Privacy Policy
Last updated: 21 September 2026
1. Controller
The controller responsible for the processing of personal data on Nachbaria is:
Mischa Skyda
Fehrsstr. 1A
25421 Pinneberg
Germany
Email: info@nachbaria.de
2. General information about data processing
The freely accessible content of Nachbaria can be used without registration. A user account is required for paid features.
Technically necessary connection data are processed when the website is accessed. Additional personal data are processed when you use a map or location function, contact Nachbaria by email or via the contact form, create a user account, purchase a paid offering, or consent to Google Analytics.
Personal data are processed only where there is a legal basis under the General Data Protection Regulation. Information is stored on or accessed from your device in accordance with Section 25 TDDDG.
Nachbaria does not use solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.
No externally hosted fonts or additional external image services are used.
3. Hosting, delivery and backend
3.1 Cloudflare
The website is hosted by Cloudflare and delivered through the Cloudflare network (hosting, content delivery network and protection against attacks). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to the website are routed through Cloudflare servers; this involves processing in particular the IP address, requested address, date and time, browser and device information and the referrer URL. To detect automated attacks, Cloudflare may set technically necessary security cookies (see section 8). The legal basis is Article 6(1)(f) GDPR; the legitimate interest lies in delivering the website securely and reliably. Cloudflare is certified under the EU-US Data Privacy Framework.
3.2 Supabase
Nachbaria uses Supabase as its database and backend service, including server functions and sign-in. The provider is Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992. The project is hosted in West EU, Ireland (eu-west-1). When your browser requests district or map data, technical data such as IP address, request time, API endpoint, browser/header information, response status and error or abuse-detection information may be processed. Logs available to Nachbaria are normally deleted after seven days unless needed for a technical or security incident. The legal basis is Article 6(1)(f) GDPR.
4. Map and location functions
Nachbaria uses the locally integrated open-source Leaflet library to display interactive maps. Map content and search results are loaded from external providers. When map tiles load, your browser may transmit IP address, requested tile, map area, date and time, browser information and referrer URL.
4.1 OpenStreetMap Germany
The standard map view is provided through OpenStreetMap Germany, operated by FOSSGIS e. V., Bundesallee 23, 10717 Berlin, Germany. The legal basis is Article 6(1)(f) GDPR.
4.2 MeMoMaps
When you select the public-transport view, map tiles are loaded from MeMoMaps, Melchior Moos, Lukasgasse 4, 53347 Alfter, Germany. The legal basis is Article 6(1)(f) GDPR.
4.3 Esri
Nachbaria uses Esri for the satellite map view, address and place searches, geocoding and reverse geocoding. Search terms, addresses or coordinates may be transmitted to Esri. Esri's EU representative is Esri R&D Center Stuttgart GmbH, Friedrichstraße 14-16, 70174 Stuttgart, Germany. The legal basis is Article 6(1)(f) GDPR.
4.4 Device location
Nachbaria can use your device's location only when you actively select the location function and grant permission. Precise coordinates may be processed and transmitted to Esri for reverse geocoding. Coordinates are not permanently stored in a visitor database. The legal basis is Article 6(1)(a) GDPR.
5. Contact
5.1 Email
When you contact Nachbaria by email, the information in your message is processed, including your email address, subject, content, date and time, attachments and other voluntarily provided information. Emails sent to info@nachbaria.de are received by the forwarding service Cloudflare Email Routing (Cloudflare, Inc., see section 3.1) and forwarded to a Gmail mailbox. The provider of Gmail for users in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Replies are sent from this mailbox via the email delivery service Eusend (Bjørnerås Labs, org. no. 938 162 336, Norway; processing on servers in Germany); open and click tracking is disabled.
5.2 Contact form
When you use the contact form, your email address, your message, the selected topic and, if provided, your name and the link to the affected page are transmitted. The message is received by a server function at Supabase (section 3.2), delivered by email to info@nachbaria.de via Eusend and then forwarded as described in section 5.1. The form content is not stored in the database. To prevent automated abuse, technical data such as the IP address may be processed briefly; no external CAPTCHA service is used.
5.3 Legal basis and retention
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Article 6(1)(f) GDPR; the legitimate interest lies in responding to your enquiry. Your message is deleted once it is no longer needed to handle your enquiry and no statutory retention obligations apply. Where such obligations exist (for example under Section 147 of the German Fiscal Code, AO), the message is kept for their duration.
6. User account and sign-in
A user account is required for paid features. Sign-in works without a password, using a one-time code sent to your email address. The data processed are your email address, a user ID, the times of registration and sign-in, session data, technical data such as the IP address, and information about your access to paid features (for example its term).
Account management and sign-in are provided by Supabase (section 3.2). The emails containing one-time codes are sent via Eusend (Bjørnerås Labs, Norway; processing on servers in Germany); as with all emails sent via Eusend, open and click tracking is disabled. After sign-in, a session token is stored in your browser’s local storage (section 8).
The legal basis is Article 6(1)(b) GDPR. Account data are stored for as long as your user account exists. You can request the deletion of your account at any time; data subject to statutory retention obligations are kept until those obligations expire.
7. Payment processing
Paid offerings are processed by the payment service provider Stripe. The provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Payment takes place on a payment page provided by Stripe. Stripe processes in particular your name, email address, billing address where applicable, payment details (for example card or bank details), amount, time and information for fraud prevention.
Nachbaria does not receive complete payment details, only the information required to perform the contract, such as payment status, selected product, amount, email address and billing details.
The legal bases are Article 6(1)(b) GDPR (performance of the contract) and Article 6(1)(c) GDPR (statutory retention obligations). For its own purposes, such as fraud prevention and compliance with regulatory obligations, Stripe acts as an independent controller; details can be found in Stripe’s privacy policy at stripe.com/privacy. Stripe may also process data in the USA; such transfers are based on the EU-US Data Privacy Framework or Standard Contractual Clauses. Invoice and payment data are retained for the statutory retention periods (Section 147 AO).
8. Cookies and local storage
Nachbaria uses technically necessary cookies for requested settings and privacy choices. The nachbaria_language_preference cookie stores the selected language for up to twelve months. The nachbaria_cookie_consent cookie stores your cookie choice, either necessary or all, for up to twelve months.
When you sign in, a session token is stored in your browser’s local storage until you sign out or the session expires. Cloudflare may set technically necessary security cookies (for example __cf_bm) to defend against automated attacks. On Stripe’s payment page, Stripe sets its own cookies under its own responsibility.
The legal basis is Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR.
9. Google Analytics 4
With your consent, Nachbaria uses Google Analytics 4 by Google Ireland Limited. Analytics helps understand use of the website and improve content, navigation and usability. It is activated only after explicit consent.
Data may include pages viewed, visit time and duration, approximate region, referrer and campaign information, browser, operating system, device type, screen size, random client and session identifiers, scrolls, outbound links, internal searches, downloads, map/district/filter interactions, city/language selections and other configured events. Enhanced Measurement is enabled. Google Signals, Google Ads linking and personalised advertising are disabled. Google Tag Manager is not used.
Analytics cookies may include _ga and _ga_V4H5413TM8, retained for up to two years. User-level and event-level data are retained in Google Analytics for two months. Legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Consent can be rejected or withdrawn at any time through the cookie settings link.
10. Recipients and international transfers
Depending on the function used, data may be disclosed to Cloudflare, Supabase, Eusend, Stripe, Google, FOSSGIS e. V., MeMoMaps, Esri, authorities where legally required, and legal, tax or professional advisers where necessary. Some providers may process data outside the EEA on the basis of adequacy decisions, the EU-US Data Privacy Framework, Standard Contractual Clauses or another recognised transfer mechanism.
11. Provision of personal data
There is no statutory or contractual requirement to provide personal data to Nachbaria. Certain technical connection data are required to deliver the website. Without an email address, Nachbaria cannot respond to an enquiry sent by email or via the contact form. A user account requires an email address, and purchasing a paid offering additionally requires the details needed for payment. Without location permission, the location function cannot be used. Google Analytics consent is voluntary.
12. Your rights
Subject to legal requirements, you have the right of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a data-protection supervisory authority. Requests may be sent to info@nachbaria.de.
13. Right to lodge a complaint
You may complain to a data-protection supervisory authority. The supervisory authority responsible for Nachbaria is the State Commissioner for Data Protection of Schleswig-Holstein, Independent State Centre for Data Protection Schleswig-Holstein - ULD, Holstenstraße 98, 24103 Kiel, Germany. Email: mail@datenschutzzentrum.de. Telephone: +49 431 988-1200.
14. Data security
Nachbaria uses appropriate technical and organisational measures to protect personal data. The website is generally transmitted via HTTPS, but complete security of internet transmission cannot be guaranteed.
15. Changes to this Privacy Policy
This Privacy Policy may be updated when functions, service providers or legal requirements change. The current version is available on this page.
In the event of discrepancies between the language versions, the German version is authoritative.