Privacy Policy.

1. Controller

Further details in the Imprint.

2. General information on data processing

We only process our users' personal data to the extent necessary to provide a functioning website along with our content and services. Personal data is processed only with the user's consent or on the basis of a legal permission (Art. 6(1) GDPR).

3. Hosting & server log files

Active

When you visit this website, our hosting provider automatically collects technical data transmitted by your browser: IP address, date and time of the request, the page requested, the browser and operating system used, and the previously visited page (referrer URL). These server log files are unavoidable for the technical operation of a website and are not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website).

4. Fonts

Hosted locally

The fonts used (Cormorant Garamond and Inter) are stored on our own server and delivered from there. Your IP address is therefore not transmitted to Google or any other third party when you visit the website.

5. Contacting us (email & contact form)

Active

If you contact us by email or via the contact form, the data you provide (name, email address, message content and any other voluntarily provided information) is stored by us for the purpose of processing your inquiry. The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). The data will be deleted as soon as it is no longer required for processing, and at the latest after statutory retention periods expire.

6. Traffic analysis / analytics tools

Not currently in use

This website does not currently use any web analytics tool (e.g. Google Analytics, Matomo). If an analytics tool is used in the future, this privacy policy will be updated accordingly before activation and, if legally required, consent will be obtained via the cookie consent tool.

7. Affiliate links / partner programs

Not currently active

This website is designed to allow for future participation in partner programs (affiliate marketing, e.g. for hotel, flight or rental car bookings). Some buttons are already structurally laid out as future partner links, but currently do not link to any external, active partner programs. Once real affiliate links are activated, this policy will be expanded to include the specific partner programs, the tracking technologies used (e.g. cookies or tracking parameters), and the respective legal basis. Details on the planned disclosure practice are in the separate Affiliate Disclosure.

8. Newsletter & Emergency Guide PDF sign-up

Active

If you sign up via the newsletter form or the Emergency Guide PDF prompt, your email address (and optionally your first name) is transmitted by email to hello@caboverde360.com via a server-side script on our own webspace. For the Emergency Guide PDF, you also automatically receive an email with the PDF attached. The legal basis is Art. 6(1)(a) GDPR (consent given by actively submitting the form). No double opt-in process and no automated, recurring newsletter dispatch via an external service provider is set up yet - your sign-up is currently processed manually by us. Once a dedicated newsletter service with double opt-in is set up, this policy will be updated accordingly. You can object to this data being stored at any time, informally, by emailing hello@caboverde360.com.

9. Cookies & local storage

Beyond technically essential functions, this website currently does not use cookies for tracking or marketing purposes. Certain convenience features (e.g. your selected language) may be stored locally in your browser (local storage) and are not transmitted to our servers. Details and settings are available under Cookie Settings.

10. External links & embedded content

Some pages link to external services, such as our Facebook group. Clicking such a link takes you away from our website; the target site's own privacy policy applies to data processing there, over which we have no control.

11. Account, favorites & community

Active

You can create an account, sign in, and save favorites. For this, we process your email address and password (stored only as a hash, never in plain text) as well as a session cookie for sign-in. This processing is carried out for contract performance (Art. 6(1)(b) GDPR). You can delete your account at any time; doing so removes the favorites linked to it.

Content you submit to the community (e.g. trip reports, recommendations, photos) is published and moderated beforehand. You retain the rights to your content but grant us the right to display it on the website. We remove personal details in submissions on request. A reporting function for inappropriate content is planned.

Account data and community submissions are stored on servers of our hosting provider, IONOS SE (Elgendorfer Straße 57, 56410 Montabaur, Germany). Submissions and account data remain stored until you delete your account or request deletion of an individual submission; they are then removed without delay. We have a data processing agreement under Art. 28 GDPR in place with IONOS SE as our hosting provider. No other data processors are currently in use. We are still finalizing the exact automatic deletion period for server log files (see item 3) in the IONOS settings and will add it here shortly.

12. Your rights

You have the following rights regarding your personal data vis-à-vis us:

• Right of access (Art. 15 GDPR)
• Right to rectification or erasure (Art. 16, 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)

To exercise these rights, an informal message by email or via the contact form is sufficient. The supervisory authority responsible for us is determined by our location in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA).