Downhill24h← Back to homepage

Privacy Policy

Last updated: November 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Downhill24h, c/o Tobias Hannig
Schulstr. 42-3, 70771 Leinfelden, Germany
Phone: +49 (0)171 - 498 89 05
Email: hello@downhill24h.com

2. Hosting and server log files

This website is hosted by INWX GmbH, Prinzessinnenstraße 30, 10969 Berlin, Germany. When you visit the site, the web server processes technically necessary data and stores it in log files: IP address, date and time of the request, requested file or URL, amount of data transferred, status code, browser and operating system information (user agent) and, where applicable, the previously visited page (referrer). The storage period depends on the hosting provider and is usually 14 to 30 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in defending against attacks. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

3. No cookies, no tracking

This website does not set cookies and does not use analytics, tracking or advertising services. Fonts are not loaded from external servers but come from your device (system fonts). Images and scripts are served from our own server.

4. Contact form

If you write to us via the contact form, we process the data you enter: name, email address, optionally company or channel, type of inquiry and your message. This data is sent to us by email and used solely to process your inquiry. We do not pass it on to third parties.

The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a collaboration or contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). Fields marked with * are mandatory; without them we cannot process your inquiry. We delete your data once your inquiry has been fully handled and no statutory retention obligations (e.g. under commercial or tax law) apply.

To protect against misuse (spam), we store for no longer than one hour a hash value of your IP address that cannot be reversed, together with timestamps of your submissions, in order to limit the number of messages per hour. The legal basis is Art. 6(1)(f) GDPR. Please note that emails are not always transmitted in encrypted form over the internet.

5. Contact by email or phone

If you contact us by email or phone, we process your details to handle your inquiry on the basis of Art. 6(1)(b) or (f) GDPR. Deletion takes place as described in section 4.

6. Instagram feed

On our homepage we show the latest posts from our Instagram channel @downhill24h. The posts are retrieved server-side via the official interface (Instagram API) of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The images are fetched by our server and cached on our own server. When you open our site, your browser therefore does not connect to Instagram or Meta, and your IP address is not transmitted to Meta.

The legal basis for displaying the feed is Art. 6(1)(f) GDPR (presentation of our public profile). The server-side retrieval only concerns public content of our own account. This may involve a transfer to Meta servers in the USA; Meta is certified under the EU-US Data Privacy Framework.

If you click a post or the "Follow @downhill24h" button, you leave our site. Instagram's and Meta's privacy policies then apply: privacycenter.instagram.com/policy.

7. External links

Our site contains links to external services (e.g. Instagram posts). When you click such a link, your IP address is transmitted to the respective provider. We have no influence on the data processing there.

8. Your rights

You have the following rights with regard to your personal data:

You can withdraw any consent you have given at any time with effect for the future. To do so, simply write to hello@downhill24h.com.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

10. Encryption

For security reasons, this site uses SSL/TLS encryption (recognisable by "https://" in the address bar).

11. Changes

We will update this privacy policy if the website or the legal situation changes. The version published here applies.