Privacy policy
This is a translation for convenience. The German version is the legally binding one.
1. Privacy at a glance
What this website does NOT do
This website is a static website with no database. That means:
- No storage of personal data on this website
- No user accounts or registration
- No cookies for tracking purposes
- No analytics tools such as Google Analytics
- No contact form
- No comment function
- No external fonts (Google Fonts etc.) – all fonts are hosted locally
Local resources (GDPR compliant)
The following resources are hosted locally on our server – no data is transferred to third parties in the process:
- Fonts (Lato, Montserrat) – self-hosted instead of Google Fonts
- JavaScript libraries (Leaflet for maps) – self-hosted
- CSS files and all stylesheets
What does happen
RockingHoster (host, on our behalf)
- Data processed: IP address, time of access, page requested, browser
- Purpose: delivering the website and server log files
- Applies to: all pages
OpenStreetMap (only after consent)
- Data transmitted: IP address
- Purpose: map display
- Applies to: map page only
Herenga ā Nuku (NZ) (only after consent)
- Data transmitted: IP address
- Purpose: Te Araroa trail data
- Applies to: map page only
Important: The external services on the map page are only loaded after explicit consent. Until you click “Load map”, your browser does not connect to them.
2. Controller
Responsible for this website:
Jan Emmel
Scheffelfeld 43
30657 Hannover
Germany
Email: jan.emmel@protonmail.com
3. Hosting and server log files
This website is hosted by RockingHoster Deutschland GmbH, An der Strusbek 21, 22926 Ahrensburg, Germany. When a page is requested, the server automatically collects information your browser transmits and stores it in server log files:
- IP address
- Date and time of access
- Page requested
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
Processing is based on Art. 6 (1) (f) GDPR; the legitimate interest is delivering the website securely and reliably. RockingHoster processes the data as a processor on my instructions (Art. 28 GDPR).
Further information: RockingHoster privacy policy
4. External services (only after consent)
The map page loads external content only after your express consent. Before you click “Load map”, no data is transmitted to third parties.
After consent, connections are established to the following external servers, in the course of which your IP address is transmitted:
OpenStreetMap
Map tiles are loaded from OpenStreetMap to display the map.
- Provider: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom
- Privacy policy: OSM Privacy Policy
Herenga ā Nuku (New Zealand)
The route data for the Te Araroa Trail is loaded from the server of the New Zealand Walking Access Commission.
- Server: maps.herengaanuku.govt.nz
- Purpose: display of the walking route on the map
These services are used on the basis of Art. 6 (1) (a) GDPR (consent). The European Commission has issued adequacy decisions for the United Kingdom and New Zealand (Art. 45 GDPR). You can withdraw your consent at any time with effect for the future by deleting this website’s browser data (localStorage).
5. Contact by email
If you email me, I process your address and the content of your message in order to reply. The legal basis is Art. 6 (1) (f) GDPR. My mailbox is hosted by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland; the European Commission has issued an adequacy decision for Switzerland. Emails are deleted once the matter is settled, unless statutory retention periods apply.
6. Your rights
You have the right to:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdraw consent with effect for the future (Art. 7 (3) GDPR)
Right to object (Art. 21 GDPR): Where processing is based on Art. 6 (1) (f) GDPR, you may object to it at any time on grounds relating to your particular situation.
An informal email to me is enough for all of this – including questions about the server log files, since I am the controller, not the host.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the one responsible for me: Landesbeauftragte für den Datenschutz Niedersachsen (LfD), Prinzenstraße 5, 30159 Hannover, Germany.
7. No cookies
This website sets no cookies. No tracking, analytics or advertising cookies are used.
Local storage (localStorage)
The following settings are stored in your browser’s localStorage:
- theme – your dark/light mode preference
- map-consent-given – your consent to loading the map services
This information:
- Remains exclusively in your browser
- Is not transmitted to any server
- Can be removed at any time by deleting your browser data
Last updated: October 2026
