Privacy Policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

This website is hosted by Vercel Inc. (340 Pine Street, Suite 701, San Francisco, CA 94104, USA). When you visit the site, Vercel automatically records standard server log data including your IP address, browser type, referring page, and access timestamp. This data is processed to ensure technical operation and security. The legal basis is our legitimate interest in providing a reliable website (Art. 6(1)(f) GDPR).

Data may be transferred to the USA under the EU–US Data Privacy Framework. Vercel's privacy policy: vercel.com/legal/privacy-policy.

If you contact us via the contact form, the data you provide (name, email address, subject, and message) is transmitted securely and processed solely to respond to your enquiry. The legal basis is the preparation or performance of a contract, or our legitimate interest in responding to your message (Art. 6(1)(b) and (f) GDPR).

Your message is sent to us via Resend (Resend Inc., USA), our transactional email provider. Resend processes your name and email address only to deliver the email. Data may be transferred to the USA under the EU–US Data Privacy Framework. Resend's privacy policy: resend.com/legal/privacy-policy.

Contact form submissions are retained for as long as necessary to handle your enquiry and for up to 3 years thereafter for legal documentation purposes.

Tour bookings are handled by FareHarbor B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands), an independent booking platform. When you click a booking link or complete a purchase, you are subject to FareHarbor's terms and privacy policy. The legal basis for passing you to FareHarbor is the performance of a contract (Art. 6(1)(b) GDPR). FareHarbor's privacy policy: fareharbor.com/privacy/.

This website uses Google Analytics 4 provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics collects pseudonymised data about how visitors use the site (pages visited, session duration, device type) to help us improve the user experience.

Google Analytics is only activated after you accept analytics cookies. We use Google's Consent Mode v2, which means analytics is fully suppressed until you give your consent via our cookie banner. You can withdraw consent at any time by clearing your browser's local storage or revisiting the site in a private tab.

We have enabled IP anonymisation, so your IP address is truncated before being processed by Google. Data may be transferred to the USA under the EU–US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR). Google's privacy policy: policies.google.com/privacy.

Under the GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure ("right to be forgotten") (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time without affecting prior processing (Art. 7(3))

To exercise any of these rights, please contact us at info@moinhamburgtours.de.

You have the right to lodge a complaint with a supervisory authority. The competent authority for Hamburg is:

We may update this privacy policy from time to time. The current version is always available on this page.