Privacy Policy

Last updated: May 2026

Short version: We do not use Google Analytics, advertising, or tracking cookies. We only collect data you actively provide when submitting a spot. No third-party advertising. No profiling.

1. Controller (Responsible Party)

The data controller for this website is:

Lakeberg GmbH
Vicki-Baum-Straße 80, 10317 Berlin, Germany
Managing Directors: Andreas Lakeberg, Andrea C. Lakeberg
E-Mail: info@e-surfer.com
Phone: +49 30 20609981
Register: Amtsgericht Charlottenburg, HRB 206726 B

2. Data Protection Officer

Andrea C. Lakeberg
Vicki-Baum-Straße 80, 10317 Berlin
E-Mail: info@e-surfer.com

3. What Data We Collect and Why

3.1 Server Log Files

When you visit this website, our hosting provider (Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin) automatically records the following data in server log files:

Browser type and version
Operating system
Referrer URL
IP address of the requesting device
Date and time of the request

This data is not combined with other data sources. Legal basis: Art. 6(1)(f) GDPR — legitimate interest in ensuring error-free operation and IT security. Log files are automatically deleted after 7 days.

3.2 Spot Submissions

When you submit an eFoil spot via our form, we collect:

Spot name, description, GPS coordinates
Country, water type, difficulty level
Your name and email address
Photos you upload (up to 3, max. 5 MB each)

We use this data to: verify your identity via email confirmation, review and publish the spot on the map, and notify you when your spot is approved or rejected.

Legal basis: Art. 6(1)(a) GDPR — your consent, given by actively submitting the form.

Your email address is stored until you request deletion. Published spot data (name, description, coordinates, photos) is stored as long as the spot is active on the map. To request deletion, email info@e-surfer.com with your spot name and the email address you used.

3.3 Session Cookies

This website uses one technically necessary session cookie. It is used solely to protect forms against cross-site request forgery (CSRF) and for admin authentication. It contains no personal data and is deleted when you close your browser.

Legal basis: Art. 6(1)(f) GDPR, § 25(2) TTDSG — technically necessary for the secure operation of the website. No consent required.

4. Third-Party Services

4.1 Map Service — Leaflet & Carto

The interactive map is built with Leaflet.js (open source) using map tiles from Carto (CARTO, Inc., 201 Moore Street, Brooklyn, NY 11206, USA). When the map loads, your browser fetches tiles directly from Carto's servers, which receives your IP address.

Carto's Privacy Policy: carto.com/privacy

Legal basis: Art. 6(1)(f) GDPR — legitimate interest; the interactive map is the core function of this website and cannot operate without loading map tiles.

4.2 Geocoding — Nominatim / OpenStreetMap

When you use the address search in the spot submission form, your input is sent to Nominatim, a geocoding service operated by the OpenStreetMap Foundation (132 Maney Hill Road, Sutton Coldfield, West Midlands, B72 1JU, UK). This only occurs when you actively type an address into the search field. Your IP address is transmitted in this request.

OpenStreetMap Privacy Policy: wiki.osmfoundation.org/wiki/Privacy_Policy

Legal basis: Art. 6(1)(f) GDPR — legitimate interest; the service is only used on explicit user interaction and provides the map's location search function.

4.3 Web Fonts — Bunny Fonts

This website uses fonts provided by Bunny Fonts (BunnyWay d.o.o., Cesta Komandanta Staneta 4A, 1215 Medvode, Slovenia). Bunny Fonts is a privacy-friendly, GDPR-compliant alternative to Google Fonts, hosted exclusively on EU servers. No data is transferred outside the EU.

Bunny Fonts Privacy Policy: bunny.net/privacy

Legal basis: Art. 6(1)(f) GDPR — legitimate interest in consistent font rendering. No personal data is processed beyond a standard server request.

5. No Tracking, No Analytics, No Advertising

eFoil-Spot does not use:

Google Analytics or any other web analytics
Advertising networks (Google AdSense, Meta Ads, etc.)
Tracking pixels or marketing cookies
Social media plugins that track visitors
Profiling or automated decision-making

The sharing links on individual spot pages (Facebook, X/Twitter) are plain HTML links — they do not load scripts or track you unless you click them.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) — request information about what data we hold about you
Right to rectification (Art. 16 GDPR) — request correction of inaccurate data
Right to erasure (Art. 17 GDPR) — request deletion of your data
Right to restriction (Art. 18 GDPR) — request restriction of processing
Right to data portability (Art. 20 GDPR) — receive your data in a machine-readable format
Right to object (Art. 21 GDPR) — object to processing based on legitimate interest
Right to withdraw consent (Art. 7(3) GDPR) — withdraw consent at any time with future effect

To exercise any of these rights, contact us at info@e-surfer.com.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority for Lakeberg GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstraße 219, 10969 Berlin
datenschutz-berlin.de

8. SSL Encryption

This website uses SSL/TLS encryption for all connections. You can recognise an encrypted connection by the lock icon in your browser address bar and the https:// prefix in the URL. Encrypted transmission prevents third parties from reading data you send to us.

9. Changes to This Policy

We may update this privacy policy from time to time. The current version is always available at https://www.efoil-spot.com/privacy.php. We recommend checking this page periodically.