Privacy policy

Controller

Kilo Moana UG (haftungsbeschränkt)
Heidestrasse 49g
25462 Rellingen
Germany

Server log files

When you visit this website, your browser automatically transmits data that our hosting provider stores in server log files. This covers in particular the IP address, the date and time of access, the page requested, the volume of data transferred, the referrer, and the browser and operating system identifiers.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the technically faultless operation and the security of the website.

The website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement under Article 28 GDPR is in place with STRATO AG.

The log files are created by the hosting provider and deleted by it according to its own retention periods. We do not evaluate them and keep no copies of our own. The criterion for how long they are kept is how long the data is needed to trace faults and to fend off attacks; after that it is deleted.

Map display (OpenStreetMap)

We embed a map on the home page. The map tiles are loaded directly from the servers of the OpenStreetMap Foundation (St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom) when the page is opened. In the course of this, your IP address is transmitted to the OpenStreetMap Foundation; without that transmission the map could not be displayed.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in presenting what we offer in an appealing way. The map is embedded without cookies.

The United Kingdom lies outside the European Union. The European Commission has determined by adequacy decision that an adequate level of data protection exists there; the transfer is therefore based on Article 45 GDPR and requires no additional safeguards.

Fonts

Every font used on this website is served from our own server. No connection is made to Google Fonts or to any other external font service, and no data is transmitted to third parties in doing so.

Cookies

This website sets one cookie, and it is a technical one. The content management system it runs on (Grav) stores a session identifier under a name beginning with grav-site- when you first open a page. It contains nothing but a random string that finds the session again on our server: no name, no address, no identifier that reaches beyond this visit.

The cookie expires 30 minutes after the last request, cannot be read by scripts in the browser (HttpOnly), is transmitted only over encrypted connections (Secure) and is not sent along to third-party sites (SameSite=Lax). It serves the technical delivery of the page and is not used to recognise you, nor for analytics, nor for advertising. As strictly necessary access under § 25(2) no. 2 TDDDG, it requires no consent.

Beyond that, this website sets no cookies: none for audience measurement, none for advertising, none from third parties. No advertising networks are embedded, and no automated decision-making takes place.

Audience measurement

We want to know which pages are being read. For that we use Umami, analytics software that we run ourselves, on our own server at STRATO AG, the same processor that hosts this website. No data is passed to third parties and no data is transferred to countries outside the EU.

When a page is opened we record: the address requested, the previously visited page (referrer), screen size, browser and operating system type, preferred language and country of origin. If a click leads into the Traveto application, we additionally record where on this page it happened.

Umami sets no cookies and stores nothing on your device. Your IP address is not stored: together with your browser signature and a random value that changes daily, it goes into an irreversible checksum which merely recognises two requests on the same day as belonging together. By the following day at the latest, that link is gone. No profile is created, and the data cannot be attributed to a person.

The figures remain stored as an evaluation across all visitors for as long as we need them to compare over time. A link to an individual request or device no longer exists after the change of day and cannot be restored, not even by us.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in improving what we offer on the basis of aggregate figures. Since Umami neither stores information on your device nor reads information stored there in order to recognise you, no consent under § 25 TDDDG is required.

Forms and registration

This website contains no contact form and no sign-up form. Registration for the Traveto application takes place outside this website; the privacy policy published there applies to it.

Your rights

You have the right of access (Article 15 GDPR), to rectification (Article 16 GDPR), to erasure (Article 17 GDPR), to restriction of processing (Article 18 GDPR) and to data portability (Article 20 GDPR). Where processing is based on Article 6(1)(f) GDPR, you may object to it under Article 21 GDPR.

To exercise these rights, write to info@kilo-moana.com.

Right to lodge a complaint

Irrespective of the above, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Independent State Centre for Data Protection Schleswig-Holstein (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, ULD), Holstenstraße 98, 24103 Kiel, Germany.

Language

This English text is a translation provided for convenience. The German version of this privacy policy is the legally binding one.

Last updated: 26 September 2026.