{"id":31,"date":"2026-08-10T00:40:16","date_gmt":"2026-08-09T23:40:16","guid":{"rendered":"https:\/\/whatsonmadeira.info\/privacy-policy\/"},"modified":"2026-08-10T00:40:16","modified_gmt":"2026-08-09T23:40:16","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/whatsonmadeira.info\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<p>This statement explains which personal data is processed when you visit whatsonmadeira.info, for what purpose and on what legal basis. It is based on the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).<\/p>\n<h2>1. Controller<\/h2>\n<p class=\"wom-fillin\">[TO BE COMPLETED \u2014 company name, address and email address exactly as in the imprint. This entry is mandatory under Art. 13(1)(a) GDPR.]<\/p>\n<p>No data protection officer has been appointed, as the conditions of Art. 37 GDPR are not met.<\/p>\n<h2>2. Hosting and server log files<\/h2>\n<p>The website runs on a server located in <span class=\"wom-fillin\">[TO BE COMPLETED \u2014 server location and name of the hosting provider with whom a data processing agreement under Art. 28 GDPR is in place]<\/span>.<\/p>\n<p>Each page request is automatically logged by the web server: truncated IP address, date and time, requested URL, HTTP status code, volume of data transferred, referrer and browser identification. This data is technically necessary to deliver the site and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, uninterrupted operation). Log files are deleted after 14 days at the latest and are not combined with other data.<\/p>\n<h2>3. Cookies and local storage<\/h2>\n<p>This website uses <strong>no<\/strong> tracking cookies, no Google Analytics, no Meta pixel and no advertising networks. There is therefore no cookie banner.<\/p>\n<p>The following may be set for technical reasons:<\/p>\n<ul>\n<li><strong>Language selection (WPML):<\/strong> stores the language you chose so you do not have to switch again on every page. Necessary to operate the multilingual site, Art. 6(1)(f) GDPR.<\/li>\n<li><strong>Editorial login:<\/strong> only for logged-in editors, never for visitors.<\/li>\n<\/ul>\n<p>The page cache in use (Cache Enabler) and the server-side object cache (Redis) store finished page fragments on the server only. They set no cookies and process no personal data.<\/p>\n<h2>4. Fonts \u2014 no connection to Google Fonts<\/h2>\n<p>The Fraunces and Inter typefaces are served <strong>locally from our own server<\/strong> (plugin &#8220;OMGF \/ host-webfonts-local&#8221;). Loading a page establishes <strong>no<\/strong> connection to Google Fonts or any other external font service, and no IP address is transmitted to Google.<\/p>\n<h2>5. Affiliate links<\/h2>\n<p>This website contains partner links to <strong>GetYourGuide<\/strong>, <strong>Booking.com<\/strong> and <strong>Discover Cars<\/strong>. As long as you do not click such a link, nothing is transmitted to those companies \u2014 they are plain text links, not embedded scripts or tracking pixels.<\/p>\n<p>Only when you click do you leave this website. On the destination site the respective partner processes your data under its own responsibility and will usually set a cookie so that a later booking can be attributed to this website. From that point the partner&#8217;s privacy policy applies exclusively:<\/p>\n<ul>\n<li><a href=\"https:\/\/www.getyourguide.com\/privacy_policy\/\" rel=\"noopener nofollow\" target=\"_blank\">GetYourGuide<\/a><\/li>\n<li><a href=\"https:\/\/www.booking.com\/content\/privacy.html\" rel=\"noopener nofollow\" target=\"_blank\">Booking.com<\/a><\/li>\n<li><a href=\"https:\/\/www.discovercars.com\/privacy-policy\" rel=\"noopener nofollow\" target=\"_blank\">Discover Cars<\/a><\/li>\n<\/ul>\n<p>The legal basis for placing partner links is Art. 6(1)(f) GDPR (legitimate interest in financing the site). The arrangement is disclosed in full in the <a href=\"\/en\/imprint\/\">imprint<\/a>.<\/p>\n<h2>6. Newsletter<\/h2>\n<p>For the newsletter &#8220;What&#8217;s on this month&#8221; only your email address is processed. Sign-up uses a <strong>double opt-in<\/strong> procedure: after entering your address you receive a confirmation email, and only after you click the link it contains is the address added to the list. The time of sign-up and the confirming IP address are stored as proof of consent.<\/p>\n<p class=\"wom-fillin\">[TO BE COMPLETED \u2014 name and registered office of the newsletter service provider and a reference to the data processing agreement under Art. 28 GDPR. If the provider is outside the EU, also state the transfer mechanism under Chapter V GDPR.]<\/p>\n<p>The legal basis is your consent under Art. 6(1)(a) GDPR. You may withdraw it at any time with effect for the future \u2014 via the unsubscribe link at the foot of every issue or informally by email. After withdrawal the address is deleted from the list.<\/p>\n<h2>7. Contacting us<\/h2>\n<p>If you write to us by email, your details are stored in order to handle the enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise Art. 6(1)(f) GDPR. Correspondence is deleted as soon as it is no longer needed and no statutory retention obligation applies.<\/p>\n<h2>8. Recipients<\/h2>\n<p>Your data is passed on only to the processors named above (hosting, newsletter delivery) and where we are legally obliged to do so. Data is never sold.<\/p>\n<h2>9. Your rights<\/h2>\n<p>You have the following rights vis-\u00e0-vis the controller: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). Any consent given may be withdrawn at any time.<\/p>\n<p>You also have the right to lodge a complaint with a supervisory authority. In Austria this is the <strong>Austrian Data Protection Authority<\/strong>, Barichgasse 40\u201342, 1030 Vienna, <a href=\"https:\/\/www.dsb.gv.at\/\" rel=\"noopener nofollow\" target=\"_blank\">dsb.gv.at<\/a>.<\/p>\n<h2>10. Status<\/h2>\n<p>This privacy policy will be updated whenever the services in use change. <span class=\"wom-fillin\">[TO BE COMPLETED \u2014 date of last revision]<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This statement explains which personal data is processed when you visit whatsonmadeira.info, for what purpose and on what legal basis. It is based on the General Data Protection Regulation (GDPR) [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-31","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/pages\/31","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/comments?post=31"}],"version-history":[{"count":0,"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/pages\/31\/revisions"}],"wp:attachment":[{"href":"https:\/\/whatsonmadeira.info\/en\/wp-json\/wp\/v2\/media?parent=31"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}