Privacy Policy

    Last updated: October 27, 2025

    1. Introduction

    This privacy policy explains how personal data is collected, used, and protected when you visit thelostbygass.com ("the Website"). Your privacy is important, and this site is committed to handling your data responsibly and in compliance with the EU General Data Protection Regulation (GDPR).

    2. Data Controller

    Manuel Gass (Sole Proprietor)
    Floesserstr. 37
    82499 Wallgau, Germany
    Email: contact@thelostbygass.com

    3. Data We Collect

    When you visit this Website, the following data may be collected:

    • Usage & log data - IP address, browser type, operating system, referring URL, pages visited, and timestamps.
    • Contact data - name and email address if you use the contact form.
    • Cookie & tracking data - see Section 6 below.

    4. Purpose and Legal Bases

    Personal data is processed on the following legal bases under Art. 6 GDPR:

    • Legitimate interest (Art. 6(1)(f)) - to operate, secure, and improve the Website.
    • Consent (Art. 6(1)(a)) - for analytics and non-essential cookies, where applicable.
    • Contract performance (Art. 6(1)(b)) - to respond to your inquiries submitted via the contact form.

    5. Services and Processors

    The Website relies on the following third-party service providers who may process data on our behalf:

    • Vercel Inc. - website hosting (440 N Barranca Ave #4133, Covina, CA 91723, USA).
    • PostHog GmbH - product analytics (Oskar-von-Miller-Ring 20, 80333 München, Germany).

    6. Cookies & Analytics

    This Website may use cookies and similar technologies to analyse usage patterns and improve the user experience. Essential cookies required for the Website to function do not require consent. Non-essential analytics cookies are only set with your explicit consent where required by law. You can manage cookie preferences in your browser settings at any time.

    7. Data Transfers to Third Countries

    Some processors listed in Section 5 are based outside the European Economic Area (EEA). Data transfers are safeguarded by Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework, as applicable.

    8. Storage Period

    Personal data is retained only as long as necessary for the purposes described above, or as required by law. Log data is typically deleted after 90 days. Contact form submissions are retained until the inquiry has been resolved and no further retention obligation applies.

    9. Your Rights

    Under the GDPR (Art. 15–21), you have the right to:

    • Access the personal data held about you.
    • Request rectification of inaccurate data.
    • Request erasure ("right to be forgotten").
    • Restrict or object to processing.
    • Data portability.
    • Withdraw consent at any time (without affecting the lawfulness of prior processing).

    To exercise any of these rights, please contact contact@thelostbygass.com.

    10. Security

    Appropriate technical and organisational measures are in place to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over encrypted connections (TLS/SSL).

    11. Changes to This Policy

    This privacy policy may be updated from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Website after changes constitutes acceptance of the updated policy.

    12. Supervisory Authority

    If you believe your data protection rights have been violated, you have the right to lodge a complaint with the competent supervisory authority:

    Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
    Promenade 18
    91522 Ansbach, Germany
    www.lda.bayern.de