Skip to content

Last updated: 27 October 2026

Summary: We set no advertising or tracking cookies and use no third-party analytics services. For statistics we run our own cookie-free solution on our server in Germany. Requests for the open data on data.trakora.com are counted without IP addresses. Data from the contact form is only used to answer inquiries.

Controller

The party responsible for processing personal data on this website is:

Trakora UG (haftungsbeschränkt)
Grenzstraße 45, 26382 Wilhelmshaven, Germany
Email: [email protected]

Under Art. 37 GDPR and § 38 BDSG we are not required to appoint a data protection officer.

What data we process

  • Connection data: when the website is accessed, the IP address and user agent are processed technically to deliver the pages and to protect the website against attacks. They are not combined into profiles.
  • Statistics: aggregated, non-personal figures on how the website is used (details under “Statistics”).
  • Inquiries: name, email address, subject and message when the contact form is used or an email is sent to us.
  • Art. 6(1)(b) GDPR: answering inquiries and pre-contractual measures.
  • Art. 6(1)(f) GDPR: legitimate interest in delivering the website securely and quickly and in measuring its reach with as little data as possible.
  • Art. 6(1)(c) GDPR: compliance with legal obligations, such as retention periods.

Hosting and delivery

The website and our statistics run on a server of netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. A data processing agreement under Art. 28 GDPR is in place with netcup.

Cloudflare, Inc. (USA) sits in front of the website to protect it against attacks and to deliver it quickly. In doing so, Cloudflare processes connection data such as the IP address and user agent. The data processing agreement under Art. 28 GDPR is part of Cloudflare’s terms of service. Cloudflare is certified under the EU-US Data Privacy Framework, and this agreement also contains the European Commission’s standard contractual clauses under Art. 46 GDPR.

We do not keep personal server log files. Only anonymized, aggregated figures may be retained for up to 14 days.

Statistics

To measure reach we use Umami, an open-source solution that we run ourselves on our server in Germany. No data is passed on to third parties.

Umami works without cookies and stores no IP addresses and no profiles. Only aggregated values are recorded: page visited, page title, referring page, browser, operating system, device type, screen size, browser language and approximate region at country level. Query parameters and fragments in addresses are not recorded.

So that several page views of one visit can be counted together, Umami creates an anonymous identifier from a hash of the website, IP address, user agent and a random value that changes every month. The IP address is only used for this calculation and is not stored. Once the random value has changed, a visit can no longer be linked to earlier visits.

In addition, we anonymously count how often a contact button is clicked (with where it was placed, for example in the header), how often the contact form is sent successfully and how often a download link on the holiday calendar page is clicked (with the file name). These counters contain no names, no email addresses and no message content.

If “Do Not Track” is enabled in the browser, the statistics are not loaded. The legal basis is our legitimate interest in measuring with as little data as possible (Art. 6(1)(f) GDPR). As no cookies are set, no IP addresses are stored and no profiles are created, we do not ask for consent. We still show a one-time notice on the first visit.

Holiday calendar (data.trakora.com)

The files of the holiday calendar are served from data.trakora.com, also from our server at netcup with Cloudflare in front. To see how the open data is used, the server logs every request without the IP address: time, request method, file, status and the program identifier (user agent), for example “duckdb”, “dlt” or that of a browser. From this we count downloads, syncs and queries per file and program. It cannot be linked to individual people. The log is deleted after twelve months. The legal basis is our legitimate interest in knowing how the service is used (Art. 6(1)(f) GDPR).

The map “Who has the day off?” loads its data from this website and stores nothing in the browser. The selected date and municipality are only part of the page address.

Cookies and local storage

We set no advertising, marketing or tracking cookies. Only the following entries are stored in the browser:

Name Type Purpose Duration
cf_clearance Cookie (Cloudflare) Only set when Cloudflare runs a security check; remembers its result. 30 minutes by default
__cf_bm Cookie (Cloudflare) Only set when Cloudflare’s bot protection is active; helps detect automated access. 30 minutes
trakora_theme Local storage Stores the chosen color scheme (light or dark). until deleted
trakora_privacy_seen Local storage Remembers that the statistics notice has been seen so it does not appear again. until deleted

The language is not stored: it follows from the domain (trakora.com in English, trakora.de in German).

You can delete cookies and local storage at any time in your browser settings. The statistics notice will then appear again.

Contact form and email

Anyone who writes to us through the contact form or by email sends us their name, email address, subject and message. Form entries are not stored in a database; they are sent as an email to our mailbox at netcup. We use them only to answer the inquiry (Art. 6(1)(b) GDPR).

The data is deleted once the inquiry has been fully dealt with, at the latest after six months, unless statutory retention obligations apply.

Fonts

The fonts on this website are loaded from our own server. No connection to external font services is made.

Our website contains plain links to our profiles on LinkedIn and GitHub and to the public repository of the holiday calendar on GitHub. Data is only transferred to the platform once a link is clicked. From then on, the platform’s privacy policy applies.

Your rights

  • Access to the stored data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Complaint to a supervisory authority (Art. 77 GDPR), for example the data protection commissioner of Lower Saxony (Landesbeauftragter für den Datenschutz Niedersachsen)

An informal message to [email protected] is enough for any request.

Data security

All connections to this website are encrypted with TLS. We take technical and organizational measures in line with the state of the art to protect data against loss, manipulation and unauthorized access.

Changes

We update this privacy policy when the legal situation or our services change. The version published here applies.