PRIVACY
Privacy Policy
This policy explains which personal data is processed when you use BergMe, for what purpose, and on which legal basis.
Note: this version is a draft. The open items listed below must be confirmed, and the wording legally reviewed, before publication.
1. Controller
The controller for data processing on this website is Eduard Butkevych, Frankfurter Allee 218, 10365 Berlin (see the legal notice).
Full controller details including a contact address for privacy requests: to confirm: legal form, full controller name, privacy contact address.
Data protection officer: to confirm: whether one is appointed; if so, contact details.
2. Hosting and backend
The website and application logic run with a hosting and backend provider. Technically necessary connection data (such as IP address, request time, requested address and browser information) is processed in server and security logs.
Providers, server locations, processor agreements, log retention and legal basis: to confirm.
3. Analytics and cookies
BergMe stores a language preference and a light/dark theme preference locally in your browser. These values are required to operate the site and are not shared with third parties.
Use of analytics or measurement services, the cookies set, their purpose, lifetime and legal basis, and whether consent is required: to confirm.
4. Questionnaire and recommendations
Questionnaire answers are held in your browser for the session and sent to the application to generate recommendations. No registration or email address is required.
The ranking is produced by a rule-based system. An AI service is used to interpret optional free-text answers and to phrase the explanations; it does not select or rank the ski areas.
In our assessment there is no automated decision-making producing legal effects within the meaning of Art. 22 GDPR. AI provider, processing location, retention and legal basis: to confirm.
5. Links to travel providers
Booking links on the results page lead to external travel providers. Processing on those sites is the sole responsibility of the respective provider. BergMe is not a tour operator.
Affiliate programmes used, parameters transmitted and any conversion tracking: to confirm.
6. Contact form and email
The controller named in section 1 is responsible for processing your contact request.
Data processed: email address, selected subject, message text, site language, the page you submitted from, submission time, a technical reference ID, and a keyed hash derived from your IP address for abuse prevention. Providing a name is optional.
Email address, subject and message are required; without them the request cannot be handled. Omitting your name has no disadvantage.
The sole purpose is handling and answering your request. Legal basis: to confirm: Art. 6(1)(b) GDPR for pre-contractual enquiries, or Art. 6(1)(f) GDPR together with a statement of the legitimate interest. Consent is not required in order to receive a reply.
Categories of recipients: the hosting and backend provider, the email delivery service, and the provider of the support mailbox. Specific providers, processing locations, transfers outside the EU/EEA and their safeguards: to confirm.
Contact submissions are not stored in the application database. They are delivered by email and retained in the relevant mailboxes and in operational delivery and security logs. Deletion periods: to confirm: e.g. routine enquiries deleted after 6 or 12 months, longer retention only where legally or contractually necessary.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time with future effect.
A message to support@bergme.com is enough to exercise these rights.
You also have the right to lodge a complaint with a data protection supervisory authority. Competent authority: to confirm.
Open items before publication
- Full controller name, legal form, address and privacy contact
- Hosting/backend and email delivery providers, including processor agreements
- Legal basis per processing activity, with the legitimate interest stated where relied on
- Processing locations and safeguards for transfers outside the EU/EEA
- Concrete retention and deletion periods, including mailboxes and logs
- Analytics and cookie configuration, and whether consent is required
- Competent supervisory authority
- Data protection officer, if appointed