Privacy Notice

Last updated: 26.05.2026

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:

Christian Schippel
Arndtstr. 6
45219 Essen
Germany
E-mail: info@wildgewachsen-australien.de

2. Data Protection Officer

No data protection officer has been appointed. This website is operated by a single individual ("solo operator"). The conditions for the mandatory appointment of a DPO under Art. 37 GDPR and § 38 BDSG are not met (no large-scale regular monitoring, no special categories of data as core business, fewer than 20 persons engaged in automated processing).

3. Processing Purposes and Legal Bases

We process personal data for the following purposes:

• Provision of the website (server logs): Technical data is collected when the site is accessed (IP address, date, time, browser type, operating system, referrer URL). Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating and securing the website).
• Audience measurement (GoatCounter): Anonymous, cookieless statistics on page views. Legal basis: Art. 6 (1) (f) GDPR; additionally § 25 (2) (2) TDDDG, as no information is stored on or read from end-user devices beyond what is strictly necessary.
• Newsletter (Brevo): Processing of your e-mail address to send the newsletter (double opt-in). Legal basis: Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (performance of the newsletter contract).
• Affiliate tracking (Wise, SafetyWing, World Nomads, Booking.com): If you consent in the cookie banner, clicks on affiliate links are tracked via the relevant providers' cookies so that commissions can be attributed correctly. Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (explicit consent via the Klaro cookie banner).
• Contact requests: Processing of the information you provide so that we can respond to your query. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual / contractual) or Art. 6 (1) (f) GDPR (legitimate interest in communication).

4. Legitimate Interests (Art. 6 (1) (f) GDPR)

• Server logs: maintaining the technical operability and security of the website against attacks and abuse.
• Audience measurement: understanding which content reaches readers in order to improve the website editorially. We use GoatCounter, a tool that does not set cookies and does not store IP addresses.

5. Recipients of Personal Data

The following external service providers process personal data on our behalf or as joint controllers. Each provider's own privacy policy is linked; the provider information is as of 26.05.2026.

6. Transfers to Third Countries

Some recipients are located outside the EEA. We safeguard such transfers as follows:

• USA (Cloudflare): based on the EU-US Data Privacy Framework (Commission adequacy decision of 10.07.2023, to the extent the providers are certified) and/or standard contractual clauses (SCC) pursuant to Art. 46 (2) (c) GDPR.
• United Kingdom (Wise): Commission adequacy decision of 28.06.2021.
• Australia (World Nomads): transfer based on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR; no adequacy decision.
• Turks and Caicos Islands (SafetyWing): transfer based on standard contractual clauses pursuant to Art. 46 (2) (c) GDPR; no adequacy decision. An EU representative under Art. 27 GDPR has been appointed.

Transfers to third countries involve risks (e.g. broader access by state authorities, potential restrictions on enforcing data subject rights). You can object to processing by affiliate providers via the cookie banner.

7. Storage Periods

• Server logs (Cloudflare): kept according to Cloudflare defaults; to our knowledge no longer than 7 days. Details: Cloudflare Privacy Policy.
• Klaro cookie ("wildgewachsen-klaro"): 365 days from being set or until consent is withdrawn.
• Affiliate cookies: storage period set by the respective provider; see the linked privacy policies.
• Newsletter data: until unsubscribe. After unsubscribe the record is removed at Brevo.
• Contact requests: until the matter has been resolved or for as long as statutory retention obligations require.

8. Your Rights

Subject to the conditions of the GDPR, you have the following rights:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority for our place of establishment in Essen (North Rhine-Westphalia, Germany) is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, Germany
https://www.ldi.nrw.de/

9. Withdrawing Your Consent

You can withdraw any consent you have given (e.g. affiliate tracking, newsletter) at any time with effect for the future. You can withdraw via:

• Cookie settings: click open cookie settings (opens the Klaro dialog).
• Newsletter: use the unsubscribe link in every newsletter e-mail.
• Other rights: info@wildgewachsen-australien.de

10. Cookie Overview

Note: GoatCounter does not set cookies. Detailed cookie lists of the affiliate providers can be found in their respective privacy policies.

11. Automated Decision-Making / Profiling

We do not engage in automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

12. Newsletter Details

Our newsletter is delivered by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany, registered with the commercial register of the local court of Berlin-Charlottenburg under HRB 133191, a subsidiary of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France. When you subscribe, you confirm your sign-up via a double opt-in procedure (confirmation link sent by e-mail). We store your e-mail address, the timestamp of your consent, and the IP address submitted at sign-up as proof of consent. You can unsubscribe at any time via the link at the bottom of every newsletter e-mail; processing of your e-mail address will then cease. Brevo processes newsletter subscriber data as a processor on our behalf. The data processing agreement under Art. 28 GDPR forms part of Brevo's terms of use (Appendix 3), so no separate agreement is required. Brevo terms of use (incl. data processing), Brevo privacy policy.

Until 17 August 2026 the newsletter was delivered by Kit Inc. (USA). The few subscriber records stored until then were transferred to Brevo, and the Kit account was closed.

13. Changes to this Notice

We update this notice when technical or legal circumstances change. The current version is always published on this page. Last updated: 26.05.2026.