Privacy

In short. A moment you post is public by design, with its exact location. Your email address is never shown and never passed on. This site runs on servers in the EU; the one mailbox we read is in Switzerland. You can see, export and delete everything yourself.

Who is responsible

Fabian Schlarmann (postal address in the imprint) · hello@vinocappuccino.me, the controller (Art. 4 (7) GDPR). A data protection officer is not required (Art. 37 GDPR, § 38 BDSG). No advertising profiles, no personalised advertising, no ad networks or trackers, no sale of data, and no decision with legal or similarly significant effect on you is made by software alone (Art. 22 GDPR). You are not obliged to give us anything; without an email address you cannot post.

What we process, and why

Visiting the site. Our server processes your IP address, the page, the time and what your browser sends with each request, such as its type, to deliver the site and to fend off abuse. The log keeps the IP shortened and is deleted after 7 days. Map, fonts and photos come from our own servers; no third party is contacted. Basis: Art. 6 (1) (f) GDPR.

Cookies. Only one, strictly necessary: it keeps you logged in, and it needs no consent. Basis: Art. 6 (1) (b) GDPR.

A moment you post. The photo (its metadata removed), the card, the drink, an optional caption, the label, the time and the exact location you were at. All of it is public by design: on the map, in the feed, on the boards and at its own address, for anyone, and search engines may index it. Whatever your photo reveals about you, such as your health, beliefs or origin, you make public yourself by posting it (Art. 9 (2) (e) GDPR). Basis: Art. 6 (1) (b) GDPR, the service you ask for; you end it by deleting the moment. The maps button on a moment hands its location to Apple or Google Maps on your device, only when you press it.

Keeping the site fair and clean. A new moment is compared with your moments just before and after it: if it lies farther away than any plane could have taken you in the time between them, it is not accepted. Of every photo we keep a fingerprint of the file (its hash), so that a photo removed for what it shows cannot simply be posted again. If we block an address so that the block outlives its account (terms, clause 8), we keep a keyed fingerprint of the address (not the address), the ground and the end date, so that the block holds if the address comes back. Basis: Art. 6 (1) (f) GDPR, our interest in fair boards and in keeping unlawful content off the site.

People in your photo. With the tick you confirm that anyone recognisable in your photo is an adult and agreed to appear here; children may not appear at all. We cannot inform them, because we do not know who they are (Art. 14 (5) (b) GDPR). Anyone in a photo without having agreed can report it from the moment's page, and we remove it, as we remove any photo that shows a child. Basis for our part: Art. 6 (1) (f) GDPR.

Your email address. To log you in by code, to tie every moment to its owner, to keep the limits and to send the service mails below. With it we keep the time of your last login, to protect your account and to be able to show what happened, and for an hour a keyed fingerprint of the network a code was asked from, so that codes cannot be sent to strangers in bulk. It is never shown and never passed on. A moment posted without being logged in stays offline until the link in the mail confirms the address. Basis: Art. 6 (1) (b) GDPR; for the last login and the fingerprint Art. 6 (1) (f) GDPR.

Service mails. Login codes, receipts, confirmations, notices about reports, warnings, removals, restrictions and blocks, about deleting, about changes to these texts, a warning before maintenance, and the streak reminder (below). Basis: Art. 6 (1) (b) GDPR; for the maintenance warning Art. 6 (1) (f) GDPR.

Your username, the board and your page. We give you a username when your account begins, at your first login or your first moment; you can change it at any time. You appear on the People board with your score, and your username shows on your moments and your own page with all of them can be found — both from the start, until you switch them off; each switch is your objection (Art. 6 (1) (f) GDPR, Art. 21 GDPR). Our interest, and that of everyone using the site: moments that have a face, and people one can follow. With your page switched off, your moments stay public but carry no username. An Instagram or TikTok handle shows only if you switch it on (consent, Art. 6 (1) (a) GDPR).

Hearts and the streak reminder. Which moments you gave a heart is stored, so the limit holds; publicly only the count shows. The streak reminder is part of the streak (terms, clause 9): one mail three hours before your streak would end (9 p.m. on the day after your last moment, in that place's time), with your streak, when it ends, a link to post and the ways to switch it off, and never advertising. It is on from the start and off with the switch in your settings or the link in every reminder. Basis for both: Art. 6 (1) (b) GDPR. You can object to the reminder at any time, at no cost beyond your usual connection.

Hearing from us. Only if you switch it on yourself: now and then a mail with news about VinoCappuccino, links to moments on the site, and offers and deals from us and our partners around coffee and wine (cafés, bars, wineries, roasteries, food, travel and accessories). Off again with the switch or the link in every such mail. Basis: your consent (Art. 6 (1) (a) GDPR).

Statistics. Counts and averages per place and the boards, computed from all moments; how many pages were visited each day; and how many moments were kept, confirmed by their link or left unconfirmed each day — all as plain numbers without a cookie, an identifier or a profile; they point to no one. Our interest: knowing how the site is used. Basis: Art. 6 (1) (f) GDPR.

Advertising and affiliate links. The site and the mails about the project may carry advertising, sponsored content, deals and affiliate links, for example for coffee and wine, always marked as such. We place them ourselves: no ad network, no tracking, and nothing about you goes to an advertiser. When you click an affiliate link, the partner learns that you came from us, so that a purchase can be credited to us; on their site their privacy notice applies. Service mails never carry advertising.

Reports. The reporter's name, an email address confirmed by a code (or the one a report was mailed from), the reason, a good-faith statement, a shortened IP and the time, to handle notices under the Digital Services Act (Art. 16 and 17 DSA). The person who posted never learns who reported. A moment removed on an authority's order as terrorist content is kept with the data about it for six months, so that the authority can still review it. Basis: Art. 6 (1) (c) GDPR, our legal duties under Art. 16 and 17 DSA and for terrorist content; for the shortened IP Art. 6 (1) (f) GDPR, our interest in stopping abusive reports.

Our Instagram account. When you visit @vinocappuccino.me or write to us there, Meta Platforms Ireland Ltd. processes your data under its own privacy policy and may transfer it to the United States (EU–US Data Privacy Framework, Art. 45 GDPR). For the statistics Instagram shows us about our account (Insights), Meta and we may be jointly responsible (Art. 26 GDPR); we see only totals. What you send or post to us there, we use to answer you. Basis: Art. 6 (1) (f) GDPR, our interest in being reachable there. Requests about Instagram's processing are best sent to Meta; you can also write to us, and we pass them on.

Writing to us. What you send to hello@vinocappuccino.me, through the contact form, by letter or with the withdrawal form (a name you give there goes only into its receipt), or tell us by phone (with your number), we use to answer you and to handle what you ask. Basis: Art. 6 (1) (b) GDPR where it concerns your account, otherwise Art. 6 (1) (f) GDPR, our interest in answering.

Records of what you agreed to. For the tick that publishes a moment, for every switch in your settings, for hearing from us and for accepting changed terms, we keep the text you saw, its version, the time and a shortened IP (the IP for 7 days), so that we can show what was agreed and defend against claims. Basis: Art. 6 (1) (f) GDPR; for a consent also Art. 7 (1) GDPR.

The operator's access. Only the operator can open the admin panel; every change made there is logged, so that every intervention can be traced. Basis: Art. 6 (1) (f) GDPR.

Who else receives data

The public sees what you post and what you switched on. Our processors under Art. 28 GDPR, with data centres in the EU: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany (server, photo storage, backups) and Scaleway SAS, 8 rue de la Ville l'Évêque, 75008 Paris, France (sending mail). Also our processor: Clear-Media UG (haftungsbeschränkt), Europaring 90, 53757 Sankt Augustin, Germany, which receives and scans letters to our postal address and passes on messages from the contact form named in the imprint. Also our processor: Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland, which keeps our mailbox, where mail you write to us lands; Switzerland has an adequacy decision (Art. 45 GDPR). Also: sipgate GmbH, Gladbacher Straße 74, 40219 Düsseldorf, Germany, which carries calls to our phone number. Advertising partners receive nothing from us; you reach them only by clicking their link. Your moments are not posted on any social media account of ours. Apple or Google receive a location when you press the maps button; authorities and courts when the law obliges us. Nobody else.

How long

A moment: until you delete it; it leaves the site at once and is erased 14 days later, so that a report about it can still be decided. Your account: erased 14 days after you delete it, locked in between; then only a proof of the erasure stays for three years — its dates, who asked for it, the numbers of your moments, the page identifier your account had and, instead of your address, a keyed fingerprint of it that names nobody unless someone types your address (Art. 17 (3) (e) GDPR; basis: Art. 6 (1) (f) GDPR, our interest in proving the erasure). A moment never confirmed by its mail link: one day. Login codes: valid 15 minutes, kept no longer than an hour; so is a keyed fingerprint of the network a code was asked from, which caps the codes one sender can ask for, and of an address a withdrawal receipt went to, which caps the receipts. A login: 30 days. Server logs and shortened IPs: 7 days. Reports: one year. A moment removed as terrorist content on an authority's order: six months, longer only if the authority or a court asks. The fingerprint of a photo: with its moment; of a photo taken down for what it shows, five years, so that the same file cannot be posted again. A block beyond its account: until we lift it, at most three years, five for the plainly criminal. The operator's log: one year. Mail, letters and calls to us: as long as the matter needs, at most three years after it is closed. Records of what you agreed to: for a moment, as long as it exists and at least three years from the tick, while claims can still be raised; for your account and its switches, until the account is erased. Backups: encrypted, 31 days, used only to restore the service.

Your rights

Access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR), portability (Art. 20 GDPR) and withdrawal of a consent at any time (Art. 7 (3) GDPR), without affecting what happened before. Most of it you do yourself in your settings: see, export, delete. For the rest, write to hello@vinocappuccino.me. You may complain to a supervisory authority (Art. 77 GDPR), for us the Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

Your right to object (Art. 21 GDPR). Where we rely on our legitimate interest, you can object at any time on grounds relating to your situation. For the People board and your page, the switch in your settings is the objection and takes effect at once; for anything else, write to us. You can object to the streak reminder at any time (Art. 21 (2) GDPR), with the switch in your settings or the link in every reminder.

Minors

The service is for adults: 18 and over, and of legal drinking age where you live if that is higher. When we learn that someone younger posted, we delete it.

Security

We protect your data with technical and organisational measures according to the state of the art (Art. 32 GDPR).

Changes

We change this notice when the service or the law changes; a change in what we do with your data we mail to every account.