Privacy policy
Controller
[Vor- und Nachname oder Firma mit Rechtsform]
[Straße und Hausnummer]
[PLZ Ort]
Deutschland
Phone: [Telefonnummer]
Email: [E-Mail-Adresse]
At a glance
This statement covers the Waidblick website, the help pages and the Waidblick app. We process personal data only as far as needed to provide them. There is no advertising, no tracking and no analytics, and we do not sell data.
Hosting and server logs
All services run on servers of our hosting provider:
[Name des Hosting-Anbieters]
[Anschrift des Hosting-Anbieters]
When you open a page, the server records your IP address, date and time, the page requested, the browser (user agent) and, where sent, the referring page. We need this to deliver the pages and to keep them secure (Art. 6(1)(f) GDPR). The logs are deleted after [Anzahl] days.
Data is transmitted encrypted (HTTPS).
Website and help
The website and the help pages set no cookies and store nothing on your device. Fonts and images come from our own server.
The plan prices on the website are fetched by our server from our license server; your browser only talks to our server.
App: account and sign-in
To register we need your name, your email address and a password; the password is stored only as a secure hash. We send you an email to confirm your address. Legal basis is the performance of the contract of use (Art. 6(1)(b) GDPR).
After you sign in, the app sets a cookie (“token”) that keeps you signed in. It is technically necessary and expires after 4 hours without use, or after 30 days with “stay signed in”. In addition the app stores settings and, for use without a signal, copies of your data and map tiles in your browser (local storage, IndexedDB, cache). These stay on your device and are removed when you clear the browser data.
App: hunting ground data
The app stores what you and the other members of a hunting ground enter: membership and role, high seat bookings, harvest log, wildlife observations, hare census, driven hunts and notes. Members of the ground see this data according to their role. For driven hunts the organisers may also enter names of guests, who can join via a link. Legal basis is the contract of use (Art. 6(1)(b) GDPR) and, for guests, the legitimate interest in organising the hunt safely (Art. 6(1)(f) GDPR).
People who report harvests or a hare census via a public capture link transmit what they enter in the form.
App: location data
Your location is processed only when you switch on location sharing or recording in the app or connect OwnTracks. The last position and trail are visible to the members of the ground and are deleted after 24 hours; positions during a driven hunt are also deleted after 24 hours. Recorded tracks remain until you delete them. Legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by switching sharing off.
App: maps and weather
Map tiles (Hessian state survey HVBG, basemap.de of the Federal Agency for Cartography and Geodesy) and weather data (Bright Sky, based on data of the German Weather Service) are fetched by our server. For the weather it sends the coordinates of the hunting ground; your IP address is not passed on to these services.
App: emails
Emails (confirmation, password reset, invitations, notifications) are sent through our email provider:
[Name des E-Mail-Anbieters (SMTP)]
[Anschrift des E-Mail-Anbieters]
App: licensing
Each hunting ground is licensed with our license server ([Betreiber des Lizenzservers, z. B. „wir selbst“ oder Firma]). The app sends a random identifier of the ground, the app version and the number of members – no names. When you book a plan, your name and email address are also transmitted so that we can issue the license and invoice it (Art. 6(1)(b) GDPR); the app tells you before you confirm.
Backups
We back up the database daily and keep the backups for 14 days, so deleted data disappears from the backups after this period at the latest.
Retention
We keep account and hunting ground data as long as your account or the ground exists. To delete your account, send us an email; we will then delete your personal data unless statutory retention periods apply (e.g. for invoices).
Your rights
You have the right to access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interests. You can withdraw consent at any time with effect for the future. To exercise your rights, contact us using the details above.
You may also lodge a complaint with a supervisory authority, for example the one responsible for us:
[Datenschutz-Aufsichtsbehörde deines Bundeslands]
[Anschrift der Aufsichtsbehörde]
[Internetadresse der Aufsichtsbehörde]
We do not use automated decision-making or profiling.
Status
[Monat Jahr, z. B. November 2026]