Privacy Policy

Thank you for your interest in our website. Protecting your personal data is important to us. This policy explains which data we collect, why we process it and what rights you have.

1. Controller

Voice of Nature — Hendrik Stachnau Albertiweg 22c 22605 Hamburg Germany

E-mail: mail@voice-of-nature.org Phone: +49 (0) 176 70432928

Your contact for data protection matters is Hendrik Stachnau via the e-mail address above.

2. General notes on data processing

We only process personal data to the extent necessary to provide a functioning website along with our content and services — or where you have given us your consent.

Legal bases in particular are:

  • Art. 6 para. 1 lit. a GDPR — consent (e.g. for video embeds and analytics)
  • Art. 6 para. 1 lit. b GDPR — performance of a contract or pre-contractual measures (contact form, inquiry handling)
  • Art. 6 para. 1 lit. f GDPR — legitimate interests (e.g. server security, spam protection)
  • §25 TTDSG — consent for non-essential cookies and comparable techniques

3. Data collected when visiting our website

3.1 Server logs

When our website is accessed, our hosting provider (Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA) automatically collects the following data:

  • IP address (truncated, for a limited time)
  • Date and time of the request
  • Requested URL
  • Referrer URL (the page you came from)
  • User agent (browser and operating system)

This data is processed to ensure technical operation and to defend against attacks. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

Vercel is certified under the EU-US Data Privacy Framework; we have entered into a data processing agreement with Vercel in accordance with Art. 28 GDPR.

3.2 Cookies and comparable techniques

Our website uses technically necessary cookies (or localStorage entries) to store your cookie preferences. This storage serves only the functionality of the website and does not require consent (§25 para. 2 no. 2 TTDSG).

Further optional categories (video & media, analytics) are only activated if you have granted consent in our cookie settings. You can withdraw your consent at any time — via the "Cookie settings" link in the footer of every page.

4. Contact form

When you contact us via the inquiry form, we process the following data:

  • Name
  • E-mail address
  • Phone number (optional)
  • Tour interest, desired date range, number of people
  • For corporate inquiries: company name, role, group size, occasion (optional)
  • Your free-text message

Purpose: processing your inquiry, preparing an individual offer, communication about the booking process. Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures). Retention period: we store your inquiry for as long as necessary for its processing, plus statutory retention periods (typically 6 to 10 years under German commercial and tax law if a booking takes place).

4.1 E-mail delivery via Resend

For delivery of the inquiry e-mail and the automatic confirmation, we use the service Resend (Resend.com, 2261 Market Street #5039, San Francisco, CA 94114, USA). Resend is our data processor in accordance with Art. 28 GDPR. Your e-mail address and the content of your message are transmitted to Resend and delivered from there to our mailbox.

Transmission to the USA is based on EU Standard Contractual Clauses. Legal basis: Art. 6 para. 1 lit. b GDPR.

5. Embedded YouTube videos

On our videos page (and possibly other pages) we embed videos from YouTube (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). So that YouTube receives no data without your consent, we use a two-click mechanism: videos are first shown as placeholders and are only loaded after your active click or after you have enabled the "Video & media" category in the cookie settings.

As soon as you activate a video, your browser loads data from youtube-nocookie.com (privacy-enhanced mode of YouTube). Google may process your IP address and usage data and may set cookies, including in the USA. Details are in the Google Privacy Policy.

Legal basis: Art. 6 para. 1 lit. a GDPR + §25 para. 1 TTDSG (consent).

6. Spam protection

The contact form is protected by a honeypot and server-side rate limiting. Neither transmits additional personal data to third parties.

[Optional, only enable if Turnstile is actually used in production: In addition we use Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) for bot protection. In doing so, technical characteristics of your browser and your IP address are briefly transmitted to Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in spam prevention).]

7. Analytics with Google Analytics

We use Google Analytics 4 (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to understand which content on our website is read frequently and how visitors find us.

Google Analytics uses cookies and similar techniques to collect information about your use of the website (including pages visited, referrers, device type, approximate region, aggregated interactions). We have enabled IP anonymisation, so your IP address is truncated before being processed by Google.

Google Analytics scripts are loaded only after your consent — via the cookie banner on first visit or the "Cookie settings" link in the footer. Without consent, no GA data is collected.

Legal basis: Art. 6 para. 1 lit. a GDPR + §25 para. 1 TTDSG (consent).

Recipients: Google Ireland Ltd., Google LLC. Transmission to the USA is based on the EU-US Data Privacy Framework (Google LLC is certified) and additionally safeguarded by EU Standard Contractual Clauses. We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR.

Retention at Google: up to 14 months after the last interaction.

Withdrawal: you can withdraw your consent at any time via the Cookie settings. Details on data protection at Google: policies.google.com/privacy.

Our website contains links to external sites (e.g. social media profiles such as Facebook, Instagram, LinkedIn, YouTube as well as our summer sister site schweden-abenteuer.com). We have no influence over the content and data processing of these third parties. By clicking such links you reach their privacy policies.

9. Fonts

We use the typefaces Fraunces and Inter (Google Fonts), which we self-host and serve directly from the Vercel CDN. There is no connection to Google Fonts servers when you visit our website — consequently no data is transmitted to Google.

10. Your rights

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR) to processing based on Art. 6 para. 1 lit. f GDPR
  • Right to withdraw consent (Art. 7 para. 3 GDPR) — without affecting the lawfulness of processing carried out before the withdrawal
  • Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

To exercise your rights you can contact us at any time: mail@voice-of-nature.org.

11. Changes to this privacy policy

We update this policy when the legal situation or the services we use change. The current version is always shown at the bottom of this policy.

As of: 2026-04-20 · Draft for final review by Hendrik + lawyer/data protection advisor before go-live.