Beach Beach · Legal

Privacy policy

We collect as little as possible. What is technically unavoidable is set out here — in full, with no small print hidden inside the small print.

The short version

In brief

Without your consent this website sets no cookies. It loads no fonts or scripts from advertising networks and builds no user profiles. We use Google Analytics to measure reach — but only once you agree. Until then nothing of it is loaded. You can change your decision at any time, further down this page. Everything else only flows where it is technically necessary to run the site.

Controller

The controller responsible for data processing on this website is:

Begeisterung UG (haftungsbeschränkt)
Armin Vöhringer
Martiniststraße 62–66
28195 Bremen, Germany
Email: hallo@beachbeach.de

What happens when you visit this site

Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When a page is requested, Vercel processes technically necessary connection data: IP address, time of access, page requested, volume of data transferred, and browser and operating system information (user agent).

This processing is required to deliver the site and keep it stable and secure. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). A data processing agreement under Art. 28 GDPR is in place with Vercel; for transfers to the USA, Vercel relies on the EU Standard Contractual Clauses.

Live weather data from Open-Meteo

On the home page, the beach finder and the wind lore page, the "Today on Elba" block shows current wind, temperature, wave and UV values. To do that, your browser calls the interfaces api.open-meteo.com and marine-api.open-meteo.com operated by Open-Meteo (open-meteo.com) as the page loads. For technical reasons your IP address is transmitted to Open-Meteo in the process — without it, no response can be delivered.

No cookies are set and no further data is transmitted; we ourselves receive and store nothing here. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in showing the current wind and weather situation directly on the page — the central piece of information on this site). If you would rather avoid this, you can block the domains named above (for example with a browser extension); the site still works, the block simply shows dashes.

Contact by email

If you write to us, we process your email address and the content of your message in order to deal with your enquiry (Art. 6(1)(f) GDPR, or (b) where a contract is being initiated). Messages are deleted once they have been dealt with and no retention obligations apply.

Merch interest list

The merch page has an input field for an email address. That form currently has no function: no data is transmitted and none is stored. Once the list actually starts, it will use double opt-in (confirmation email), and this policy will be updated beforehand.

Location request in the beach finder (only on click)

The beach finder offers a "Nearest beaches to me" feature. Only when you click the button and your browser asks for permission is your device location determined. The straight-line distance to the beaches is calculated entirely in your browser — your location is not transmitted to us or any third party, not stored, and not linked with any other data. Without a click and without your consent, nothing happens.

Encryption

Traffic between your browser and this website is encrypted end to end with TLS (HTTPS).

Reach measurement with Google Analytics

Only with your consent. On your first visit we ask at the bottom of the screen whether we may measure usage. Until you agree, no script from Google is loaded and no cookie is set — no connection to Google's servers is made either.

If you agree, we load Google Analytics 4 (measurement ID G-ZCED7E1FQP). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processed data includes:

Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Your IP address is truncated before it is stored.

Transfer to the USA. Google may pass data to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses are in place. A level of protection equal to the EU still cannot be guaranteed — that is the price of this consent, which is why we ask beforehand.

Retention: 14 months, after which Google deletes the usage data automatically.

Your decision

Your rights

You have the following rights regarding your personal data, exercisable against the controller:

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR) — for example the authority where you live or the one where we are based.

Version

July 2026. If anything on the site changes that affects data — such as activating the merch list — this policy will be updated first.