Privacy policy

1. Controller

The controller (Art. 4(7) GDPR) for personal data processed on muenchenstark.com is:

The operator of muenchenstark.com
E-mail: [email protected]

You can also reach us through the contact page. This policy is written to meet the information duties of the EU General Data Protection Regulation (GDPR) and the German Telecommunications-Digital-Services Data Protection Act (TDDDG).

2. In short

• Google Ads and Google Analytics tags run only after you click "Accept all" in the cookie banner; until then they stay in cookieless, consent-denied mode (Google Consent Mode v2).
• Three small preferences (age confirmation, your cookie choice, the banner state) are kept in your own browser.
• When you load a page, your browser fetches fonts and photographs from third-party servers, which see your IP address.
• If you use the contact form, we use what you send only to reply to you.

3. Visiting the site

When you open a page, the web server that hosts muenchenstark.com receives the technical data your browser sends with every request: your IP address, the page requested, the time, the referring page and your browser type. This data is needed to deliver the page (Art. 6(1)(f) GDPR, our legitimate interest in operating a secure website). The site is delivered through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which acts as our processor for hosting, content delivery and protection against attacks; data may be processed in the USA under the EU-US Data Privacy Framework. Cloudflare's privacy policy: cloudflare.com/privacypolicy. Logs are deleted automatically after a short rotation period and are not combined with any other data.

4. Browser storage

The site uses the local storage of your browser, not cookies, for two values:

• ms_age_ok — set when you confirm that you are 18 or older, so that the age notice does not reappear on every page;
• ms_consent — your choice in the cookie banner ("all" or "essential").

These values are strictly necessary for the function you requested (§ 25(2) TDDDG) and stay on your device. We cannot read them from our servers. You can delete them at any time through your browser's site-data settings.

5. Fonts and images

Typefaces are loaded from Google Fonts (Google Ireland Ltd., Dublin) and photographs from Unsplash (Unsplash Inc., Montréal, Canada, via its image delivery network). To deliver a file, these services receive your IP address and standard request headers. The legal basis is our legitimate interest in a fast, consistently designed site (Art. 6(1)(f) GDPR). Google's privacy policy is at policies.google.com/privacy; Unsplash's at unsplash.com/privacy. If you would rather avoid these requests, a content blocker will stop them without breaking the site; system fonts are used as a fallback.

Google Ads and Google Analytics (consent-based)

To measure how visitors find the site and to run advertising on Google, we use the Google tag (gtag.js) for Google Ads conversion tracking and remarketing and for Google Analytics 4, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. These tags set cookies and process your IP address (shortened), device and browser data, pages viewed and interactions such as sending the contact form. We use them only with your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you give or refuse in the cookie banner and can withdraw at any time via "Cookie settings" in the footer. Until consent is given, the tags run in Google Consent Mode v2 with all storage set to "denied", which means no advertising or analytics cookies are set and only aggregated, cookieless signals are sent. Data may be transferred to Google LLC in the USA under the EU-US Data Privacy Framework. Cookie lifetimes: up to 2 years (Analytics), up to 90 days (Ads). More: How Google uses data from partner sites. You can also opt out with the Google Analytics opt-out add-on.

6. Contact form

The contact form asks for your name, your e-mail address, a subject and your message. We use these only to read and answer your enquiry (Art. 6(1)(b) GDPR, taking steps at your request before any contract, and Art. 6(1)(f) GDPR). Your message is kept for as long as needed to deal with it and is deleted afterwards unless a legal retention duty applies. We do not pass it to the casinos or hotels described on this site unless you ask us to. Please do not send us payment details or special-category data.

7. Your rights

Under the GDPR you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You also have the right to lodge a complaint with a supervisory authority; this is the data protection authority of the German federal state in which the controller is based. To exercise your rights, write to us through the contact page.

8. Minors

This website is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has sent us information, let us know and we will delete it.

9. Changes

We will update this policy if the way the site works changes. The date at the top shows the current version.