Privacy policy
Last updated: XXX
Controller
Responsible for data processing on this website:
Dmitrij Repp Sport Dienstleistungen
Owner: Dmitrij Repp
Alois-Brisbois-Weg 36
65929 Frankfurt am Main
Email: stiner@drepp.de
Booking form
When you send a jump request, your name, email address and phone number are stored — they are needed to reply and agree on a date. Message, weight and height are optional and help with preparation.
Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract).
Your request stays a single record that you can change yourself through the same page. You are recognised by a random identifier in a cookie and your browser's local storage — not by your email address.
Retention: until the request is settled, and beyond that only as long as tax or commercial record-keeping obligations require. Deletion on request at any time.
Guestbook and photos
Reviews are published with the name you give, after review. An email address is optional and is never published.
A photo you choose to upload is stored in the database and shown on the page. It is resized and re-encoded on upload, which removes all EXIF data — including the capture coordinates that phones store by default.
Legal basis: Art. 6(1)(a) GDPR (consent given by submitting). Consent can be withdrawn at any time; the review is then removed.
Server logs and abuse protection
When a form is submitted, the IP address, time and outcome of the attempt are recorded. This is needed to limit automated mass submissions; without it the form would be unusable within days.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a working service).
These entries are deleted after seven days at the latest.
In addition, the number of visitors per page is counted. A nightly job reads the server's access log and stores daily totals only — numbers, no addresses. Whether two requests came from the same person is determined by a checksum of IP address and browser identification; that checksum uses a key that changes every day and is never stored. Recognising anyone beyond a single day is therefore impossible — for us as well.
The log itself is emptied after processing. No cookies are set and no counting scripts are embedded.
Separately, the reverse proxy in front of the server logs every page request with IP address, time, address and browser identifier, to detect and fend off attacks (Art. 6(1)(f) GDPR). This log is deleted after one year.
Cookies and local storage
This site uses no advertising or analytics cookies and embeds no trackers. Only the following are stored:
— the language you chose, so the site opens in it next time;
— a random identifier, to recognise your own request;
— a session cookie protecting the forms against abuse.
These are technically necessary (§ 25(2) TDDDG) and require no consent.
Map
The map of meeting points uses map tiles from OpenStreetMap (OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom). Loading the map transmits your IP address to OpenStreetMap servers.
The map library itself is hosted on this server and is not loaded from third parties.
OpenStreetMap privacy policy: https://osmfoundation.org/wiki/Privacy_Policy
Videos about the jump
In the «Your jump with me» section you can watch a short video for individual steps. The videos are hosted on YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).
As long as you do not click a video, NO connection to Google is made: the preview image is stored on this server. Only your click loads the player — this transmits your IP address and details about your browser and device to Google, and Google may set cookies.
The embed uses youtube-nocookie.com, the variant without advertising cookies. Legal basis for loading after the click: Art. 6(1)(a) GDPR (consent given by clicking).
Google privacy policy: https://policies.google.com/privacy
Hosting
This website runs on a server of STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, in Germany. All data mentioned above is stored there. A data processing agreement under Art. 28 GDPR is in place with STRATO.
Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and objection. An email to the address above is enough.
You also have the right to lodge a complaint with the competent supervisory authority: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.