Privacy Policy

1. Data controller

The person responsible for processing personal data on this website is:

Mariusz Sliwa
Galgenweg 4
73457 Essingen
Germany

Email: hello@wanderlustfirst.eu
Phone: +49 7173 7070109

2. Visiting the website and hosting

When you visit this website, the hosting provider processes technical connection data: your IP address, the content requested, the date and time, browser information, the previously visited page if transmitted, and the status of the request. This is used to deliver the website and detect errors and misuse.

The legal basis is Article 6(1)(f) of the GDPR. My legitimate interest is to provide a reliable and secure website.

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. According to STRATO, IP addresses are stored for a maximum of seven days to detect and prevent attacks. IP addresses are anonymised in the access logs and server-side statistics provided to customers. These analyses do not require an additional tracking service in the browser.

3. Contact and enquiries about talks

If you write to me using the contact form, I process your first name, surname, email address and message. Providing the name of an event organiser or organisation is optional. If you contact me by email or telephone, I process the contact details and information you provide in order to respond to your enquiry.

For enquiries about a talk or a possible booking, this processing is necessary to take steps before entering into a contract or to perform a contract under Article 6(1)(b) of the GDPR. I handle other enquiries on the basis of my legitimate interest in responding to your message under Article 6(1)(f) of the GDPR.

Providing your details is voluntary and is not required by law or contract. The form cannot be submitted without the required details. The contact form sends your message by email to hello@wanderlustfirst.eu; no additional database of contact enquiries is created.

Messages to hello@wanderlustfirst.eu are forwarded to a mailbox at STRATO. Enquiries are not analysed using AI.

4. Protecting the contact form

The sending function limits the number of requests per IP address per hour. To do this, a pseudonymous identifier is generated from the IP address and the current hour and stored on the server together with a counter. The content of messages is not stored in these counter files. An additional form field that is invisible to visitors helps detect automated spam requests. No external CAPTCHA service is used.

The legal basis is Article 6(1)(f) of the GDPR; my legitimate interest is protection against spam and overload. Counter files older than two hours are deleted when the next valid form request is received. If there is no further request, they may remain for longer.

5. Cookies, fonts, maps and media

No external analytics or advertising services are embedded in this website. Fonts, images, videos and the map are provided as the website’s own files. Google Maps, YouTube and external font services are not loaded for this content.

The website’s functions do not store their own cookies or settings in the browser’s local storage. If a function requires consent, it will only be activated after you have given it.

6. Recipients

STRATO processes data on my behalf to host the website and email mailbox. A data processing agreement under Article 28 of the GDPR is in place with STRATO. Information about its subprocessors and contractual safeguards is provided in STRATO’s data processing agreement.

I do not forward your enquiry to another email provider or to an AI service. The website contains links to my profiles on Facebook, Instagram, LinkedIn and YouTube. No content from these platforms is embedded. You only open the external platform when you click a link; the provider’s own privacy information applies to data processing there.

7. Retention periods

Contact details and messages are retained only for as long as needed to handle the enquiry. Once it has been dealt with, they are deleted unless statutory retention requirements or legitimate grounds for establishing, exercising or defending legal claims prevent this. If an enquiry results in an order, further retention depends on the nature and purpose of the contractual and business records. The legal bases are Article 6(1)(c) and Article 6(1)(f) of the GDPR, as applicable.

The periods stated in sections 2 and 4 apply to technical logs and the contact form counters. The website does not create its own backup copies of form messages; messages are processed in the email mailbox.

8. Your rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure and restriction of processing of your personal data. Where the relevant conditions are met, you may also request data portability.

Right to object: Where processing is based on Article 6(1)(f) of the GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing at any time.

Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. To exercise your rights, you can contact me using the details above.

You may lodge a complaint with a data protection supervisory authority, in particular in the place where you usually live or work, or where the alleged infringement took place. In Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: submit a complaint.

9. Automated decisions

The website does not make decisions about you based solely on automated processing that produce legal or similarly significant effects, nor does it carry out corresponding profiling.