Privacy Policy

What this version of the site actually does with your data.

Who is responsible

The controller for this website is Niklas Mezger, Franz-Joseph-Str. 11, 80801 Munich, Germany.

Email: marketing@tropitecture.net

The company details and the legal notice stay on a separate page: Imprint.

Hosting

These public pages are static files. The web host that delivers them can see ordinary connection data in server logs: your IP address, the date and time, the address you requested, and your browser's user agent. That processing is needed to show you the page and to keep the server secure (Art. 6 (1) (f) GDPR).

The host for this export is All-Inkl (Neue Medien Münnich, Germany). We do not run a separate analytics product on those logs.

Typefaces are included with the site files. Your browser does not call Google Fonts when it loads a page.

Cookies and your choice

German law (TTDSG § 25) requires consent before we store or read information on your device, unless that step is strictly necessary. The banner asks for that consent. Decline and "no choice yet" both keep optional tools off.

tropitecture_consent

  • First-party cookie, set by this site only.
  • Value: accepted or declined.
  • Lifetime: about 180 days.
  • Path: the whole site. SameSite=Lax. Secure when the page is served over HTTPS.
  • Purpose: remember this choice so the banner can stay hidden and so we know whether optional tools may load.

This cookie is essential for remembering the choice. It is not used for advertising or for measuring visits. You can also delete it in your browser. After it expires or is deleted, the banner shows again.

Change or withdraw your choice

Every public page has a Cookie settings link in the footer. It deletes tropitecture_consent and opens the banner again. Accept and Decline are both stored. Only Accept loads the optional tools below. Withdrawing consent does not affect use that already happened. Cookie settings also stops Google Analytics and clears its _ga and _ga_* cookies on this domain. Cookies that Expedia, YouTube, or Google already stored on their own domains stay until you clear them in your browser. We cannot delete those for you.

Expedia search widget

After you accept, the home page can load Expedia Group's search widget. The script is eg-widgets.js from creator.expediagroup.com. It draws a stays and flights search and supports our affiliate attribution. Expedia can set its own cookies and can receive technical data, including your IP address. Expedia Group is based in the United States, so that data can be processed there.

We add that script only after Accept (Art. 6 (1) (a) GDPR and TTDSG § 25 (1)). If you decline, or you have not chosen yet, the search box is a short note and the script is not added. Choosing Cookie settings again removes the widget until you accept once more.

Embedded video and maps

Some articles include YouTube videos. The player is not requested until you accept cookies. After Accept, the browser loads youtube.com/embed. YouTube (Google) can set cookies and can receive your IP address. If you open Cookie settings and do not accept again, the player is removed.

Stay pages can show a map of OpenStreetMap raster tiles (tile.openstreetmap.org) only after Accept. Those tiles can receive your IP address. The map is drawn from images, so it does not need WebGL. "Get Directions" is a normal link to Google Maps. It runs only after you click it, and Google may then set its own cookies. We do not embed Google Maps.

Contact and stay submissions

The contact form sends your name, email address and message from this website to our mail server, which delivers them to marketing@tropitecture.net. The website does not store them in a database. The stay submission form opens your own email app with a draft addressed to the same address, and nothing is stored here unless you send that email. The server keeps a salted hash of your IP address for rate limiting. It is deleted with the first form request after one hour.

If you send it, we receive it like any other email and use it to reply or to review a stay suggestion (Art. 6 (1) (b) GDPR when it is about a request you asked us to handle, otherwise Art. 6 (1) (f) GDPR). You can also write to marketing@tropitecture.net directly. We keep the correspondence for as long as we need it for that conversation, then delete it unless a legal duty says otherwise.

Google Analytics

After you accept, the site can load Google Analytics so we can see which pages are visited. The script is gtag.js from www.googletagmanager.com, using the tag GT-5TJSDV7. It records a page view when a page opens and when you move to another page on this site. Google Signals and ads personalisation stay off. IP anonymisation stays on.

The provider is Google Ireland Limited, with Google LLC in the United States. A visit can be transferred to the United States under the EU-US Data Privacy Framework.

On this domain the cookies are _ga and _ga_*. The legal basis is your consent (Art. 6 (1) (a) GDPR and TTDSG § 25 (1)). How long Google keeps the data is the retention period set in that Google Analytics property.

Cookie settings withdraws that consent, stops the tag on later pages, and clears the _ga cookies stored on tropitecture.net. If you decline, or you have not chosen yet, the script is not requested.

Not used on this version

This version does not load any of the following. Older wording that listed them does not apply here:

  • Google AdSense
  • Google Maps embeds
  • Google reCAPTCHA
  • Instagram plugins or Instagram embeds (profile links, including Follow on Instagram, are normal links)
  • Mailchimp or any newsletter tool (the homepage says the newsletter is coming soon; there is no signup form and no email addresses are collected for it)
  • Spotify embeds

Your rights

You can ask what personal data we hold about you, ask us to correct or delete it, ask us to restrict or hand it over, and object to processing that is based on legitimate interests. You can withdraw cookie consent at any time with Cookie settings, or by email. You can also complain to a supervisory authority. For a private controller in Bavaria that is the Bayerisches Landesamt für Datenschutzaufsicht (lda.bayern.de).

Write to marketing@tropitecture.net for any of these requests. Email is not a fully private channel.