Datenschutz

1. Data Controller and Contact

ElimCamping is responsible for your personal data. We take data privacy very seriously and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws in Germany and the European Union. If you have any questions about our privacy practices, contact us at support@elimcamping.com.

2. What Data We Collect

We collect personal data that you voluntarily provide to us, including:

• Name and email address
• Early-access waitlist sign-up: your email address, whether you signed up as a camper or campsite owner, your language, and the referral/campaign source of your visit (preview phase). We use this solely to send you a confirmation email and to notify you when the platform launches; you can ask us to delete it at any time at support@elimcamping.com.
• Account registration information
• Profile information (phone number, date of birth if provided)
• Booking requests and camping preferences
• Messages and communications with campsite owners
• Payment information (processed by third-party payment providers)
• IP address and browser information (automatically collected)
• Cookies and usage data (see Cookies section below)

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Performance of a Contract: To provide the ElimCamping service and facilitate bookings between campers and campsite owners
• Your Consent: When you explicitly agree to receive marketing communications or for optional features
• Legal Obligation: To comply with laws, regulations, and legal requests
• Legitimate Interest: To improve our service, prevent fraud, and ensure platform security

4. How We Use Your Data

We use your personal data to:

• Create and manage your account
• Facilitate booking requests between campers and campsite owners
• Provide customer support
• Send transactional emails (booking confirmations, communication notifications)
• Improve and optimize our platform and services
• Detect and prevent fraud and abuse
• Comply with legal obligations

5. Data Storage and Security

Your personal data is stored securely on Supabase, a secure, GDPR-compliant cloud platform. We implement industry-standard security measures including encryption, secure access controls, and regular security audits. However, no online system is completely secure, and we cannot guarantee absolute security of your data.

6. Data Retention and Deletion

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this policy. You can request deletion of your account at any time from your account settings.

How account deletion works:

• When you click “Delete my account”, your account is immediately disabled (you cannot log in) and scheduled for permanent erasure 30 days later. This grace period gives you a chance to change your mind.
• If you change your mind during the 30 days, email support@elimcamping.com and we will restore your account.
• After 30 days, your account is permanently erased: your auth record, your trips, and any stored profile data are removed.
• Booking inquiries you sent to campsites are not deleted, but the personal information attached to them — your name, email address, and phone number — is removed and replaced with “Deleted user”. Campsites retain their own record of the inquiry (which they have a legitimate business interest in keeping for dispute resolution and record-keeping purposes), but they cannot identify you from it after erasure.
• Conversation messages you sent are similarly retained for the campsite’s records but de-linked from your identity.

Some data may be retained beyond account deletion where we have a legal obligation to do so — for example, fraud-related evidence preserved for law enforcement cooperation, or records required by tax law.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access & Portability (Art. 15, 20): Request a copy of your data in a structured, machine-readable format. Available immediately via the “Download my data” button in your account settings — you receive a JSON file with your account, trips, booking inquiries, messages, and reports.
• Right to Correction (Art. 16): Request correction of inaccurate data. Most fields are editable directly from your account; for anything else, contact support.
• Right to Erasure (Art. 17, “right to be forgotten”): Request deletion of your account. Available immediately via the “Delete my account” button in your account settings. See section 6 above for the full process.
• Right to Restrict Processing (Art. 18): Request limitation of data processing.
• Right to Object (Art. 21): Object to certain types of data processing.
• Right to Withdraw Consent (Art. 7): Withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with the German Federal Commissioner for Data Protection (BfDI), or your local data protection authority.

To exercise rights not directly available in-app, contact us at support@elimcamping.com. We will respond within 30 days.

8. Third-Party Services

We share your data with the following trusted third-party service providers:

• Supabase (EU region): Cloud database and authentication provider — stores account, booking, and message data
• Postmark (ActiveCampaign): Email service provider for transactional emails — processes recipient email addresses and message content
• Vercel: Hosting and content delivery for the website — processes IP addresses and request metadata as part of serving pages. Vercel also provides cookieless Web Analytics and Speed Insights (performance measurement): we receive only aggregated page views, referrers, approximate region, and Core Web Vitals. No cookies are set, no cross-site tracking occurs, and full IP addresses are not stored. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Cloudflare: DNS, content delivery, and security filtering — processes IP addresses and request metadata to protect the platform against attacks
• Sentry (EU region): Error monitoring — processes technical error reports; personal data is scrubbed before transmission
• Google Places: Location and place data for campsite search

All third-party providers are GDPR-compliant and process data under Data Processing Agreements (Art. 28 GDPR).

9. Cookies and Tracking

ElimCamping uses only first-party cookies that are necessary for the operation of the platform or that store your preferences. We do not use third-party advertising or cross-site tracking cookies. Specifically:

• Authentication cookies (sb-*): Maintain your login session (set by Supabase Auth; strictly necessary)
• NEXT_LOCALE: Remembers your language choice (German/English) so pages render in your preferred language
• ec_attr: Records, once, how you first found ElimCamping (a campaign tag and/or the referring website, the page you landed on, and a timestamp) so we can understand which of our outreach efforts work. It contains no personal data, is not shared with third parties, does not track you across other websites, and expires after 90 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

For usage and performance measurement we use Vercel Web Analytics and Speed Insights, which are cookieless: they set no cookies, do not store full IP addresses, and do not track you across other websites (see “Third-Party Services” above).

Product measurement (no cookie): to understand where people get stuck in the platform, we record a small, fixed set of interaction events — for example that a campsite page was opened, that a campsite was added to a shortlist, or that an inquiry was sent. These events are tied only to a random identifier held in your browser’s session storage (ec_pid), which is created per browser tab and is deleted when you close it. It is not a cookie, is never shared, and is not used across other websites. The events themselves contain no names, email addresses, messages or free text. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

One exception, stated plainly: if you send a booking request, that identifier is stored alongside the request so that we can see the path that led to it — which page you arrived on and which campsites you looked at before writing. We use this only to find and fix the places where inquiries get lost. It works in one direction only: we can look up a specific booking request and see its path, but we cannot look up an identifier and find out who it belongs to. If you never send a request, the identifier is never connected to you at all. Where it is connected, it is deleted together with the booking request (see “Data Retention” and “Your Rights”). Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Transactional email measurement: the booking request emails we send to campsites measure whether the email was opened and whether a link in it was clicked. We use this only to tell whether our request emails reach and are understood by campsite operators, never to build advertising profiles. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). You can prevent open measurement by disabling remote image loading in your email program.

You can control or delete cookies at any time through your browser settings. Disabling the authentication cookie will prevent you from staying logged in.

10. Marketing Communications

We may send you marketing emails about new features, promotions, and updates. You can opt out of marketing communications at any time by clicking the "Unsubscribe" link in our emails or by updating your preferences in your account settings.

11. Children's Privacy

ElimCamping is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data, we will take steps to delete it promptly. Parents or guardians concerned about a child's use of ElimCamping should contact us immediately.

12. International Data Transfers

Your data is stored and processed within the European Union and complies with GDPR. If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

13. Policy Updates

We may update this Privacy Policy from time to time. The updated version will be effective immediately upon posting. We recommend reviewing this policy periodically to stay informed about how we protect your privacy.

14. Contact Us

If you have questions about our privacy practices or wish to exercise your data rights, please contact us at:

Email: support@elimcamping.com