Privacy Policy
This privacy policy informs about which personal data is processed when using Wanderlama, for what purposes this occurs, and on what legal basis the processing takes place.
Controller
Markus Waldmüller
Stroberstr. 2
92318 Neumarkt i.d.OPf.
Germany
Email: wanderlama@web.de
Hosting and server logfiles
The website is provided on a self-operated and self-administered virtual machine running Linux in Germany. Insofar as no further external services are used, the processing of the access data generated when the site is accessed is carried out exclusively by the operator of the website. For technical reasons, this may in particular include the IP address, information about the browser and operating system used, the previously visited page (referrer), and the date and time of access, which are recorded and logged in server log files. This processing serves the technical provision of the website as well as ensuring its stability and security, in particular the detection and prevention of misuse and attacks. The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and technically proper operation of the website. The server log files are not used for analytics or advertising purposes and are not combined with other data sets.
Feedback form
Filling in and submitting the feedback form is voluntary. Upon submission, the message text and, if provided, the email address are processed in order to review the feedback and respond to it where appropriate. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in handling and responding to feedback).
Protection against misuse
To protect the feedback form and the internal administration area against automated bulk submissions and unauthorized login attempts, the number of requests per connection is limited. For this purpose, the IP address is processed exclusively in memory and converted into a hash value using a random value that is newly generated each time the service restarts. The IP address itself is not stored for this purpose. The hash value is not stored on any permanent storage medium and is discarded after 24 hours at the latest and whenever the service restarts. The hash value is not combined with other data and is not used to identify individual persons. The legal basis for this processing is Art. 6(1)(f) GDPR (legitimate interest in security, abuse prevention, and the reliable operation of the service).
Local storage
For the app's basic functions, certain settings and user data are stored exclusively in the browser's local storage so that they are retained across later visits. This data is not transmitted to any server. This storage is strictly necessary for the functionality the user has expressly requested. Consent is therefore not required under § 25(2) no. 2 TDDDG (the German implementation of the ePrivacy Directive).
Cookies
If you switch the language using the flag button, a strictly necessary cookie named NEXT_LOCALE is set. It stores only the language you selected. Without such a switch it is not set, and the language then follows your browser's language setting alone. It contains no identifier for recognizing individual persons and is not used to analyze usage behavior. This storage is strictly necessary for the functionality the user has expressly requested. Consent is therefore not required under § 25(2) no. 2 TDDDG (the German implementation of the ePrivacy Directive). If consent to analytics is given, Matomo additionally sets the cookies _pk_id, which recognizes returning visits and is stored for 13 months, and _pk_ses, which records the current session and is stored for 30 minutes. These cookies are set solely on the basis of consent under Art. 6(1)(a) GDPR. Without consent, or after it has been withdrawn, they are not set. No other cookies are used, in particular no third-party advertising or tracking cookies.
Interactive maps (OpenStreetMap)
The application can display interactive maps based on OpenStreetMap. As soon as a map is displayed, the device loads the map data required for this from the corresponding services. For technical reasons, this transmits in particular the IP address as well as information about the browser and device used to the servers involved. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the functional and visual presentation of map content). The map data is provided by OpenFreeMap, an open-source map service based on OpenStreetMap data. The operator of OpenFreeMap processes the data arising in this context as an independent controller.
Analytics (Matomo)
Matomo is used as a self-hosted analytics tool to analyze and understand how the application is used. Matomo runs on our own infrastructure. The analytics data collected in this way is not transmitted to Matomo or any other external provider. The IP address is anonymized by being truncated before storage. A complete IP address is not stored. The legal basis for this processing is Art. 6(1)(a) GDPR (consent). Consent given can be reviewed, changed, or withdrawn with effect for the future at any time via the settings on the Cookies page.
Go to the Cookies page →Transfers to third countries
The map data is delivered via a content delivery network that operates servers in locations worldwide. When a map is loaded, the connection may therefore also be established via a server outside the European Union, in particular in the United States. A transfer of personal data, specifically the IP address, to a third country cannot be ruled out in this context. The provider of the map data is the independent controller for this processing. Apart from this, no personal data is transferred to recipients in third countries.
Storage duration
Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. Feedback messages are stored for the purpose of processing and responding to the feedback and are deleted once no longer required for that purpose. Server log files are automatically deleted after a short technical retention period. A longer retention period only applies where required for another permissible purpose or by law.
Rights
Data subjects have the right to access their personal data, as well as to rectification, erasure, or restriction of the processing of their personal data. Where the statutory requirements are met, there is also a right to data portability and a right to object to certain processing. Where processing is based on consent, it can be withdrawn at any time with effect for the future. There is also the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). To exercise these rights, the contact details provided can be used.
Provision of data and automated decision-making
The application can be used without providing personal data. Providing data is neither required by law nor by contract and is not necessary for entering into a contract. Providing an email address in the feedback form is voluntary. Without it, only a reply to the feedback is not possible. Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Contact
Markus Waldmüller
Email: wanderlama@web.de
Last updated: 1 September 2026