Discover Bamberg at Your Own Pace

Privacy Policy

Last updated: 12 August 2026

Controller

Name and Contact Details of the Person Responsible for Processing Data:

Dustin Eversmann, Claviusstr. 25, 96047 Bamberg (referred to as "I").

Google Analytics 4

If you have given your consent, this app uses Google Analytics 4 and associated Google measurement services to analyze the use of the app and to measure the success of advertising campaigns. Google Analytics is provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Nature and Purpose of the Processing

Google Analytics 4 uses cookies, local storage and similar technologies within the app's WebView to enable an analysis of your use of the app. Depending on the platform and technical configuration, Google services may also process pseudonymous device, installation or advertising identifiers for measurement purposes.

On Android, where technically available and if you have given your consent, the resettable Google Advertising ID may be processed. It is used in particular to measure advertising performance and to attribute app installations and conversions to advertising campaigns. The Advertising ID can be reset or restricted by the user through the device settings.

The information collected about your use of the app may be transmitted to Google servers and processed there, including in the United States.

IP addresses are technically processed when data is transmitted to Google Analytics, including for purposes such as deriving approximate geographic information. According to Google, Google Analytics 4 does not log or store users' IP addresses.

The data is used for analytics, measurement and advertising campaign attribution. It is not used by us to display personalized advertising within the app.

Recorded Events During Your Visit

During your use of the app, your user behaviour may be recorded in the form of "events". Depending on the functions used, these events may include:

  • Page and screen views
  • First visit or first use
  • Start of a session
  • Your click path and interactions within the app
  • Scrolling behaviour
  • Clicks on external links
  • Interactions with content and app functions
  • Purchase-related and conversion events where configured

Additionally processed data may include:

  • Approximate location information, such as country, region or city
  • Date and time of use
  • IP address during technical transmission, without the IP address being logged or stored by Google Analytics 4 according to Google
  • Technical information about the browser, WebView, app and device, such as operating system, language setting and screen resolution
  • Referrer and campaign information indicating how you reached the app or app store
  • Pseudonymous identifiers used for analytics and measurement
  • On Android, where available and permitted, the Google Advertising ID

Purposes of Data Processing

Google processes this information on our behalf in order to evaluate the pseudonymous use of the app, create reports on app activity and help us understand and improve the performance of the app.

Where Google Analytics is linked with Google Ads, data may also be used to measure the effectiveness of advertising campaigns and to attribute app installations, purchases and other conversions to advertising interactions.

Recipients

Recipients of the data are or may include:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Other Google group companies or service providers where this is necessary for the provision of the services

Third Country Transfer

For transfers to the United States, the European Commission has adopted an adequacy decision under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework. Where personal data is transferred to countries or recipients not covered by an adequacy decision, additional safeguards such as the European Commission's Standard Contractual Clauses may be used.

Retention Period

For user-level and event-level data stored in Google Analytics, a retention period of two months is configured. Aggregated reports that do not identify individual users may remain available for longer periods. Cookies, local-storage entries or other identifiers stored locally on the device or within the app's WebView may have separate technical lifetimes.

Legal Basis

The legal basis for this data processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR and, where information is stored on or accessed from your device, § 25 para. 1 TDDDG.

Withdrawal

You can withdraw your consent at any time with effect for the future by accessing the data privacy settings and changing your selection. The lawfulness of processing carried out on the basis of consent before its withdrawal remains unaffected.

For more information on Google Analytics' terms of use and privacy practices, visit Google Analytics Terms of Use and Google Privacy Policy.

Mapbox Integration

Our app uses Mapbox to provide essential map and location-based services. Mapbox is a service provided by Mapbox, Inc., located at 740 15th St NW, Washington, DC 20005, USA (“Mapbox”). This integration is necessary for core functionality within the app, allowing users to view and interact with maps.

Legal Basis for Data Processing

The use of Mapbox is based on our legitimate interest in providing essential mapping functionality (Art. 6 para. 1 lit. f GDPR). Processing is limited to the minimum data necessary to provide these services.

Data Minimization and Telemetry

We have taken steps to configure Mapbox to limit data processing:

  • Telemetry Disabled: Telemetry is disabled, so no analytics data on map interactions is collected.
  • No Cookies: We have configured the app to prevent Mapbox from setting cookies in the app’s WebView, so no tracking data is stored on your device.

Types of Data Processed by Mapbox

  • IP Address: Used for delivering map content. IP addresses are processed as required and not used to personally identify users.
  • Location Data: Only processed if location access is granted on your device, for in-app map functionality. Location data is not stored in personally identifiable form.
  • Technical Information: Device type, operating system, and approximate location data (e.g., region or city) may be processed to optimize map functionality.

Third Country Transfer

Data transfers to Mapbox servers in the USA are covered by the EU-U.S. Data Privacy Framework. Mapbox is certified under this framework, and additional EU standard contractual clauses (SCCs) are in place to protect data transfers outside the EU/EEA.

User Rights

Under GDPR, you have the right to access, rectify, delete, or restrict data processing, as well as the right to object to processing based on legitimate interest. To exercise your rights, please contact the controller named above.

Control Over Location Data

Mapbox requires location data only if you grant permission. You can control location access in your device settings. Without location data, certain map-based features may be limited.

For more details on Mapbox’s data handling and compliance, refer to the Mapbox Privacy Policy and the EU-U.S. Data Privacy Framework.

RevenueCat Integration

Our app uses RevenueCat to manage in-app purchases. RevenueCat is a service provided by RevenueCat, Inc., 548 Market St PMB 97114, San Francisco, California 94104-5401, USA. This integration is necessary to validate and manage purchases made through the app.

Types of Data Processed by RevenueCat

RevenueCat may collect the following types of data to manage purchases:

  • Transaction Information: Details about purchases made within the app, including product IDs, prices, and transaction receipts.
  • Device Information: Platform (iOS or Android), device model, operating system version, app version, and SDK version.
  • Identifiers: RevenueCat-generated unique identifier and, where available or provided through the app or an integrated service, advertising identifiers such as the IDFA or Google Advertising ID.
  • IP Address: Temporarily processed for purposes such as fraud prevention and determining approximate geolocation.

Purposes of Data Processing

RevenueCat processes data to:

  • Validate and manage in-app purchases.
  • Ensure accurate purchase receipts and restore purchases if needed.
  • Prevent fraud and abuse.
  • Analyze purchase trends and app performance (aggregated and anonymized data).

Legal Basis

The legal basis for processing data via RevenueCat is the performance of a contract pursuant to Art. 6 para. 1 lit. b GDPR, as in-app purchases are a key part of the app’s functionality.

Recipients

Data processed by RevenueCat may be shared with:

  • Apple App Store or Google Play Store, depending on the platform used for the purchase.
  • RevenueCat, Inc., 548 Market St PMB 97114, San Francisco, California 94104-5401, USA.

Third Country Transfer

RevenueCat processes data on servers in the United States. RevenueCat is certified under the EU-U.S. Data Privacy Framework. Additional safeguards, such as EU standard contractual clauses, are in place to ensure an appropriate level of data protection for transfers outside the EU/EEA.

Retention Period

Transaction-related data is retained for as long as necessary to manage purchases and comply with legal obligations. Data that is no longer required is deleted or anonymized.

User Rights

Under GDPR, you have the right to access, rectify, delete, or restrict data processing related to RevenueCat. For assistance, please contact the controller at the address provided above.

Further Information

For more details on RevenueCat’s privacy practices, please refer to their Privacy Policy.

Your Data Protection Rights

Subject to the applicable legal requirements, you have the right to request access to personal data concerning you, rectification of inaccurate data, erasure of your data, restriction of processing and data portability. Where processing is based on legitimate interests, you may also have the right to object to the processing.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

You also have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

To exercise your rights or for questions regarding this privacy policy, please contact the controller using the contact details provided above.