We use the following services to operate WayVenture. For each service, we state which data is processed, for what purpose and on which legal basis.
Hosting
Provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
The website, the app and the API run on servers of Hetzner Online GmbH in a data centre in Germany. This involves processing the access data listed in section 4 as well as all content you create in WayVenture. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
Purpose: Providing, operating and securing the platform.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Object storage
Provider: Hetzner Online GmbH (Hetzner Object Storage), Nuremberg location, Germany
Files you upload, in particular images of trips, waypoints and your profile, are stored in the object storage of Hetzner Online GmbH in Nuremberg and loaded directly from there when displayed. Your IP address is transmitted to the storage in the process.
Purpose: Storing and delivering your uploaded files.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract).
Web analytics with Matomo
Provider: Self-hosted at analytics.wayventure.de on our own servers
We measure the use of our pages with Matomo, which we operate ourselves. Matomo does not set any cookies and stores nothing in your browser's local storage. IP addresses are shortened by two bytes before storage, so they cannot be traced back to you. We record the pages visited, time, referrer, and browser and device type. In addition, we record anonymous interaction events, such as viewing and clicking upgrade offers, completed trip-planning steps or page-load metrics. These events are also recorded without cookies and without any information that identifies you, and they are not linked to your account. No data is passed on to third parties.
Purpose: Anonymous audience measurement to improve the platform.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a data-minimising analysis of usage).
Payment processing with Stripe
Provider: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland
When you take out or manage a paid subscription, we redirect you to a Stripe page. You enter your payment details directly with Stripe; we do not receive them. Stripe informs us of the status of the payment and the subscription. A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework or the standard contractual clauses of the EU Commission.
Purpose: Processing payments and subscriptions.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (statutory retention obligations).
Web push notifications
Provider: The push service of your browser vendor (e.g. Google, Mozilla or Apple)
We only send notifications if you have expressly allowed them in your browser. For this, we store the push address generated by your browser. The message is delivered in encrypted form via the push service of your browser vendor. You can revoke this permission at any time in your browser settings.
Purpose: Delivering notifications about your trips.
Legal basis: Art. 6(1)(a) GDPR (consent).
Maps and place search with OpenStreetMap
Provider: OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom; for the campsite search, the public Overpass API (overpass-api.de)
When you open a map in the app or show nearby campsites, your browser loads map tiles and campsite data directly from the servers of OpenStreetMap (tile.openstreetmap.org) and the Overpass API. Your IP address and the requested map section are transmitted in the process. When you search for a place or set a point on the map, our server queries the location data from the Nominatim service of the OpenStreetMap Foundation (nominatim.openstreetmap.org) and caches the results. Only the search term or coordinates are transmitted, not your IP address or any other information about you. An adequacy decision of the EU Commission exists for the United Kingdom.
Purpose: Displaying maps, converting places into coordinates and searching for campsites.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest in working map display).
Country flags via flagcdn
Provider: flagcdn.com
Country flags in the app are loaded as images directly from flagcdn.com. Your IP address is transmitted to this service in the process.
Purpose: Displaying country flags.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a clear presentation).
Map icons via unpkg
Provider: unpkg.com (delivered via the network of Cloudflare, Inc., USA)
Some map markers are loaded as images from unpkg.com. Your IP address is transmitted to this service in the process.
Purpose: Displaying markers on maps.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in working map display).
Videos via YouTube
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Videos on our home page are embedded in privacy-enhanced mode (youtube-nocookie.com) and are only loaded when you click on a video. Only then is data such as your IP address transmitted to YouTube. A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework.
Purpose: Playing explainer videos.
Legal basis: Art. 6(1)(a) GDPR (consent by clicking the video).
AI features with Google Gemini
Provider: Google (Gemini API), Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
When you use AI features, such as the planning assistant, activity suggestions or the packing list, our server transmits the trip details required for this (e.g. destination, period, vehicle, preferences) to Google's Gemini API. Your name and email address are not transmitted. A transfer to the USA is possible; it is based on the EU-US Data Privacy Framework or the standard contractual clauses of the EU Commission.
Purpose: Generating trip suggestions, planning drafts and packing lists.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract when using the feature).