Privacy Policy

1. Data controller

The data controller responsible for data processing on this website is:
Josua Arndt, Mittelallee 56, 14641 Wustermark, Germany
Email: info@stopine.de

2. Visiting the website (server logs)

When you visit the website, our hosting provider automatically processes technical data (including IP address, date and time of access, page accessed, browser type). This data is technically necessary to deliver the website and ensure its security. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in stable, secure operation).

The website is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA); event data is stored in a database provided by Turso (ChiselStrike, Inc.) within the EU (Ireland region). A data processing agreement (DPA) is or will be in place with both providers. Any transfer to the USA relies on the EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.

3. Submitting events

When you submit a fireworks event via the form, we process the information you enter (event, date, time, city, location, description, link). The "Name or email" fields are optional and are used only for possible follow-up questions; they are not displayed publicly. The publicly visible information (e.g. event and location) appears in the calendar after manual review.

The legal basis is Art. 6 (1)(a) GDPR (consent given by submitting the form) and/or (f) GDPR (interest in operating a community-maintained calendar). Please do not submit third parties' personal data without their consent.

4. Traffic analysis (Vercel Web Analytics)

For anonymous traffic analysis we use Vercel Web Analytics (provider: Vercel Inc., USA). The tool operates without cookies, so it does not set tracking or marketing cookies and does not build a user profile identifiable across multiple sessions. Aggregated metrics are collected (e.g. pages viewed, approximate region of origin, device type, referrer URL); IP addresses are not stored permanently. The legal basis is Art. 6 (1)(f) GDPR (legitimate interest in privacy-friendly traffic analysis). You may object to this processing at any time (see contact details above).

5. Maps (OpenStreetMap)

Event pages may embed a map from OpenStreetMap (OpenStreetMap Foundation, United Kingdom). The map is only loaded after you actively click to load it; before that, no connection to OpenStreetMap is established and no IP address is transmitted. By clicking, you consent to the map being loaded (Art. 6 (1)(a) GDPR); this transmits your IP address to OpenStreetMap. The "Plan route" links lead to Google Maps or Apple Maps; these only open once you click them.

6. Email delivery & fonts

To send emails (e.g. approving a company account), we use the service provider Resend (Resend, Inc., USA) as a processor; the respective email address is transmitted for delivery purposes. The font used ("Josefin Sans") is served locally by our own server (self-hosted) — no data is retrieved from Google Fonts for this purpose.

7. Retention period

Event data is stored for as long as the event remains relevant, or until deleted by us. Submissions that are not approved are removed within a reasonable time. Server logs are retained only briefly for security purposes.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. To do so, please contact us using the contact details given above (email: info@stopine.de).

You also have the right to lodge a complaint with a data protection supervisory authority.