Downhill24h← Back to homepage

Privacy Policy

Last updated: November 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Downhill24h, c/o Tobias Hannig
Schulstr. 42-3, 70771 Leinfelden, Germany
Phone: +49 (0)171 - 498 89 05
Email: hello@downhill24h.com

2. Hosting and server log files

This website is hosted by INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany. When you visit the site, the web server processes technically necessary data and stores it in log files: IP address, date and time of the request, requested file or URL, amount of data transferred, status code, browser and operating system information (user agent) and, where applicable, the previously visited page (referrer). The storage period depends on the hosting provider and is usually 14 to 30 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in defending against attacks. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

3. Cookies, local storage and consent management

This website uses technically necessary storage only to remember your cookie choice. When you accept or decline, we store this decision (“granted” or “denied”) in your browser's local storage. No cookies are set for this purpose, and the entry contains no personal data. The legal basis is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR. We have a legitimate interest in being able to respect your choice.

All other cookies, in particular those of Google Analytics (see section 4), are only set if you consent. You can change or withdraw your choice at any time using the “Cookie settings” link in the footer of every page.

Fonts are not loaded from external servers but come from your device (system fonts). Images and other files are served from our own server.

4. Google Analytics 4 (web analytics)

If you consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (for example “_ga” and “_ga_*”) and similar technologies to analyse how you use our website, such as pages viewed, time on site, approximate location (city or region level), device and browser type, referring website and clicks on outbound links.

The analysis is carried out in pseudonymised form. In Google Analytics 4, IP addresses are not logged or stored. We have deactivated the Google signals feature and personalised advertising features, and we do not use Google Analytics for advertising. We use the evaluation to improve our website and to understand the reach of our content.

Legal basis: Your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Google Analytics is only loaded after you click “Accept”. Before that, no data is sent to Google and no analytics cookies are set.

Data transfer: Google may transfer data to Google LLC in the USA and process it there. Google LLC is certified under the EU-US Data Privacy Framework, which provides an adequacy decision of the European Commission. In addition, we have concluded the data processing terms offered by Google pursuant to Art. 28 GDPR.

Retention: Event data in our Google Analytics property is retained for 2 months and then deleted automatically.

Withdrawal: You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the footer and choosing “Decline”. The Google Analytics cookies are then deleted from your browser. Further information: support.google.com/analytics/answer/6004245 and Google's privacy policy at policies.google.com/privacy.

5. Contact form

If you write to us via the contact form, we process the data you enter: name, email address, optionally company or channel, type of inquiry and your message. This data is sent to us by email and used solely to process your inquiry. We do not pass it on to third parties.

The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a collaboration or contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). Fields marked with * are mandatory; without them we cannot process your inquiry. We delete your data once your inquiry has been fully handled and no statutory retention obligations (e.g. under commercial or tax law) apply.

To protect against misuse (spam), we store for no longer than one hour a hash value of your IP address that cannot be reversed, together with timestamps of your submissions, in order to limit the number of messages per hour. The legal basis is Art. 6(1)(f) GDPR. Please note that emails are not always transmitted in encrypted form over the internet.

6. Contact by email or phone

If you contact us by email or phone, we process your details to handle your inquiry on the basis of Art. 6(1)(b) or (f) GDPR. Deletion takes place as described in section 5.

7. Instagram feed

On our homepage we show the latest posts from our Instagram channel @downhill24h. The posts are retrieved server-side via the official interface (Instagram API) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The images are fetched by our server and cached on our own server. When you open our site, your browser therefore does not connect to Instagram or Meta, and your IP address is not transmitted to Meta.

The legal basis for displaying the feed is Art. 6(1)(f) GDPR (presentation of our public profile). The server-side retrieval only concerns public content of our own account. This may involve a transfer to Meta servers in the USA; Meta is certified under the EU-US Data Privacy Framework.

If you click a post or the "Follow @downhill24h" button, you leave our site. Instagram's and Meta's privacy policies then apply: privacycenter.instagram.com/policy.

8. External links

Our site contains links to external services (e.g. Instagram posts). When you click such a link, your IP address is transmitted to the respective provider. We have no influence on the data processing there.

9. Your rights

You have the following rights with regard to your personal data:

You can withdraw any consent you have given at any time with effect for the future. To do so, simply write to hello@downhill24h.com.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

11. Encryption

For security reasons, this site uses SSL/TLS encryption (recognisable by "https://" in the address bar).

12. Changes

We will update this privacy policy if the website or the legal situation changes. The version published here applies.