Privacy Policy

1. Data Controller

The data controller within the meaning of the GDPR and the German Telecommunications and Telemedia Data Protection Act (TTDSG) is:

2. Cookies and Similar Technologies (§ 25 TTDSG)

Under § 25(1) TTDSG, storing information on your device or accessing information already stored there requires your explicit consent — unless this is technically necessary for the service you have requested (§ 25(2) TTDSG).

On your first visit, a cookie consent banner appears offering:

• "Accept all" — You consent to both necessary and analytics cookies.
• "Necessary only" — Only technically required cookies are set. Google Analytics is disabled.

You can withdraw your consent at any time by clearing your browser cookies and revisiting the site.

Cookies used on this platform:

3. Data Collected and Processing Purposes

• Server log data: Anonymised IP address, date/time, requested page, browser type, OS, referrer URL. Retention: max. 30 days. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and stability).
• Contact form: Name, email, phone (optional), message. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures). Retention: until resolved, max. 3 years.
• Business listing: Business name, category, address, contact details (voluntary). Legal basis: Art. 6(1)(a) GDPR (consent). Retention: until deletion request.
• SessionStorage (browser): Filter settings and map position. Never leaves your device. Deleted when browser is closed.
• Visitor fingerprint (cookie ctm_vid): Technically generated anonymous value for platform integrity. No personal data. Legal basis: § 25(2)(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.

4. Google Analytics

Legal basis: Your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. Google Analytics is only activated when you select "Accept all" in the cookie banner.

IP anonymisation is enabled. Your IP address is truncated by Google within the EU/EEA before transmission (IP masking).

Transfer to third countries: Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023).

Withdrawal / opt-out: You can withdraw consent at any time by clearing your cookies and choosing "Necessary only" on your next visit. Alternatively: Google Analytics opt-out browser add-on.

Google Privacy Policy: policies.google.com/privacy

5. External Map Services (Leaflet / ESRI / OpenStreetMap)

The interactive map uses Leaflet (open-source library) with map tiles from ESRI and OpenStreetMap. When loading tiles, your IP address is transmitted to the respective servers. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in map functionality).

Further information: ESRI Privacy | OpenStreetMap Privacy

6. Sharing Data with Third Parties

Data is shared only in cases of:

• explicit consent (Art. 6(1)(a) GDPR),
• contract fulfilment (Art. 6(1)(b) GDPR),
• legal obligation (Art. 6(1)(c) GDPR),
• legitimate interest (Art. 6(1)(f) GDPR) — hosting providers, technical service providers.

Third-party services: Google Ireland Limited (Analytics), VPS hosting provider (server infrastructure).

7. Your Rights (Arts. 15–22 GDPR)

• Right of access (Art. 15): What data we hold about you.
• Right to rectification (Art. 16): Correction of inaccurate data.
• Right to erasure (Art. 17): "Right to be forgotten", subject to legal retention obligations.
• Right to restriction (Art. 18): Restriction of processing.
• Right to data portability (Art. 20): Receive your data in machine-readable format.
• Right to object (Art. 21): Object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time with effect for the future.
• Right to lodge a complaint (Art. 77): You have the right to complain to the competent supervisory authority — for example the Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg or your local authority.

Please address requests to: contact@igonext.com

8. Retention Periods

• Server log data: 30 days
• Contact form data: until resolved, max. 3 years
• Business listings: until deletion request
• Comments: until deleted by user or operator
• Google Analytics data: 14 months (GA4 default)

9. Changes to This Policy

We reserve the right to update this privacy policy when our services or legal requirements change. The current version is always available on this page. Version: May 2026.