Heilbronn Guide

Privacy Policy

Protecting your personal data is important to us. In accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), we explain below which data is processed when you visit Heilbronn Guide, for what purpose and on what legal basis.

1. Controller

The controller within the meaning of Art. 4 (7) GDPR for data processing on this website is:

WEBMAGICS LTD
Gladstonos, 12-14
Paphos 8046, Cyprus

VAT ID pursuant to Section 27a of the German VAT Act: CY10400045Y. Further information about the provider can be found in our imprint. For data protection questions, please contact kontakt@heilbronn-guide.de or write to the address above.

2. Hosting and server log files

Heilbronn Guide is hosted by our hosting provider Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) on the Cloudflare Pages platform. Each time the website is accessed, the server automatically records information and stores it in what are known as server log files. These include in particular: the anonymized or shortened IP address, the date and time of access, the page or file accessed, the amount of data transferred, the browser type and version used, the operating system and the previously visited page (referrer).

This data is processed to ensure a trouble-free connection, a convenient use of the website, an evaluation of system security and stability and for administrative purposes. The legal basis is our legitimate interest in the technically secure and stable operation of the website pursuant to Art. 6 (1) (f) GDPR. Since Cloudflare may also process data in the USA, any transfer takes place on the basis of the EU Commission's standard contractual clauses (Art. 46 GDPR).

3. Cookies and similar technologies

For the pure operation of the site, our website does not use cookies that require consent. However, the third-party services described below (Google Tag Manager, Google AdSense and Stay22) may use cookies or comparable technologies to provide their functions. You can prevent cookies from being set at any time in your browser settings, delete cookies that have already been set and disable the automatic setting of cookies. Please note that in this case you may not be able to use all functions of the website to their full extent.

4. Google Tag Manager

We use Google Tag Manager (container ID: GTM-M3XNXJ29), a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that lets us manage and embed website tags through an interface. The tool itself does not set cookies and does not collect personal data; it merely triggers other tags, which may in turn collect data, including reach-measurement services such as Google Analytics. Google Tag Manager does not access this data.

The legal basis for its use is our legitimate interest in the efficient management and delivery of our website tags pursuant to Art. 6 (1) (f) GDPR. Google is certified under the EU-US Data Privacy Framework. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

5. Google AdSense

This website embeds Google AdSense, a service for displaying advertisements provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Our publisher ID is ca-pub-3946820918041547. Google AdSense uses cookies and comparable technologies (for example web beacons) to deliver ads, control their delivery and evaluate the use of the website. In the process, information such as your IP address, the ad formats delivered and interactions with ads may be transmitted to and processed by Google.

The legal basis for the processing is, where you have consented via a consent tool, Art. 6 (1) (a) GDPR, and otherwise our legitimate interest in financing and economically providing this free service pursuant to Art. 6 (1) (f) GDPR. Google is certified under the EU-US Data Privacy Framework. You can disable personalized advertising in Google's ad settings at https://adssettings.google.com. Further information on data processing by Google AdSense can be found at https://policies.google.com/technologies/ads.

6. Stay22 (accommodation map and affiliate links)

To display accommodation nearby and to broker bookings, we use services provided by Stay22 Inc. (5605 Avenue de Gaspé, Suite 402, Montréal, QC H2T 2A4, Canada). For this purpose a script (letmeallez.js) is embedded that supplements booking links with an affiliate identifier, and on individual pages an interactive accommodation map is displayed as an iframe. When this content is loaded, technical connection data such as your IP address is transmitted to Stay22; cookies or comparable technologies may be used to attribute brokered bookings.

The legal basis is our legitimate interest in providing suitable accommodation offers and in financing this service through affiliate commissions pursuant to Art. 6 (1) (f) GDPR. The data transfer to Canada takes place on the basis of an adequacy decision by the EU Commission for Canada. Further information can be found in Stay22's privacy policy at https://www.stay22.com/privacy.

7. External links

This website contains links to third-party websites (for example to booking providers, event organizers or the websites of attractions). We have no influence over their content or data processing. The data protection provisions of the respective providers apply exclusively to data processing on linked sites.

8. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights against the controller:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

Where processing is based on your consent, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of processing carried out on the basis of the consent up to the withdrawal remains unaffected.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement. For users in Baden-Württemberg, the home state of the city of Heilbronn, this is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, based in Stuttgart. You may also contact any other competent state data protection authority.

10. Storage period

We process and store personal data only for as long as is necessary to achieve the respective processing purpose or as required by statutory retention obligations. Server log files are stored for a limited period for security reasons and then deleted or anonymized. The storage period of cookies set by the embedded third-party services is governed by the information provided by the respective providers.

11. Changes to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, for example when introducing new services. The current version then applies to your next visit.

Last updated: July 12, 2026.