Privacy Policy

This privacy policy explains how personal data is processed when you use the website tourtagebuch.online and the app and web application Tourtagebuch (together “Tourtagebuch”). It applies in addition to our imprint.

1. Controller

You can contact our data protection officer at: Richard Schaffenroth, richard.schaffenroth@ilse-software.de.

2. Principles

We process personal data solely within the limits of applicable law (GDPR). Tourtagebuch is designed to collect as little data as possible: there is no advertising, no tracking for advertising purposes and no public feed. Your tour data is private and visible only to you.

3. Hosting and storage location

Data is stored on a server operated by Hetzner Online GmbH, Nuremberg data center (Germany). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The database (PostgreSQL) is hosted in Germany.

4. Accessing the website (server log files)

When you access the website, information is automatically transmitted to the server and temporarily stored in log files (including IP address, date and time, page requested, volume of data transferred, browser type). This serves the secure and stable operation of the service. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log files are deleted after 7 days.

5. User account and sign-in

Using Tourtagebuch requires a user account. We process the data you provide:

• E-mail address and password (stored in encrypted form)
• First name and last name

The legal basis is Art. 6(1)(b) GDPR (performance of the usage contract). Account data is stored for as long as your account exists.

6. Data processed by the app

The app processes the following data to provide its features. Processing is based on performance of the contract (Art. 6(1)(b) GDPR); access to device functions only takes place after you grant permission via the operating system prompt.

6.1 Location data (GPS) – including in the background

When you record a tour, the app captures your location via GPS to determine distance, speed and route. At your request, recording continues while the display is off or the app is in the background, so that the route remains complete. Location data is only collected during an active recording and stored as part of your tour. No location tracking takes place without a started recording.

6.2 Motion sensors (steps, elevation)

To record steps and elevation gain during a recording, the app accesses the device’s motion sensors (pedometer and barometric altimeter). This data is assigned to the respective tour.

6.3 Camera and photos

You can add photos to your tours. For this, the app accesses the camera or selected images. Optionally, photos taken in the app can additionally be saved to your device’s photo library; you enable this yourself in the settings.

6.4 Microphone and speech recognition (dictation)

For voice notes and dictating remarks, the app uses the microphone. Speech-to-text conversion is performed by the operating system’s speech recognition. Audio data may be transmitted to the respective operating system provider for processing (Apple on iOS, Google on Android). The privacy policies of Apple and Google apply additionally.

6.5 Map display

To show routes on a map, map tiles are loaded directly from the servers of OpenStreetMap. In doing so, your IP address is transmitted to OpenStreetMap. Map data: © OpenStreetMap contributors.

7. Payment processing

For payment processing we use the provider Stripe Payments Europe, Ltd. The data required for payment is transmitted to them. The legal basis is Art. 6(1)(b) GDPR. We do not store payment data (e.g. card numbers).

8. Disclosure of data

Your data is not disclosed to third parties, except to carefully selected processors (e.g. hosting, payment provider if applicable) under agreements pursuant to Art. 28 GDPR, or where we are legally required to do so. There is no disclosure for advertising purposes.

9. Retention and deletion of your account

We store your tours and account data for as long as your account exists. You can delete your account and all associated data at any time – in the app or web application under “Profile → Delete account”, or by e-mail to info@ilse-software.de. After deletion, your data is removed unless statutory retention obligations apply.

10. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). To exercise these rights, simply send a message to info@ilse-software.de.

You also have the right to lodge a complaint with a data protection supervisory authority, namely the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.

11. Data security

Transmission is encrypted via HTTPS/TLS. Passwords are not stored in plain text but as a cryptographic hash.

12. Changes to this privacy policy

We update this privacy policy whenever changes to Tourtagebuch or the legal situation make it necessary. The version published on this page applies.

Last updated: 15 July 2026. In case of doubt, the German version prevails.