Privacy policy

1. Data controller

You can also use these contact details for questions about data protection.

2. Website visits and hosting

Our website is provided through ChatGPT Sites by OpenAI and uses Cloudflare infrastructure for delivery and security. Technical connection data is processed for this purpose, including your IP address, the time and destination of the request, and device, browser and, where applicable, referrer information sent by your browser.

This processing allows the website to be displayed, errors to be analysed and attacks to be prevented. The legal basis is our legitimate interest in a secure and reliable website under Article 6(1)(f) of the General Data Protection Regulation (GDPR). The website cannot be accessed without transmitting the technically necessary data.

Recipients include the hosting, delivery and security providers OpenAI and Cloudflare and their technical service providers. Technical logs may be stored for operation, troubleshooting, prevention of abuse and compliance with legal obligations. The providers determine retention periods according to the purpose, type of data and security needs; we have not currently been informed of a single fixed deletion period for this website.

These providers may process data outside the European Economic Area, particularly in the United States. OpenAI describes adequacy decisions and EU standard contractual clauses as grounds for transfers; Cloudflare explains its safeguards in its own privacy notices. Information about processing, retention and safeguards is available from OpenAI and Cloudflare. You can also request information about the relevant safeguards through the privacy contacts listed there.

3. Cookies, analytics and content

We have not integrated analytics or advertising trackers or social media plugins.

Cloudflare may set the security cookie __cf_bm to detect automated requests and protect this website. It is used for bot protection and, according to Cloudflare, expires after 30 minutes of continuous inactivity. See Cloudflare’s cookie information. This security processing is based on the legitimate interest described in the hosting section under Article 6(1)(f) GDPR. Where access to your device is strictly necessary for secure delivery, it is based on section 25(2)(2) TDDDG.

When you select a language, we briefly store the destination page, scroll position and timestamp in your browser’s session storage (sessionStorage, key cp-language-position). The destination page reads and removes this entry; positions older than 30 seconds are not restored. The language-switch function does not transmit this information to us. Its sole purpose is to retain your position during the language change you request (section 25(2)(2) TDDDG).

Fonts, images and documents are served through this website. No external fonts, maps or videos are loaded automatically. Links to other providers only connect to the destination website when you click them.

4. Contact by email

If you write to us, we process your email address, the content of your message and any information you voluntarily include. We use this to respond to your enquiry. Our email and communications service providers may receive this data for transmission, storage and handling.

Article 6(1)(b) GDPR applies to enquiries about a potential contract. For other enquiries, processing is based on our legitimate interest in responding under Article 6(1)(f) GDPR. Providing your details is voluntary; we cannot reply without a return address.

We delete correspondence once your enquiry has been resolved and the data is no longer needed. Statutory retention obligations or the need to clarify and defend legal claims may prevent earlier deletion. Retention required by law is based on Article 6(1)(c) GDPR.

5. Your rights

Subject to the statutory conditions, you may request access to your data, correction of inaccurate information, erasure or restriction of processing (Articles 15–18 GDPR). You also have a right to data portability under Article 20 GDPR where the conditions are met.

If processing is based on your consent, you may withdraw that consent at any time with effect for the future. Processing already carried out is not affected. To exercise your rights, contact kontakt@camperplatz.berlin.

You may lodge a complaint with a data protection supervisory authority, particularly in your place of residence, place of work or the place of the alleged infringement (Article 77 GDPR). In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, email: mailbox@datenschutz-berlin.de.

6. Additional features

We do not make automated decisions about you on this website or create personal user profiles. If booking, payment or other services are added, we will add the corresponding privacy information before they are used.

7. One-time opening notification

When you register for our opening notification, we process your email address, optional name, preferred language, registration and confirmation times, registration status and the version of the consent text. Processing is based on your consent under Article 6(1)(a) GDPR. Providing your name is optional. Registration becomes effective only after you confirm using the link sent by email. This link is valid for 48 hours and can be used only once.

We use these data solely for confirmation and the one-time opening notification. This is not an ongoing newsletter subscription, and your data will not automatically be used for future marketing. You may withdraw your consent at any time using the unsubscribe link in our messages or by contacting us. Withdrawal does not affect the lawfulness of earlier processing.

Registration data are stored in the protected ChatGPT Sites backend using a Cloudflare database. Email is sent through Missive and our IONOS mailbox news@camperplatz.berlin. These providers receive the recipient details and message contents required for delivery. We do not use an external newsletter service. The hosting information in section 2 also applies. You may ask the controller about the contractual data protection and international transfer arrangements with these providers.

Unconfirmed registrations become due for automated deletion after 48 hours. Unsubscribing immediately removes the email address and name from the contact; a pseudonymous suppression record is kept for up to 30 days. Confirmed registrations are deleted no later than 365 days after registration. Contact and delivery records are cleared 30 days after completion of the opening campaign. Technical test messages are deleted after seven days and internal operational records after 90 days. Cleanup occurs during regular processing runs; confirmation links are already invalid when their validity expires.

To keep the form hidden after submission in this browser, we store only a pending status for two days or a confirmed status for 30 days in local browser storage (key cp-opening-registration). No name or email address is stored there. This supports the registration function you requested under section 25(2)(2) TDDDG and is not used for advertising or recognition on other websites.

To prevent abuse, we use server-side validation, time-limited form challenges and request limits. For this purpose, we derive a value from the IP address using a secret key; the IP address itself is not stored in the registration record. This security processing is based on Article 6(1)(f) GDPR and our legitimate interest in preventing unwanted or automated registrations. There is no public participant list.