Privacy Policy
We take the protection of your personal data very seriously. This privacy policy transparently informs you about all aspects of data processing on our website.
1. Data Controller
The data controller for this website is:
Arca Resort eG
2. Purposes and Legal Basis
We process personal data only to the extent necessary to provide this website and ensure the functionality and security of our network infrastructure. In addition, we process personal data to the extent required to fulfill legal obligations in the area of cybersecurity for operators of critical infrastructure or digital services.
Only technically necessary processing is carried out; in particular, we do not use any analysis, tracking or marketing services or any non-essential cookies.
3. Local Settings on Your Device
To ensure comfortable use of the website, we store some settings directly on your device.
These include in particular:
4. Email Communication
If you contact us by email, we process the data generated in the process to handle your request.
Collected Data
When communicating by email, the following data may be collected and processed:
| Category | Data |
|---|---|
| Sender | Your email address and optionally your name |
| Recipient | Our email address |
| Metadata | Subject, date and time |
| Content | Email text and optionally attachments |
| Submissions | All information you voluntarily send us |
Purpose of Processing
We process this data to:
No Disclosure to Third Parties
Legal Basis
5. Connection Data
When you access our website, connection data (metadata of the network connection) is technically generated.
Collected Data
The following data may be collected and processed:
| Category | Data |
|---|---|
| Identification | IP address of your device |
| Timestamp | Date and time of access |
| Request | Address accessed (URL, path and query parameters) |
| Method | HTTP method (e.g. GET, POST) |
| Protocol | Protocol version used (e.g. HTTP/1.1) |
| Response | HTTP status code of the response (e.g. 200, 404) |
| Size | Size of the transferred response in bytes |
| Origin | Referrer information if applicable (address of the previously visited page) |
| Client | User-Agent (browser/client version, operating system) |
| Internal | Technical information about processing (response time, backend services, etc.) |
Purpose of Processing
We use this connection data to:
Service Restrictions
In the event of service restrictions, we may store and evaluate relevant connection data to identify involved parties and, if necessary, take legal action.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in clarifying security incidents) and Art. 6 para. 1 lit. c GDPR (statutory security and reporting obligations).
6. Retention Period
The connection data mentioned in Section 5 is regularly stored for a period of up to 90 days.
After this period, the data is deleted or anonymized.
Storage beyond this period only occurs on a case-by-case basis in connection with:
7. Your Rights
Under the GDPR, you have the following rights, among others:
| Right | Description |
|---|---|
| Access | Right to information about data stored about you |
| Rectification | Right to rectification of incorrect data |
| Erasure | Right to erasure |
| Restriction | Right to restriction of processing |
| Objection | Right to object to processing |
| Data Portability | Right to data portability |
To exercise these rights, you can contact us at any time using the contact details above.
Note on Objection, Restriction of Processing and Use of the Service
We process personal data to ensure the technical provision and security of our website and network infrastructure based on Art. 6 para. 1 lit. f GDPR. This processing is technically necessary for the secure and trouble-free operation of the service.
You have the right to object to this processing at any time or to request a restriction of processing pursuant to Art. 18 or Art. 21 GDPR. In this case, we may not be able to provide the service to you in whole or in part, as use without this technically necessary processing is not possible.
If you continue to use our service after a valid objection, we will interpret this as a withdrawal of your previously declared objection. A renewed objection is possible at any time, but then requires that you discontinue use of the service.
8. Right to Complain
You also have the right to complain to a data protection supervisory authority about the processing of your personal data.
Last updated: March 2026