1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
iGoNext, Germany
Email: contact@igonext.com

2. Data Collected and Purpose of Processing

We collect and process personal data only insofar as this is necessary to provide our services or you have explicitly consented.

• Server log data: When you visit our website, our hosting provider automatically stores data (IP address, date/time, requested page, browser type, operating system, referrer URL). This data is stored for a maximum of 30 days and then deleted. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the security and stability of operations).
• Contact form: When you write to us via the contact form, we store your name, email address, phone number (if provided), and your message to process your enquiry. Legal basis: Art. 6(1)(b) GDPR (contract fulfilment / pre-contractual measures).
• Session data (SessionStorage): To improve your experience, we store filter settings and map positions locally in your browser's SessionStorage. This data never leaves your device and is automatically deleted when the browser is closed.
• Visitor fingerprint: We use a technical fingerprint (stored in a cookie) to prevent multiple likes and spam. This contains no personal data and serves solely for platform integrity. Validity: 12 months.

3. Google Analytics

Google Analytics uses cookies to analyse how visitors use the website. The information generated by the cookie about your use of this website (including your IP address) is generally transmitted to and stored by Google on servers in the United States. We have enabled IP anonymisation, so your IP address is truncated by Google within the EU/EEA before transmission.

Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services relating to website activity and internet usage.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in analysing website usage to optimise our services).

Opt-out: You can prevent the collection of data generated by the cookie relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at: tools.google.com/dlpage/gaoptout.

For more information on data processing by Google, visit: policies.google.com/privacy.

4. Cookies

We use the following types of cookies:

• Technically necessary cookies: Required for the basic functionality of the website (e.g. CSRF protection, session management). Without these cookies, the website cannot be operated properly.
• Analytics cookies (Google Analytics): Help us understand how visitors interact with the website. These cookies store information anonymously.
• Preference cookies: Store your theme preference (light/dark) and cookie consent locally in your browser (localStorage). No server upload.

You can disable cookies in your browser settings. Please note that this may limit the functionality of the website.

5. Sharing Data with Third Parties

We do not generally pass your personal data to third parties, except:

• if you have explicitly consented,
• if this is necessary for the fulfilment of a contract,
• if we are legally obliged to do so,
• or if this is necessary to protect legitimate interests (e.g. technical service providers such as hosting providers and Google Analytics).

Overview of third-party services used: Google LLC (Analytics), hosting provider (server infrastructure).

6. Data Transfer to Third Countries

In the context of using Google Analytics, data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

7. Data Retention Periods

We store personal data only for as long as necessary for the respective purposes or as required by law:

• Server log data: 30 days
• Contact form data: until the enquiry is resolved, maximum 3 years
• Comments on the platform: until deleted by the user or operator
• Google Analytics data: 14 months

8. Your Rights as a Data Subject

Under GDPR you have the following rights:

• Right of access (Art. 15 GDPR): You can request information about the data stored about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data, provided no legal retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): You can request that processing of your data be restricted.
• Right to data portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing of your data where it is based on legitimate interests.
• Right to lodge a complaint: You have the right to lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, please contact: contact@igonext.com

9. External Map Services

Our website uses Leaflet with map tiles from OpenStreetMap and ESRI. When loading map tiles, your IP address is transmitted to the respective servers. Further information: openstreetmap.org/copyright.

10. Contact for Privacy Enquiries

For any questions regarding data protection, please contact:
iGoNext  |  contact@igonext.com