Privacy policy

1. Controller and contact

This notice describes the processing of personal data when visiting BigStep. Controller: [Full name or company]. Postal address: [Street, number, postcode, town, country]. Email for privacy enquiries: [Email address].

2. Website delivery and hosting

To deliver the website, the server processes connection data, including your IP address, requested address, time of access and technical browser information. The purpose is to provide the website reliably and securely. The legal basis is our legitimate interest in operating a secure website (Article 6(1)(f) GDPR).

Hosting provider and server location: [Provider, postal address, country]. The hosting provider processes technical data on our behalf. Details of the processing agreement and any transfers outside the EEA: [To be confirmed].

Server logs and retention: [Specify the data actually logged, retention period and deletion process]. Technical data is only retained for as long as necessary for its purpose, unless a legal obligation requires otherwise.

3. Cookies, analytics and local content

The current website does not use analytics tools, advertising pixels or tracking cookies. It does not store a language preference in cookies or browser storage; the language is determined by the URL. Images, fonts and the interactive map are served by our website. The map does not use Google Maps. News articles can include Instagram reels, which are only loaded after you activate an individual reel. Until then, the previews use local images and no connection to Instagram is made for them. Activation allows Instagram to receive connection data and potentially use cookies. The basis for this optional loading is your consent (Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG). You can stop future loading by closing the reel or leaving the page; data already transmitted cannot be retrieved. Instagram processes these data under its own privacy policy. Provider and international transfer details: [Confirm the current Instagram provider and safeguards].

4. External links and social media

Our website links to external services, including Instagram, TikTok, YouTube, MTP, Heymondo and GetYourGuide. Opening one of these links takes you to the respective provider, which processes data under its own privacy policy. Some links include affiliate identifiers. BigStep does not operate tracking software for these links on this website.

If you contact us through a social platform, we process the information you provide to answer your enquiry. The legal basis is Article 6(1)(b) GDPR for enquiries about a potential contract and Article 6(1)(f) GDPR for other correspondence. The platform also processes data under its own responsibility, potentially outside the EEA. Messages are deleted once the enquiry is concluded and no retention obligation applies. Any platform-specific retention and transfer details must be added here: [Review the platforms used and applicable safeguards].

5. Your rights

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, contact [Privacy email address]. You may also complain to a data protection supervisory authority, particularly in the EU country where you live, work or believe an infringement has occurred. Contact details of the relevant authority: [Name and website].

6. Required data and automated decisions

Connection data is technically necessary to load this website. You are not required to contact us or open external links. BigStep does not use your visit for automated decision-making with legal effects or for profiling.

7. Changes to this notice

This notice must be updated when the website or its data processing changes. Version: [Date of final review].