Privacy Policy

Privacy Policy

Last updated: July 22, 2026

This Privacy Policy explains how personal data is processed when you visit vglocations.org, including its associated subdomains.

1. Controller

The controller responsible for the processing of personal data on this website is:

Johannes Heinrich
Postfach 0003
2705 Wiener Neustadt
Austria

Email: contact@vglocations.org

2. General Information

We process personal data only where this is necessary to operate, secure, analyze, and improve this website, or where you have consented to the processing.

Personal data means any information relating to an identified or identifiable natural person. This may include IP addresses, browser information, device information, usage data, and information submitted through direct communication.

The principal legal bases for processing under the General Data Protection Regulation are:

  • your consent under Article 6(1)(a) GDPR;
  • the performance of a contract or steps taken before entering into a contract under Article 6(1)(b) GDPR;
  • compliance with a legal obligation under Article 6(1)(c) GDPR; and
  • our legitimate interests under Article 6(1)(f) GDPR.

3. Website Hosting

This website is hosted by:

IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany

When you access the website, the hosting provider may process technical connection data in server log files. This may include:

  • IP address;
  • date and time of access;
  • requested page or file;
  • browser type and version;
  • operating system;
  • referring URL;
  • host name of the accessing device; and
  • HTTP status and transferred data volume.

This processing is necessary to deliver the website, maintain technical stability, detect errors, prevent misuse, and protect the website against attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable, and technically functional operation of the website.

Server log data is retained only for as long as required for technical operation, security analysis, legal compliance, or the investigation of misuse. Further information about IONOS data processing is available in the privacy information provided by IONOS.

4. WordPress

This website uses WordPress as its content management system.

WordPress and installed extensions may process technical information required to display and administer the website. Depending on the active configuration, WordPress may also store technically necessary cookies, for example for administrative login sessions or security functions.

The website does not currently provide public user accounts, public comment functionality, or user registration.

5. Cookies and Similar Technologies

This website may use cookies and comparable storage technologies.

Technically necessary technologies may be used without consent where they are required to provide the website or a service expressly requested by the user.

Analytics and other non-essential technologies are used only after you have given the required consent through the website’s consent-management interface.

You can accept, reject, or adjust non-essential data processing through the cookie settings provided on the website. You may withdraw your consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Google Site Kit

This website uses the WordPress plugin Google Site Kit.

Google Site Kit is an administrative integration that allows the website operator to connect and review information from Google services within the WordPress administration interface. Depending on the enabled configuration, this may include Google Analytics and Google Search Console.

Site Kit may also be used to place or configure Google tags on the website.

Google Site Kit does not replace the website’s consent-management system. Where consent is legally required, the relevant Google services must remain disabled or restricted until the visitor has provided consent.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google LLC and other Google group companies may be involved in processing and providing the services.

7. Google Analytics 4

Subject to your consent, this website uses Google Analytics 4, a web analytics service provided by Google.

Google Analytics helps us understand how visitors use the website. For this purpose, Google may process information such as:

  • pages visited;
  • approximate geographic region;
  • date and time of access;
  • browser and device information;
  • operating system;
  • referring source;
  • interactions with website content;
  • session and engagement information; and
  • truncated or otherwise processed IP-related information.

The purpose of this processing is to measure website usage, evaluate the performance of content, identify technical or usability problems, and improve the website.

Google Analytics is activated only after the required consent has been provided.

The legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the website’s cookie settings.

Google Consent Mode

The website may use Google Consent Mode to communicate your consent choices to Google tags.

Depending on the technical implementation selected by the operator, Google tags may remain completely blocked until consent is granted, or may operate in a restricted mode without analytics cookies. The effective behavior depends on the consent-management and Site Kit configuration in use.

Consent Mode itself is not a consent banner and does not replace the requirement to obtain valid consent where such consent is required.

Data recipients and international transfers

Data processed through Google Analytics may be transferred to Google group companies and service providers outside the European Economic Area, including in the United States.

Where required, such transfers are based on an applicable adequacy decision, appropriate safeguards such as standard contractual clauses, or another lawful transfer mechanism under Chapter V GDPR.

Further information regarding Google’s data processing, retention settings, and international transfers is available in Google’s privacy documentation.

8. Google Search Console

This website may use Google Search Console through Google Site Kit.

Google Search Console provides the website operator with aggregated information about the website’s visibility and performance in Google Search, including search queries, impressions, clicks, indexing status, and technical search-related issues.

The normal use of Search Console by the website operator does not require a separate tracking cookie to be placed on visitors’ devices by this website.

Data relating to users’ interaction with Google Search is processed by Google under Google’s own terms and privacy policies.

9. Interactive Map and OpenStreetMap

The website provides an interactive map through the subdomain: map.vglocations.org

The map interface is implemented using Leaflet, an open-source JavaScript mapping library.

OpenStreetMap map tiles

The map uses map tiles provided by:

OpenStreetMap Foundation
St John’s Innovation Centre
Cowley Road
Cambridge
CB4 0WS
United Kingdom

The map tiles are retrieved from: tile.openstreetmap.org

When the interactive map is displayed, your browser establishes a direct connection to the OpenStreetMap Foundation’s tile servers. This connection is necessary to download the map images required for the currently displayed geographic area.

In connection with these requests, the OpenStreetMap Foundation may receive and process technical information, including:

  • your IP address;
  • the date and time of the request;
  • the requested map tile and geographic area;
  • browser and device information;
  • operating-system information;
  • the referring page; and
  • other technical request and server-log information.

The OpenStreetMap Foundation processes information relating to its services in accordance with its own privacy policy.

The purpose of loading the map tiles is to provide the interactive geographic visualization offered by this website.

Because the map tiles are loaded from an external third-party server, they are loaded only after you have provided the required consent through the website’s consent-management interface.

The legal basis for this processing is your consent under Article 6(1)(a) GDPR. Where information is stored on or accessed from your device, the processing is additionally based on the applicable consent requirements under Austrian and European electronic-communications and data-protection law.

You may withdraw your consent at any time with effect for the future through the website’s cookie or privacy settings.

If you do not provide consent, the external OpenStreetMap tiles will not be loaded. In that case, the interactive map may be unavailable or displayed only as a placeholder.

The OpenStreetMap Foundation is based in the United Kingdom. Where personal data is transferred to the United Kingdom, the transfer may be based on the applicable adequacy decision of the European Commission or another lawful transfer mechanism under Chapter V GDPR.

Further information about OpenStreetMap’s processing of personal data is available in the OpenStreetMap Foundation’s privacy policy.

Map attribution

The map contains geographic data and map imagery from OpenStreetMap contributors. The required attribution is displayed directly within the map interface.

10. YouTube Links and Thumbnails

The interactive map may display thumbnails or links associated with videos hosted on YouTube.

Clicking a thumbnail or link takes you to YouTube. The website does not currently embed YouTube videos directly through an iframe player.

When you follow a link to YouTube, you leave this website. YouTube and Google then process your data under their own terms and privacy policies. This may include your IP address, device information, account information, cookies, and information about the video or page accessed.

Provider:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

If thumbnails are loaded directly from a YouTube or Google server rather than being stored locally, your browser may contact Google before you click the link. In that case, Google may receive technical connection information when the map is displayed.

To avoid such pre-click data transfers, YouTube thumbnails should be stored locally on the website’s own server.

11. Direct Contact by Email

You may contact us at contact@vglocations.org.

When you contact us by email, we process the information you provide, including your email address, message content, and any associated metadata.

The purpose of the processing is to respond to your request and manage the resulting correspondence.

Depending on the subject of your message, the legal basis is:

  • Article 6(1)(b) GDPR where the communication relates to a contract or a request made before entering into a contract;
  • Article 6(1)(c) GDPR where retention or processing is legally required; or
  • Article 6(1)(f) GDPR for general correspondence and the effective management of enquiries.

Correspondence is retained only for as long as necessary to handle the request and comply with applicable legal retention obligations.

12. No Newsletter, Public Accounts, or Contact Form

The website does not currently:

  • operate an email newsletter;
  • provide public user accounts;
  • permit public comments; or
  • use a website contact form.

If any of these functions are introduced, this Privacy Policy will be updated before or when the relevant processing begins.

13. Data Sales and Payment Providers

The website does not currently process payments directly and has not yet integrated Lemon Squeezy or another checkout provider.

Before a payment or digital-product checkout service is activated, this Privacy Policy will be updated to explain:

  • the identity of the payment or merchant-of-record provider;
  • the data transmitted to that provider;
  • the purposes and legal bases of processing;
  • international data transfers;
  • applicable retention periods; and
  • the contractual relationship between the customer, website operator, and payment provider.

14. Data Retention

Unless a more specific retention period is stated in this Privacy Policy, personal data is retained only for as long as necessary for the purpose for which it was collected.

Data may be retained for a longer period where this is necessary to:

  • comply with statutory retention obligations;
  • establish, exercise, or defend legal claims;
  • investigate security incidents or misuse; or
  • fulfil contractual obligations.

When the applicable purpose and retention obligations no longer apply, the data is deleted or anonymized.

15. Recipients and Processors

Personal data may be disclosed to service providers where this is necessary to operate the website.

Current or potential categories of recipients include:

  • hosting and infrastructure providers;
  • analytics providers;
  • website administration and security providers;
  • email service providers;
  • professional advisers; and
  • public authorities where disclosure is legally required.

Where a service provider processes personal data on our behalf, the processing is governed by the requirements of Article 28 GDPR where applicable.

16. Your Rights

Subject to the applicable legal conditions, you have the right to:

  • obtain information about whether and how your personal data is processed;
  • obtain access to your personal data;
  • request correction of inaccurate data;
  • request deletion of your data;
  • request restriction of processing;
  • receive data you provided in a structured, commonly used, and machine-readable format;
  • object to processing based on legitimate interests;
  • withdraw consent at any time with effect for the future; and
  • lodge a complaint with a competent data protection authority.

The competent supervisory authority in Austria is:

Austrian Data Protection Authority
Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

To exercise your rights, contact:

contact@vglocations.org

17. Right to Object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.

If personal data is processed for direct marketing purposes, you have the right to object at any time without providing reasons.

18. Data Security

Appropriate technical and organizational measures are used to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

However, no internet transmission or storage system can be guaranteed to be completely secure.

19. External Links

This website contains links to external websites and services.

We are not responsible for the privacy practices, security, availability, or content of third-party websites. The privacy policies of the respective third parties apply after you leave this website.

20. Changes to This Privacy Policy

This Privacy Policy may be updated when legal requirements, website functionality, or third-party services change.

The version published on this page is the current version. The date of the latest revision appears at the beginning of the document.