Privacy Policy

Controller

The controller responsible for data processing on this website is:

Günay Mustafayeva
Gunay Mustafayeva
Jugendweg 2
13629 Berlin
Deutschland

gunay@gunayontheway.com

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21) at any time. You may withdraw any consent given with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

Server log files & hosting

When you visit this website, the hosting provider automatically collects server log files (IP address, date and time, file requested, data volume transferred, referrer URL and user agent). This data ensures secure, stable operation and helps defend against attacks. The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR. Logs are deleted after a short period.

Cookies & local storage

This website sets no tracking or marketing cookies. We only store: your privacy choice from the consent banner (locally in your browser, about 6 months) and — for logged-in editors only — the WordPress login cookies. No Google Analytics, Google Tag Manager, Facebook Pixel or similar tracking services are used; fonts are served locally (no Google Fonts loaded from Google servers).

Newsletter (Beehiiv)

We use the service Beehiiv (Beehiiv Inc., USA) for our newsletter. When you subscribe, we transmit your email address, the chosen language and the page you subscribed from. Sign-up uses double opt-in: you first receive a confirmation email and are only added after you confirm. Your IP address is not transmitted to Beehiiv; it is only used in hashed form to limit abuse (rate limiting). The legal basis is your consent under Art. 6 (1) (a) GDPR, which you can withdraw at any time via the unsubscribe link. As Beehiiv is based in the USA, data is transferred to a third country, safeguarded by appropriate measures (EU Standard Contractual Clauses). Privacy notice: beehiiv.com/privacy.

Contact form

If you write to us via the contact form, we process your name, email address, message and selected reason in order to answer your enquiry. The data is sent to us by email only and is not stored permanently on the website. To prevent spam we use a hidden honeypot field, rate limiting and — after your consent — Google reCAPTCHA. The legal basis is Art. 6 (1) (a), (b) and (f) GDPR.

Google reCAPTCHA

To protect our forms from automated abuse we use reCAPTCHA v3 by Google (Google Ireland Limited). reCAPTCHA is only loaded after you consent via the banner; without consent it is not loaded. Data may be transmitted to Google (including in the USA). The legal basis is your consent and our legitimate interest in preventing spam (Art. 6 (1) (a) and (f) GDPR). More information: policies.google.com/privacy.

Affiliate links & click statistics

We link partner offers through our own redirect (/go/). For each redirect we store only anonymous key data (the linked offer, the page reference code, language and a coarse device class). No IP address, no full user-agent string and no cookies are stored; the data cannot be traced back to you and is deleted after no more than 400 days. On redirect we send no referrer URL to the partner (Referrer-Policy “no-referrer”). If you click a partner link, the privacy policy of the respective network applies (including Booking.com, GetYourGuide, Skyscanner, Impact). The legal basis is our legitimate interest under Art. 6 (1) (f) GDPR.

Embedded content (video & maps)

Embedded content such as YouTube videos (privacy mode, youtube-nocookie.com), Vimeo and Google Maps is only loaded after a click (“click-to-load”). Before that click, no data is transmitted to the providers. Only after the click is a connection to the respective provider established, at which point its privacy policy applies and, among other things, your IP address is transmitted. Social sharing buttons are plain links and transmit no data without a click.

Online shop

If a shop/checkout process is active, we process the order, billing and, where applicable, payment data required to fulfil it on the basis of Art. 6 (1) (b) GDPR and share it with the payment and shipping providers involved. Currently the product blocks are display-only.

Changes to this policy

We update this privacy policy whenever data processing on this website changes. The current version published here always applies.