Privacy notice
Last updated: 2026-09-27
In short
This website sets no cookies, stores nothing in your browser, uses no analytics or advertising services and loads no content from third parties. Fonts and photos are served from this server. Your language choice lives only in the address (?lang=en) and is not stored. The Instagram tiles are generated entirely in your browser.
What data I process
| Data | Purpose | Legal basis | Where | Deleted |
|---|---|---|---|---|
| IP address, time, requested address, HTTP method, browser identifier (user agent), referrer, country (derived from the IP) | Deliver the site; detect and block attacks and abuse (firewall, rate limits) | Art. 6(1)(f) GDPR | AWS CloudFront (delivery, not stored); AWS WAF logs in AWS region us-east-1 (USA) | Firewall logs after 30 days |
| Technical server error messages; in an error case these may contain an email address | Find and fix errors | Art. 6(1)(f) GDPR | AWS CloudWatch, Frankfurt region (eu-central-1) | after 30 days |
| Travel request: name, email address, region, travel dates, number of travellers, wishes | Answer your request and plan your trip | Art. 6(1)(b) GDPR | until confirmed: AWS DynamoDB, Frankfurt; then: my email inbox at webgo GmbH, Germany | unconfirmed after 24 hours; email see below |
| Support message: name, email address, topic, message | Answer your question, handle privacy requests | Art. 6(1)(b) GDPR, and (c) for privacy requests | until confirmed: AWS DynamoDB, Frankfurt; then: my email inbox at webgo GmbH, Germany | unconfirmed after 24 hours; email see below |
| Email address and content of the confirmation email | Double opt-in: make sure the message really comes from you | Art. 6(1)(b) and (f) GDPR | Amazon Simple Email Service (SES), Frankfurt | SES does not keep message content |
Controller
Alex FitterlingWöhrder Kreuzgasse 8, 90489 Nürnberg, Deutschland
Email: info@sp33c.tech
Hosting, firewall and recipients
The site runs on Amazon Web Services (AWS EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg), mostly in the Frankfurt region, and is delivered through the global Amazon CloudFront network. A web application firewall (AWS WAF) checks every request for attacks and limits how many requests one IP address may send in a short time. For technical reasons its logs are kept in AWS region us-east-1 (USA); the "Authorization" and "Cookie" headers are redacted.
A data processing agreement under Art. 28 GDPR is in place with AWS. For transfers to the USA, AWS is certified under the EU-US Data Privacy Framework, and the EU Standard Contractual Clauses apply as well (Art. 44 et seq. GDPR). My email inbox is hosted by webgo GmbH in Germany. Data is not passed on to anyone else.
How long I keep your messages
I keep confirmed requests and support messages as email for as long as needed to handle them. If no booking of my services follows, I delete them after six months at the latest. If it does, statutory retention periods apply (§ 147 AO, § 257 HGB).
Required fields
I need your name, email address and message to reply to you. All other fields are optional. Without the required fields I can't handle your message.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). The easiest way is the support form (topic "Privacy") or an email to info@sp33c.tech. You can also lodge a complaint with a supervisory authority (Art. 77 GDPR); the competent one is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.