Privacy Policy

Who is responsible

Waldo Vanderhaeghen, Berlin, Germany.
Contact: waldo@vanderlore.de

What data is collected

This site uses Google Analytics 4 to understand how visitors find and read content. Analytics is only activated if you explicitly accept cookies. If you decline, no data is sent to Google.

When analytics is active, Google Analytics collects: pages visited, time spent, referrer URL, browser type, and approximate country. No names, email addresses, or personally identifiable information are collected.

Google Analytics & Consent Mode v2

This site uses Google Consent Mode v2. Analytics storage is set to denied by default. It is only changed to granted when you click "Accept" in the cookie banner. Your choice is stored in your browser's localStorage and respected on return visits. Advertising storage (ad_storage) is always set to denied regardless of your cookie choice — no advertising cookies are set.

Google Analytics data is processed by Google LLC. For more information, seeGoogle's Privacy Policy.

Legal basis: Art. 6(1)(a) GDPR (your consent).
Data retention: GA4 analytics data is retained for up to 14 months.

Behavioral analytics (PostHog)

This site uses PostHog to understand how visitors navigate and interact with it — for example, which pages are viewed and how visitors move through the site. PostHog is only activated if you explicitly accept cookies via the banner on your first visit. If you decline, no data is sent to PostHog.

PostHog data is processed on EU servers (Frankfurt) operated by PostHog Inc. No names, email addresses, or personally identifiable information are collected. See PostHog's Privacy Policy.
Legal basis: Art. 6(1)(a) GDPR (your consent).
Retention: 1 year.

Appointment scheduling (Cal.com, Google Meet)

The booking calendar on the contact page is provided byCal.com (Cal.com, Inc., USA). It loads automatically only if you accepted cookies on this site. Otherwise it loads only when you click “Show the calendar”. No other page on this site contacts Cal.com.

Once loaded, Cal.com sets its own technically necessary cookies (security and session) and processes your IP address and browser data, including for error monitoring, possibly in the USA. When you book, Cal.com processes your name, email address, the selected time slot and any notes you add. The appointment is then created in my Google Calendar with a Google Meet video link, so Google (Google Ireland Ltd.) also processes these details. Transfers to the USA are based on the EU standard contractual clauses or the EU-US Data Privacy Framework, as applicable.
Legal basis: loading the calendar: your consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG) or your explicit request by clicking (§ 25(2) No. 2 TTDSG); booking: Art. 6(1)(b) GDPR (pre-contractual steps at your request).
Retention: as long as needed to arrange and follow up on the conversation; you can ask me to delete it at any time.

Your rights (GDPR)

You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict (Art. 18), port (Art. 20), and object to (Art. 21) the processing of your personal data. You may also lodge a complaint with the supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI), Friedrichstr. 219, 10969 Berlin, www.datenschutz-berlin.de.

Withdraw consent at any time using the button below, or by contacting me at waldo@vanderlore.de.

Revoke cookie consent

Der Widerruf berührt nicht die Rechtmäßigkeit der aufgrund der Einwilligung bis zum Widerruf erfolgten Verarbeitung (Art. 7 Abs. 3 Satz 2 DSGVO / Art. 7(3) GDPR).

Login cookies (password-protected sections)

After a successful login to a password-protected section, this site sets two technically necessary first-party cookies: a login cookie (30 days) and a device cookie (90 days, renewed while you use the section) that lets a browser which has logged in before keep logging in while the login form is temporarily locked after repeated failed attempts by others. Both contain only an expiry date and a signature, no personal data. To limit password guessing, login attempts are counted per IP address (for IPv6, per /64 network) only in the working memory of the server instance that handled them, never on disk or in a database. A count is used for at most one hour and deleted at the latest when that server instance shuts down. Logs of failed attempts record only a shortened hash of the address, never the password entered.Legal basis: § 25(2) No. 2 TDDDG and Art. 6(1)(f) GDPR (security of the login).

Hostmade.de — tool template signups

When you request a personalised tool template via Hostmade.de (e.g. the Übernachtungssteuer setup or cleaning schedule template), the following data is collected: your name, email address, city, selected OTAs, and property setup details.

This data is used solely to send you the requested template and relevant follow-up information. It is not shared with third parties or used for advertising. You can unsubscribe from follow-up emails at any time by replying "unsubscribe" to any email from this address, or by contactingwaldo@vanderlore.de.
Legal basis: Art. 6(1)(b) GDPR (processing necessary to deliver the service you requested).

No other tracking

The public parts of this site use no advertising trackers, no social media pixels, no third-party cookies beyond Google Analytics and PostHog (only when consented) and Cal.com on the contact page (only after consent or your click), and no server-side logging of visitor IP addresses (failed logins to the password-protected sections log only a shortened hash, see above).

Hosting

This site is hosted on Vercel. Vercel may process access logs as part of its infrastructure. SeeVercel's Privacy Policy.