Privacy Notice

Last updated: 26.05.2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:

Christian Schippel
Arndtstr. 6
45219 Essen
Germany
E-mail: info@wildgewachsen-australien.de

2. Data Protection Officer

No data protection officer has been appointed. This website is operated by a single individual ("solo operator"). The conditions for the mandatory appointment of a DPO under Art. 37 GDPR and § 38 BDSG are not met (no large-scale regular monitoring, no special categories of data as core business, fewer than 20 persons engaged in automated processing).

3. Processing Purposes and Legal Bases

We process personal data for the following purposes:

• Provision of the website (server logs): Technical data is collected when the site is accessed (IP address, date, time, browser type, operating system, referrer URL). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating and securing the website).
• Audience measurement (GoatCounter): Anonymous, cookieless statistics on page views. Legal basis: Art. 6 (1) (f) GDPR; additionally § 25 (2) (2) TDDDG, as no information is stored on or read from end-user devices beyond what is strictly necessary.
• Newsletter (Buttondown): Processing of your e-mail address to send the newsletter (double opt-in). Legal basis: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (performance of the newsletter contract).
• Affiliate tracking (Wise, SafetyWing, World Nomads, Booking.com): If you consent in the cookie banner, clicks on affiliate links are tracked via the relevant providers' cookies so that commissions can be attributed correctly. Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (explicit consent via the Klaro cookie banner).
• Contact requests: Processing of the information you provide so that we can respond to your query. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual) or Art. 6 (1) (f) GDPR (legitimate interest in communication).

4. Legitimate Interests (Art. 6 (1) (f) GDPR)

• Server logs: maintaining the technical operability and security of the website against attacks and abuse.
• Audience measurement: understanding which content reaches readers in order to improve the website editorially. We use GoatCounter, a tool that does not set cookies and does not store IP addresses.

5. Recipients of Personal Data

The following external service providers process personal data on our behalf or as joint controllers. Each provider's own privacy policy is linked; the provider information is as of 26.05.2026.

Provider	Location	Function	Data category
Cloudflare, Inc.	USA	Hosting (Cloudflare Pages), CDN, DNS	IP address, connection data
GoatCounter (Martin Tournoij)	EU (Netherlands)	Cookieless audience measurement	Anonymous page views
Buttondown, LLC	USA (Richmond, Virginia)	Newsletter delivery	E-mail address, opt-in timestamp, optional first name
Wise (Wise Payments Limited)	United Kingdom	Affiliate tracking	Cookie ID, click data
SafetyWing (Managing General Agent) Ltd.	Turks and Caicos Islands; EU representative in Larnaca, Cyprus	Affiliate tracking	Cookie ID, click data
World Nomads	Australia	Affiliate tracking	Cookie ID, click data
Booking.com B.V.	Netherlands (Amsterdam)	Affiliate tracking	Cookie ID, click data

6. Transfers to Third Countries

Some recipients are located outside the EEA. We safeguard such transfers as follows:

• USA (Cloudflare, Buttondown): based on the EU-US Data Privacy Framework (Commission adequacy decision of 10.07.2023, to the extent the providers are certified) and/or standard contractual clauses (SCC) pursuant to Art. 46 (2) (c) GDPR.
• United Kingdom (Wise): Commission adequacy decision of 28.06.2021.
• Australia (World Nomads): transfer based on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR; no adequacy decision.
• Turks and Caicos Islands (SafetyWing): transfer based on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR; no adequacy decision. An EU representative under Art. 27 GDPR has been appointed.

Transfers to third countries involve risks (e.g. broader access by state authorities, potential restrictions on enforcing data subject rights). You can object to processing by affiliate providers via the cookie banner.

7. Storage Periods

• Server logs (Cloudflare): kept according to Cloudflare defaults; to our knowledge no longer than 7 days. Details: Cloudflare Privacy Policy.
• Klaro cookie ("wildgewachsen-klaro"): 365 days from being set or until consent is withdrawn.
• Affiliate cookies: storage period set by the respective provider; see the linked privacy policies.
• Newsletter data: until unsubscribe. After unsubscribe the record is removed at Buttondown.
• Contact requests: until the matter has been resolved or for as long as statutory retention obligations require.

8. Your Rights

Subject to the conditions of the GDPR, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority for our place of establishment in Essen (North Rhine-Westphalia, Germany) is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, Germany
https://www.ldi.nrw.de/

9. Withdrawing Your Consent

You can withdraw any consent you have given (e.g. affiliate tracking, newsletter) at any time with effect for the future. You can withdraw via:

• Cookie settings: click open cookie settings (opens the Klaro dialog).
• Newsletter: use the unsubscribe link in every newsletter e-mail.
• Other rights: info@wildgewachsen-australien.de

10. Cookie Overview

Name	Provider	Purpose	Lifetime	Type
wildgewachsen-klaro	Wildgewachsen (first-party)	Stores your cookie choices	365 days	strictly necessary (consent record)
wise*	Wise	Affiliate tracking	per provider	consent required
safetywing*, sw_*	SafetyWing	Affiliate tracking	per provider	consent required
worldnomads*, wn_*	World Nomads	Affiliate tracking	per provider	consent required
aid, booking*	Booking.com	Affiliate tracking	per provider	consent required

Note: GoatCounter does not set cookies. Detailed cookie lists of the affiliate providers can be found in their respective privacy policies.

11. Automated Decision-Making / Profiling

We do not engage in automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Newsletter Details

Our newsletter is delivered by Buttondown, LLC (406 W Franklin St. #201, Richmond, VA 23221, USA). When you subscribe, you confirm your sign-up via a double opt-in procedure (confirmation link sent by e-mail). We store your e-mail address, the timestamp of your consent, and optionally a first name. You can unsubscribe at any time via the link at the bottom of every newsletter e-mail; processing of your e-mail address will then cease. Transfer to the USA is based on the EU-US Data Privacy Framework and/or standard contractual clauses. Buttondown privacy policy.

13. Changes to this Notice

We update this notice when technical or legal circumstances change. The current version is always published on this page. Last updated: 26.05.2026.