Privacy and data protection
Clear information, minimal data
This notice explains which personal data may be processed when you visit this website or contact us.
Responsible contact
Data controller
The controller responsible for processing personal data on this website is:
Blue Desert Learning & Retreats GmbH
Blue Desert Learning & Retreats GmbH
Strandweg 12
18586 Ostseebad Sellin
Deutschland
Which data may be processed
Technical data
IP address, browser, operating system, access time, visited pages and server log data.
Contact details
Name, email address, message and voluntary details when you use the contact form or send an email.
Site preferences
Language, theme choice and technically necessary state so the website works reliably.
How data is handled
Hosting and server log files
When the website is accessed, the hosting provider processes technical access data so the page can be delivered, operated reliably and protected against misuse. This may include IP address, date and time of access, requested files, referrer, browser information and operating system information. Processing is based on legitimate interests in the secure and reliable operation of the website.
Contact form and Mailgun
When you use the contact form, your details are processed to answer your request. The message may be sent via Mailgun. Mailgun is used as a technical email service provider. Before publication, the specific Mailgun contract, region, possible subprocessors and data processing agreement must be reviewed.
Email communication
If you contact us by email, your email address, message content and any voluntary details are processed to handle the request. Depending on the content, storage may also be required to document business communication.
Cookies, language and theme
The website stores only necessary preferences, such as language, light or dark mode, form or session state and whether this privacy notice has already been acknowledged. These functions are not used for tracking, but for usability and stability.
Analytics and tracking
This website uses Vercel Web Analytics to understand basic usage patterns and improve the website. According to Vercel, Web Analytics does not use cookies and stores anonymized analytics data. Visitors are identified through a daily rotating hash derived from the incoming request, so they cannot be tracked across different days or websites.
Legal bases
Depending on the purpose, processing is based on Art. 6(1)(b) GDPR for handling pre-contractual or contractual requests, Art. 6(1)(c) GDPR for legal obligations, Art. 6(1)(f) GDPR for secure website operation and Art. 6(1)(a) GDPR where consent is required.
Retention and deletion
Personal data is stored only for as long as required for the relevant purpose or for statutory retention periods. Contact requests are deleted once they have been fully handled and no statutory or business retention duties apply. Server log files are usually stored only for a short period unless a security review is required.
Service providers and processors
Specialized service providers may be used for hosting, technical maintenance and email delivery. These providers process personal data only on instruction and on the basis of suitable agreements where legally required. The actual providers used must be completed before publication.
International data transfers
Some technical service providers may process data outside the European Union or the European Economic Area. In such cases, suitable safeguards must be reviewed, for example adequacy decisions, standard contractual clauses or additional protective measures.
Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. The competent authority may in particular be the authority at your place of residence or at the controller's registered office.
Updates to this notice
This privacy notice may be updated if website functions, service providers or legal requirements change. The current version is available on this page.
Rights under the GDPR
You can exercise your rights at any time through the contact address listed above.
- Access to stored personal data
- Rectification of inaccurate or incomplete data
- Erasure, unless retention duties apply
- Restriction of processing
- Data portability, where applicable
- Objection to processing based on legitimate interests
- Withdrawal of consent with effect for the future
