Privacy Policy

Last updated: 31 August 2026

1. Data Protection at a Glance

Protecting your personal data is important to us. Personal data means any information that can be used to identify a natural person directly or indirectly. Eingefügtes Markdown

This Privacy Policy explains which personal data is processed when you visit eingecheckt.com, the purposes for which it is processed and the rights available to you.

We treat personal data confidentially and in accordance with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Eingefügtes Markdown

2. Controller

The controller responsible for data processing on this website is:

Michael Külbel
Käthe-Kollwitz-Straße 40
04600 Altenburg
Germany

Email: info@eingecheckt.com Eingefügtes Markdown

3. Hosting and Technical Provision of the Website

Ghost(Pro)

eingecheckt.com is operated using the Ghost(Pro) hosting service.

The provider is Ghost Foundation,
160 Robinson Road
#14-04 SBF Center
Singapore 068914.

The Ghost(Pro) servers used to provide our website are located in Amsterdam, the Netherlands. Eingefügtes Markdown

When you access our website, technically necessary data is processed in order to deliver the website to your device and to ensure its security and stability. This may include, in particular, your IP address, the time of access, the page or file requested, the amount of data transferred, the referrer URL, browser type and version, and operating system.

Processing is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, reliably and without technical errors.

Where necessary, Ghost Foundation processes personal data on our behalf as a processor. For transfers of data to third countries, Ghost provides appropriate safeguards, including the European Commission’s Standard Contractual Clauses. Eingefügtes Markdown

Domain Management via STRATO

The eingecheckt.com domain is managed through STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The website itself is not hosted by STRATO, but by Ghost(Pro).

In connection with domain and DNS services, technically necessary connection data may be processed. Processing is based on our legitimate interest in ensuring that our website remains securely and reliably accessible pursuant to Art. 6(1)(f) GDPR. Eingefügtes Markdown

4. Encrypted Connection

For security reasons, this website uses an encrypted HTTPS/TLS connection.

This protects data transmitted between your browser and our server against unauthorised access by third parties. Eingefügtes Markdown

5. Ghost Native Web Analytics

Ghost(Pro) provides integrated, privacy-friendly web analytics.

This analytics system operates without cookies or other persistent browser storage mechanisms used to recognise visitors across different sessions. It enables us, in particular, to analyse page views and visitor numbers and to understand which content on eingecheckt.com is read most frequently.

We use the information obtained in this way to improve our content and services.

Data generated by Ghost(Pro)’s native analytics is stored in regions within the European Union.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in analysing the reach and use of our editorial content in a data-minimising manner and improving our services accordingly. Eingefügtes Markdown

Our website may use cookies and similar technologies.

Technically necessary cookies and storage access may be used where they are required to provide a service expressly requested by you.

We only use non-essential cookies and comparable technologies, particularly for analytics, marketing or tracking purposes, after obtaining your prior consent.

You can change or withdraw your consent at any time using the privacy settings available on our website. The lawfulness of processing carried out before consent was withdrawn remains unaffected.

The legal basis for non-essential cookies and comparable access to information stored on your device is your consent pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Eingefügtes Markdown

7. Google Analytics

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website. This may involve processing information including pages visited, session duration, time of access, approximate location, browser, operating system, device type and the visitor’s source.

Google Analytics uses cookies, among other technologies, to distinguish individual users and sessions. These include cookies named _ga and _ga_<ID>.

Google states that these cookies are stored for up to two years by default. Their actual lifetime may be shorter due to technical settings or browser restrictions. Eingefügtes Markdown

For users in the European Union, Google uses the IP address to derive approximate location information. According to Google, these IP addresses are then discarded and are not logged or stored in Google Analytics.

Google Analytics is only activated on eingecheckt.com after you have consented to the use of analytics technologies through our consent management system.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent is voluntary and can be withdrawn at any time with effect for the future through the privacy settings on our website. Eingefügtes Markdown

When Google services are used, data may also be processed outside the European Union. According to Google, Google LLC is certified under the EU-U.S. Data Privacy Framework. In addition, Google’s data processing terms provide for appropriate safeguards for international data transfers.

User and event data is stored in accordance with the retention period configured in our Google Analytics property. For a standard Google Analytics 4 property, the maximum configurable retention period for such data is 14 months. Aggregated statistical reports may remain unaffected by this. Eingefügtes Markdown

8. Contacting Us by Email

If you contact us by email, we process the information you provide, in particular your email address, the content of your message and, where applicable, your name and any other information you voluntarily provide.

This information is processed for the purpose of handling and responding to your enquiry.

If your enquiry relates to entering into or performing a contract or cooperation arrangement, processing is based on Art. 6(1)(b) GDPR.

For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in responding to reader, press, cooperation and other enquiries.

The data will be deleted once it is no longer required to process the enquiry and provided that no statutory retention obligations apply. Eingefügtes Markdown

9. Contact Form via Airtable

We use Airtable, a service provided by Formagrid Inc., 1 Front Street, Floor 28, San Francisco, CA 94111, USA, for our contact form.

The contact form may process the following data in particular:

Name, email address, company or hotel, type of enquiry, subject and message content.

The information is used to receive, organise and process your enquiry.

In addition, technical information may be processed when the embedded Airtable form is loaded. According to Airtable, this may include IP address, browser type, operating system, device information, and usage and network data.

The data we collect through the contact form is stored within our Airtable database. Eingefügtes Markdown

According to Airtable, its standard infrastructure is primarily hosted on AWS servers in the United States. For international data transfers, Airtable provides a data processing agreement including the European Commission’s Standard Contractual Clauses.

The data you actively submit through the form is processed, depending on the nature of your enquiry, on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

Where Airtable uses non-essential cookies or comparable technologies when loading the form, these will only be used after the relevant consent has been obtained pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

We retain contact enquiries only for as long as is necessary to process and document them and, where applicable, to manage any resulting business relationship. Statutory retention obligations remain unaffected. Eingefügtes Markdown

10. Affiliate Links and Partner Programmes

eingecheckt.com is financed in part through affiliate partnerships.

Links marked accordingly are affiliate links. If you click one of these links and subsequently make a booking or purchase from one of our partners, we may receive a commission. This does not result in any additional costs for you.

Affiliate partnerships have no influence on our editorial reviews or the eingecheckt Score™. Eingefügtes Markdown

CJ Affiliate

We use the CJ Affiliate network for some of our affiliate partnerships.

For users within Europe, CJ services are provided in particular by Epsilon International UK Ltd, 1st Floor 2 Television Centre, 101 Wood Lane, London W12 7FR, United Kingdom.

If you click an affiliate link provided through CJ, technical and pseudonymised information may be transmitted to CJ. According to CJ, this may include IP address, browser and device information, cookie ID, time of the click, referrer URL, current URL and, where applicable, subsequent transaction information.

This information enables CJ and the relevant advertiser, in particular, to determine which publisher generated a booking or purchase and whether a commission should be attributed.

CJ states that it primarily processes pseudonymised data and uses the information in particular for attribution, billing, statistics and fraud prevention.

Where cookies or comparable tracking technologies are used on our website that are not technically necessary, they are only activated after the relevant consent has been obtained.

CJ may also process data outside the European Union or European Economic Area, particularly in the United States. According to CJ, Standard Contractual Clauses are used for such transfers, among other safeguards. Eingefügtes Markdown

Booking.com

We use affiliate links to offers from Booking.com B.V., Oosterdokskade 163, 1011 DL Amsterdam, the Netherlands.

For our region, the Booking.com affiliate programme is operated, among other channels, through CJ Affiliate.

If you click an affiliate link to Booking.com, you will be redirected to a Booking.com website. From that point onwards, Booking.com processes personal data under its own responsibility and in accordance with its applicable privacy policy.

Booking.com may collect information including access data, the source of the visitor, IP address, device, browser and interactions on its platform, and may use cookies or other tracking technologies.

As a general rule, we do not receive directly identifiable booking data relating to travellers from Booking.com or CJ. Instead, we receive information required to calculate and settle our affiliate commission. Eingefügtes Markdown

Our website contains links to external websites and social networks.

Simply displaying a link does not generally cause data to be automatically transmitted to the respective provider when you visit our website. Only when you click such a link do you leave eingecheckt.com and establish a direct connection with the respective provider.

The operator of the respective external website is generally responsible for any subsequent processing of personal data.

If, in future, we use embedded content, social media plugins, videos, maps or similar external media that transmit data to third-party providers as soon as our website loads, such content will — where required — only be loaded after the relevant consent has been obtained. Eingefügtes Markdown

12. Data Retention

Unless a more specific retention period is stated elsewhere in this Privacy Policy, we retain personal data only for as long as is necessary for the respective purpose of processing.

Where statutory retention obligations apply, particularly under tax or commercial law, the relevant data may be stored for the legally prescribed period.

Once the applicable retention period has expired, the data will be deleted unless there is another legal basis for continuing to process it. Eingefügtes Markdown

13. Legal Bases for Processing

Personal data on this website is processed in particular on the basis of Art. 6(1)(a) GDPR where consent has been given, Art. 6(1)(b) GDPR for pre-contractual or contractual matters, Art. 6(1)(c) GDPR where processing is required to comply with a legal obligation, and Art. 6(1)(f) GDPR where processing is based on legitimate interests.

Where information is stored on or accessed from your device, the requirements of Section 25 TDDDG also apply. Eingefügtes Markdown

14. Your Rights

Under the General Data Protection Regulation, and subject to the respective legal requirements, you have rights including the right to access your personal data, correct inaccurate data, request deletion, restrict processing, receive data in a portable format and object to certain forms of data processing.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, you can contact us at any time at info@eingecheckt.com. Eingefügtes Markdown

15. Right to Object to Processing Based on Legitimate Interests

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims. Eingefügtes Markdown

16. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the General Data Protection Regulation, you have the right to lodge a complaint with a data protection supervisory authority.

The authority particularly responsible for us is:

Thuringian State Commissioner for Data Protection and Freedom of Information (TLfDI)
Häßlerstraße 8
99096 Erfurt
Germany

Postal address:
Postfach 90 04 55
99107 Erfurt

Email: poststelle@datenschutz.thueringen.de

This right to lodge a complaint is without prejudice to any other administrative or judicial remedies. Eingefügtes Markdown

17. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy if our website, the services we use or the applicable legal requirements change.

The current version published on eingecheckt.com shall apply.