PRIVACY POLICY

1. General Information

The protection of your personal data is important to us. This Privacy Policy explains how personal data is collected, used, and protected when you visit the website hidden-heidelberg.com.

We process personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and German data protection regulations.

2. Data Controller

The data controller responsible for data processing on this website is:

Oliver Schmitt
trading as Hidden Heidelberg
Langgewann 32
69121 Heidelberg
Germany

Email: hello@hidden-heidelberg.com
Phone: +49 15511 441872‬

  1. Photography during tours

During guided tours, photos or videos may be taken for documentation and communication purposes (e.g. tour impressions, memories for participants, or selected website and social media content). Participants will be informed in advance and may object to being photographed or recorded at any time.

4. Data Collection on This Website

a) Server Log Files

When you visit this website, information is automatically collected by the hosting provider in so-called server log files. This information may include:

  • IP address

  • Browser type and version

  • Operating system

  • Referrer URL

  • Date and time of access

This data is collected for technical reasons to ensure the secure and stable operation of the website and cannot be directly attributed to a specific person.


b) Contact via Email or WhatsApp

If you contact us via email or WhatsApp, the data you provide (such as your name, contact details, and message content) will be processed solely for the purpose of handling your inquiry.

This data will not be shared with third parties and will be stored only for as long as necessary to process your request or as required by legal retention obligations.

a) Server Log Files

When you visit this website, information is automatically collected by the hosting provider in so-called server log files. This information may include:

  • IP address

  • Browser type and version

  • Operating system

  • Referrer URL

  • Date and time of access

This data is collected for technical reasons to ensure the secure and stable operation of the website and cannot be directly attributed to a specific person.


b) Contact via Email or WhatsApp

If you contact us via email or WhatsApp, the data you provide (such as your name, contact details, and message content) will be processed solely for the purpose of handling your inquiry.

This data will not be shared with third parties and will be stored only for as long as necessary to process your request or as required by legal retention obligations.

a) Server Log Files

When you visit this website, information is automatically collected by the hosting provider in so-called server log files. This information may include:

  • IP address

  • Browser type and version

  • Operating system

  • Referrer URL

  • Date and time of access

This data is collected for technical reasons to ensure the secure and stable operation of the website and cannot be directly attributed to a specific person.


b) Contact via Email or WhatsApp

If you contact us via email or WhatsApp, the data you provide (such as your name, contact details, and message content) will be processed solely for the purpose of handling your inquiry.

This data will not be shared with third parties and will be stored only for as long as necessary to process your request or as required by legal retention obligations.

5. Data Retention

Personal data is stored only for as long as necessary to fulfill the respective purpose or as required by statutory retention obligations. Once the purpose no longer applies and no legal retention requirements exist, the data will be deleted.

6. Cookies

This website uses only technically necessary cookies that are required for the proper operation of the website. These cookies do not require consent and are not used for tracking or marketing purposes.

7. Third-Party Services

a) Instagram

This website contains a link to the social media service Instagram. When you click on the Instagram link, you leave our website. Data processing on Instagram is the responsibility of Meta Platforms Ireland Ltd.

We have no influence on the scope or processing of data collected by Instagram. Further information can be found in Instagram’s privacy policy.


b) WhatsApp

Communication via WhatsApp is provided by Meta Platforms Ireland Ltd. When using WhatsApp, personal data may be processed on servers outside the European Union.

Please note that we have no control over data processing by WhatsApp. Further information can be found in WhatsApp’s privacy policy.

a) Instagram

This website contains a link to the social media service Instagram. When you click on the Instagram link, you leave our website. Data processing on Instagram is the responsibility of Meta Platforms Ireland Ltd.

We have no influence on the scope or processing of data collected by Instagram. Further information can be found in Instagram’s privacy policy.


b) WhatsApp

Communication via WhatsApp is provided by Meta Platforms Ireland Ltd. When using WhatsApp, personal data may be processed on servers outside the European Union.

Please note that we have no control over data processing by WhatsApp. Further information can be found in WhatsApp’s privacy policy.

a) Instagram

This website contains a link to the social media service Instagram. When you click on the Instagram link, you leave our website. Data processing on Instagram is the responsibility of Meta Platforms Ireland Ltd.

We have no influence on the scope or processing of data collected by Instagram. Further information can be found in Instagram’s privacy policy.


b) WhatsApp

Communication via WhatsApp is provided by Meta Platforms Ireland Ltd. When using WhatsApp, personal data may be processed on servers outside the European Union.

Please note that we have no control over data processing by WhatsApp. Further information can be found in WhatsApp’s privacy policy.

8. Your Rights

You have the right to:

  • request access to your personal data

  • request rectification or erasure of your data

  • request restriction of processing

  • object to data processing

  • request data portability

  • lodge a complaint with a supervisory authority

To exercise your rights, please contact us using the contact details provided above.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data. However, we cannot guarantee absolute security of data transmitted over the internet.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as necessary to reflect legal or technical changes.