links to GetYourGuide, Booking.com and Discover Cars. As long as you do not click such a link, nothing is transmitted to those companies — they are plain text links, not embedded scripts or tracking pixels.
Only when you click do you leave this website. On the destination site the respective partner processes your data under its own responsibility and will usually set a cookie so that a later booking can be attributed to this website. From that point the partner’s privacy policy applies exclusively:
The legal basis for placing partner links is Art. 6(1)(f) GDPR (legitimate interest in financing the site). The arrangement is disclosed in full in the imprint.
6. Newsletter
For the newsletter “What’s on this month” only your email address is processed. Sign-up uses a double opt-in procedure: after entering your address you receive a confirmation email, and only after you click the link it contains is the address added to the list. The time of sign-up and the confirming IP address are stored as proof of consent.
[TO BE COMPLETED — name and registered office of the newsletter service provider and a reference to the data processing agreement under Art. 28 GDPR. If the provider is outside the EU, also state the transfer mechanism under Chapter V GDPR.]
The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future — via the unsubscribe link at the foot of every issue or informally by email. After withdrawal the address is deleted from the list.
7. Contacting us
If you write to us by email, your details are stored in order to handle the enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR. Correspondence is deleted as soon as it is no longer needed and no statutory retention obligation applies.
8. Recipients
Your data is passed on only to the processors named above (hosting, newsletter delivery) and where we are legally obliged to do so. Data is never sold.
9. Your rights
You have the following rights vis-à-vis the controller: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Any consent given may be withdrawn at any time.
You also have the right to lodge a complaint with a supervisory authority. In Austria this is the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, dsb.gv.at.
10. Status
This privacy policy will be updated whenever the services in use change. [TO BE COMPLETED — date of last revision]