Privacy Policy

Effective from 15 June 2026 · Vinkiel

1. Data controller

The controller of your personal data is Vinkiel (the “Controller”). For any matters related to personal data protection, contact us at contact@vinkiel.com.

2. What data we collect

Depending on how you use the Service, we may process the following categories of data:

Partner form data: full name or business name, e-mail address, phone number (optional), the name and city of the submitted place and the message content - provided voluntarily via the “Add your place” form.
Login data (Partner panel): e-mail address and password (stored encrypted).
Device data: device model, operating system version, unique installation identifier - mobile app only.
Location data: approximate location, only if you grant permission in your device settings.
Analytics data (website): anonymised visit statistics (Google Analytics 4) - only after you give consent in the cookie banner.
Analytics data (app): anonymous app-usage data (screens, taps) that does not directly identify you.

3. Purpose and legal basis of processing

Handling partner form submissions - replying, preparing and (at your explicit request) creating a partner account - Art. 6(1)(a) and (b) GDPR.
Providing the Service - Art. 6(1)(b) GDPR (performance of a contract).
Managing a Partner panel account - Art. 6(1)(b) GDPR.
Analytics and Service improvement - Art. 6(1)(a) GDPR (consent - website) and Art. 6(1)(f) GDPR (legitimate interest - app).
Compliance with legal obligations - Art. 6(1)(c) GDPR.

4. Cookies and analytics

The vinkiel.app website uses Google Analytics 4 only after you give consent in the cookie banner. Until then, no analytics or marketing cookies are stored. You can withdraw consent at any time by clearing site data in your browser. Your language and theme preferences are stored locally in your browser (localStorage) and are never shared with anyone.

5. Data retention

Partner submissions - up to 12 months after the correspondence ends or until consent is withdrawn.
Account data - for the lifetime of the account and 3 years after deletion (for potential claims).
Analytics data - for 24 months, then anonymised.
Technical logs - for 90 days.

6. Data recipients

Your data may only be shared with trusted subprocessors supporting the Service (hosting, analytics, e-mail), acting under data processing agreements. We do not sell your personal data.

7. Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw consent at any time. You may also lodge a complaint with your data protection authority. To exercise your rights, write to contact@vinkiel.com.

8. Changes to this policy

This policy may be updated as the Service evolves. We will announce material changes on this page and - if you have an account - by e-mail.