Privacy Policy – Boat Log

Note: This is a draft with placeholder contact details (see Legal Notice) and covers the third-party services this app actually uses under the hood. Before any production/public use, have it reviewed by a qualified lawyer or data protection officer.

1. Data Controller

Sven Goik, Musterstraße 12, 12345 Musterstadt, Germany
Email: kontakt@example.com
(see Legal Notice)

2. What data we process

When you use this app, we process the following data:

Account data: name, email address, password (stored as a hash, never in plain text)
Logbook data: trip details (date, times, route, start/destination harbor, weather, cost, crew), boat master data, repair log
Location data: waypoints you place on the map (geographic coordinates) used for distance calculation and automatic country detection
Uploaded files: photos and charter contract documents you attach to a trip or boat
Technical data: a session cookie used to keep you logged in (see section 5)

3. Purpose and legal basis of processing

Processing takes place solely to provide the logbook functionality you actively request as a user (Art. 6(1)(b) GDPR – performance of a contract / pre-contractual measures). Technically necessary cookies are covered by Art. 6(1)(f) GDPR (legitimate interest in operating the app securely).

4. Retention period

Your data is stored for as long as your account exists. You can permanently delete your account and all associated data (trips, boats, repair log, uploaded files) yourself at any time under Profile → Danger Zone.

5. Cookies

We use a technically necessary session cookie to keep you logged in after you sign in. It contains no tracking data and is not used for advertising purposes.

6. Third-party services we use

Certain features send requests to the following external services. In each case, your IP address is transmitted to the respective provider, since this is technically required for delivery.

Google Fonts (Google Ireland Ltd. / Google LLC, USA)

To display the "Poppins" and "Inter" typefaces, the app loads font files from fonts.googleapis.com and fonts.gstatic.com. More information: policies.google.com/privacy.

unpkg.com (Cloudflare CDN)

The "Leaflet" mapping library is loaded from unpkg.com (a content delivery network running on Cloudflare infrastructure).

OpenStreetMap Foundation

Map tiles for the route map are loaded from tile.openstreetmap.org. More information: OSMF Privacy Policy.

OpenSeaMap

Nautical chart overlays (harbors, sea marks) are loaded from tiles.openseamap.org.

Nominatim / OpenStreetMap Foundation

For harbor autocomplete and automatic country detection based on your route points, the app sends search queries and/or coordinates to nominatim.openstreetmap.org.

7. Hosting

This app runs on the controller's own server (hosting provider: placeholder – please replace with the actual provider, e.g. Hetzner Online GmbH). Your logbook data is not shared with the hosting provider beyond the plain provisioning of the server itself.

8. Your rights

You have the right to:

Access the data stored about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR) – available directly from your profile
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to processing (Art. 21 GDPR)
Lodge a complaint with a data protection supervisory authority (Art. 77 GDPR)