Privacy policy

As of October 2026. This policy describes the data processing of this technical demonstrator.

1. Controller

Stefan Stretz, Karl Ferlemann Strasse 33, 04177 Leipzig, Germany. Contact details: see the legal notice. This site is a demonstrator created for a tender application and is not an offering of Staatsbetrieb Sachsenforst.

2. Hosting, DNS and server logs

The site is operated on Oracle Cloud Infrastructure (Oracle), data centre Frankfurt am Main (EU). HTTPS is provided by a web server on that instance; certificates are issued by Let’s Encrypt. The domain name is resolved via Cloudflare’s DNS service; page requests do not pass through Cloudflare but go directly to the Oracle instance.

When you visit, technically necessary data is processed (IP address, time, requested URL, browser identifier) to deliver the site and keep it secure (Art. 6(1)(f) GDPR). These server logs are not combined with other data and are deleted when the demonstrator is shut down, at the latest after six months.

3. Forms

The contact, booking and disturbance forms store your input only in this demonstrator's database and do not pass it on to third parties:

• Contact: name, email address, subject, message.
• Booking (example feature): name, email address, number of participants, confirmation code.
• Report a disturbance (example feature): description, optionally trail and email address.

Legal basis is Art. 6(1)(b) or (f) GDPR. The data is deleted when the demonstrator is shut down, at the latest after six months. Please do not enter real personal data in the demo.

4. Visit statistics (consent only)

Page-view statistics (page, title, time, no IP address) are only recorded after you accept in the notice banner and are stored locally in this system, not with a third party. Your choice is kept in your browser's local storage (not as a cookie). You can change it at any time via "Privacy settings" in the footer (Art. 6(1)(a) GDPR, § 25 TDDDG).

5. Embedded videos (YouTube)

Videos load only after you click "Load video" and are embedded via youtube-nocookie.com. Until then there is no connection to Google/YouTube, not even for a preview image. With your click, your IP address is transferred to Google (Art. 6(1)(a) GDPR).

6. Map

The map software (MapLibre) is served from this server. Only after you click "Load map" is map data fetched from OpenFreeMap (tiles.openfreemap.org); your IP address is transferred to that provider in the process (Art. 6(1)(a) GDPR). Your choice applies to the current browser session only (sessionStorage).

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to lodge a complaint with a supervisory authority, e.g. the Saxon Data Protection Commissioner. You may withdraw consent at any time with effect for the future.