Privacy

Last updated: 19 October 2026

This policy covers the website posan.de with all its pages. The Pedalglobe app and the website pedalglobe.de are covered by the Pedalglobe privacy policy.

This is a translation. If the German and English versions differ, the German version applies.

1. In short

• The website consists of plain static pages. It sets no cookies, uses no analytics and no tracking and needs no JavaScript.
• Everything the pages show comes from our own server: text, images, the video and your device's own fonts. There are no embedded third-party services, no external fonts, no map or video services and no social media buttons.
• Like almost every web server, ours writes access logs including your IP address when you visit (section 4).

2. Controller

Burkhard Naumann
Katharinenstr. 15, 01099 Dresden
Germany
Email: kontakt@posan.de

“Posan” is the developer name under which this website and the Pedalglobe app are published. More details are in the legal notice. No data protection officer has been appointed because there is no obligation to do so (section 38 BDSG).

3. Hosting

The website runs on a server we rent from Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany, and manage ourselves. The server is located in Deutschland. Contabo provides the data centre, power and network and may access the stored data in the course of operation. In doing so, Contabo acts on our behalf (processor, Art. 28 GDPR).

4. Server access logs

What: Each time a page or file is requested, the web server (Apache) writes an entry to its access log:

• your IP address
• date and time of the request
• the requested address and the type of request
• the status code of the response and the amount of data transferred
• the page you came from (referrer), if your browser sends it
• your browser's identifier (user agent), which shows your browser and operating system

If an error occurs, the server also records it with IP address and time in an error log.

Purpose: to deliver the website, find errors and detect and fend off attacks or abuse. We do not analyse the logs to build profiles and do not combine them with other data. We only look into them specifically when there is a fault or an attack.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is running the website securely and reliably.

Retention: The logs are deleted automatically after 14 Tagen. Entries we need to investigate a specific attack are kept until the incident is closed.

Recipients: nobody except us and, as our processor, Contabo (section 3).

5. Encryption

The website is only available encrypted over HTTPS. Others cannot see which pages you open.

6. No cookies, no analytics, no third-party content

The website stores nothing on your device and reads nothing from it, except what your browser caches by itself so that pages load faster. There are no statistics tools, no ads and no embedded content from other providers. All files are stored on our server.

7. Links to other sites

The website links to other services, for example the App Store, the world climate map at app.posan.de and sources such as OpenStreetMap. Your browser only connects to them when you follow a link. Their privacy rules apply there. The world climate map has its own privacy information.

8. Contact by email

• When you write to us, we process your email address, your name (if given) and the content of your message.
• Purpose: to answer your request. Legal basis: Art. 6(1)(b) GDPR if it concerns the app or your purchase, otherwise Art. 6(1)(f) GDPR (our interest in answering requests).
• The email service we use (DomainFactory GmbH, Neuturmstrasse 5, 80331 München) processes the messages on our behalf (Art. 28 GDPR).
• We delete your message 6 months after the request is closed, unless we have to keep it longer, for example for tax reasons.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Write to us at kontakt@posan.de. To give you information from the access logs, we need your IP address and the approximate time of your visit, because we cannot otherwise link entries to a person.

10. Complaint to a supervisory authority

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state where you live. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Maternistraße 17, 01067 Dresden, Germany, datenschutz.sachsen.de.

11. Do you have to provide data?

No. Without the connection data in section 4, however, the server cannot technically deliver the pages.

12. Changes

We update this policy when the website or the law changes. The version published here applies.