Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

WetterWelt GmbH
Schauenburgerstraße 116
24118 Kiel, Germany
Phone: +49 431 97 99 08 0
E-mail: service@wetterwelt.net
Managing Director: Philipp Müggenburg
Commercial register: Amtsgericht Kiel, HRB 6604 KI

For any questions concerning data protection, please contact us using the details above.

2. The Essentials at a Glance

We collect personal data only to the extent required to operate this website, respond to your enquiries and process orders. This site uses no advertising trackers, no analytics services and no social media plugins. Third-party content (map, podcast player) is only loaded after you actively consent.

Depending on the operation, processing is based on Art. 6(1)(a) GDPR (consent), (b) (contract or pre-contractual steps), (c) (legal obligation) or (f) (legitimate interest, e.g. in the secure operation of this site). Each section below states which basis applies.

3. Hosting and Server Log Files

This website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany); the server is located in a data centre in Helsinki, Finland (EU). A data processing agreement (Art. 28 GDPR) is in place with Hetzner.

When you visit this site, the web server automatically processes technical access data (IP address, date and time, page requested, browser identifier, referring page). These log files serve to keep the site running, to diagnose faults and to fend off attacks (Art. 6(1)(f) GDPR) and are automatically deleted after 14 days.

4. Encryption and Security Systems

All data is transmitted with TLS encryption (indicated by the lock symbol in your browser). To protect against attacks we run security software on the server that analyses requests and blocks suspicious traffic – including Wordfence (provider: Defiant Inc., Seattle, USA). This involves processing IP addresses and, in the case of detected attacks, matching them against the provider’s servers; EU standard contractual clauses are in place with Defiant. The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

5. Cookies and Consent Management

We use the consent tool Complianz (Complianz B.V., Netherlands) to manage your cookie choices. Technically necessary cookies are set without consent – these include the cookie storing your cookie decision itself, the language cookie (German/English) and the shop’s session and cart cookies. All non-essential content (see map and podcast below) remains blocked until you consent.

You can change or withdraw your consent at any time via the “Cookie settings” link in the footer of this site.

6. Contact Forms and E-mail

If you contact us via one of the contact forms, we use your details (name, e-mail address, message) exclusively to handle your enquiry (Art. 6(1)(b) or (f) GDPR). Form data is not stored in the website’s database but delivered to us directly by e-mail.

Our e-mail is handled via Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin, Ireland; data processing agreement including EU standard contractual clauses). We delete enquiries once they have been dealt with conclusively, unless statutory retention obligations require otherwise.

7. Online Shop and Customer Account

For orders in our shop we process the data required to perform the contract: name, address, e-mail address, products ordered and payment status (Art. 6(1)(b) GDPR). Our products are delivered digitally; no shipping data is collected. A customer account is only created at your request and can be deleted at any time.

We retain invoice and accounting data in accordance with German commercial and tax law (§ 147 AO, § 257 HGB – up to ten years depending on the type of record) and delete it once the retention periods have expired.

8. Payment via PayPal

Payment is processed via PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg). Card payments, Apple Pay and Google Pay are also technically processed through PayPal. During checkout, the order and payment data required for the transaction is transferred to PayPal (Art. 6(1)(b) GDPR). PayPal’s own privacy statement applies in addition.

9. Invoicing with Lexware Office

We create and manage our invoices with Lexware Office (Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany). Your invoicing data (name, address, line items, amounts) is processed in this accounting system. A data processing agreement is in place with the provider; the legal bases are Art. 6(1)(b) and (c) GDPR (contract and legal obligations).

10. Map Display (OpenStreetMap)

On our contact pages we embed a map from OpenStreetMap (OpenStreetMap Foundation, United Kingdom – the UK is covered by an EU adequacy decision). The map is protected by a two-click solution: only when you click “Load map” is a connection to the OpenStreetMap servers established, transmitting your IP address (Art. 6(1)(a) GDPR). Without that click, no data flows.

11. Podcast Player (Spotify)

In our blog we embed episodes of our podcast via a player from Spotify (Spotify AB, Regeringsgatan 19, Stockholm, Sweden). The player is only loaded once you actively click it and thereby consent (Art. 6(1)(a) GDPR); Spotify then receives your IP address and may set its own cookies. Without that click, no connection to Spotify is established. Alternatively, we link the episodes directly on the common podcast platforms.

12. Weather Widget on the Home Page

The weather data for Kiel on our home page is retrieved from our weather system by our own server and delivered to your browser from there. Your browser does not connect to any third party in the process; no personal data is processed.

13. Fonts

The fonts used on this website are hosted locally on our server. No connection to Google or any other font provider is established when the page loads.

14. Use of AI in Content Creation

Some texts and graphics on this website are created with the support of AI tools. All published content is reviewed by our staff and published under human editorial responsibility. When using this website you do not interact with an AI system, and no automated decision-making within the meaning of Art. 22 GDPR takes place.

15. Newsletter and Mailjet

When you subscribe to our newsletter, we process your email address and information about the subscription and confirmation status. Registration uses a double opt-in process: after submitting the form, you first receive a confirmation email; your address is added to the newsletter list only after you click the link in that email. The legal basis is your consent under Art. 6(1)(a) GDPR.

We use Mailjet, a Sinch Email service, to manage the mailing list and send the newsletter. Mailjet processes the data on our behalf; its data processing agreement forms part of the Mailjet contractual terms. According to the provider, data is stored in data centres in Frankfurt (Germany) and Saint-Ghislain (Belgium). Delivery, opening, click, unsubscribe and bounce events may also be processed when newsletters are sent.

You may withdraw your consent at any time with effect for the future, in particular by using the unsubscribe link included in every newsletter. Unsubscribed and permanently undeliverable addresses are retained with a suppression status to ensure that no further marketing emails are sent. Further information is available in the Mailjet Privacy Notice.

16. Your Rights

You have the right at any time to obtain information about the data we store about you (Art. 15 GDPR), and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may withdraw any consent you have given at any time with effect for the future.

Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interest.

The competent supervisory authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany – you may lodge a complaint there if you believe we are processing your data unlawfully.

17. Version and Changes

This privacy policy is effective as of August 2026. We will update it whenever the technology of this website or the legal situation changes; the version published here applies.