Privacy policy

This is a convenience translation. The German version is legally binding. German version as of 24 October 2026.

This policy applies to the website at travelmaster-go.app and all its pages (information about the app, press, videos, Christmas markets, contact and launch notification). The separate app privacy policy applies to the mobile app “TravelMaster Go”.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur. The provider processes, on our behalf, personal data arising when this website is visited (processing on behalf of a controller under Art. 28 GDPR). The legal basis is our legitimate interest in providing our offering securely and efficiently (Art. 6(1)(f) GDPR).

3. Server log files

When this website is accessed, information transmitted by your browser is automatically recorded in so-called server log files. This includes in particular:

• truncated or processed IP address
• date and time of access
• file accessed / URL requested
• browser and operating system used
• referrer URL (previously visited page)

This applies to every file requested, including images, videos and downloads such as the press kit. All of them are stored on our own web space at IONOS. The processing serves to ensure trouble-free operation and to guarantee security, on the basis of Art. 6(1)(f) GDPR. The data are deleted after 7 days at the latest.

4. Contact and launch notification

(a) Contact enquiries. If you contact us by email or via our contact form, we process the information you provide (name, email address and the content of your message) exclusively to handle your enquiry. The form sends your details via our web server at IONOS as an email to our mailbox service@travelmaster-go.app; the message itself is not stored on the web server. An additional field that is invisible to people keeps out automated submissions; it records no information about you. To prevent the form from being misused for mass emails, we accept at most 5 messages per IP address and hour (at most 60 per hour in total). For this we store the IP address only as a check value (SHA-256 with a random, secret additional value; for IPv6 for the connection's address range) together with the time; entries older than one hour are deleted the next time the form is sent. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding) or Art. 6(1)(b) GDPR where pre-contractual measures are concerned. We delete these data as soon as they are no longer required for handling your enquiry, at the latest 12 months after handling has been completed, or if you ask us to.

(b) Launch notification. If you sign up for a notification about the launch of the app, we process your email address in order to inform you when the app becomes available. The legal basis is your consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time with effect for the future – informally by email to the address given above or via the unsubscribe link in the notification. The lawfulness of the processing carried out until the withdrawal remains unaffected. We store your address until the launch notification has been sent or until you withdraw your consent, and delete it afterwards.

How signing up works (double opt-in). After you submit the form, you receive an email with a confirmation link; the sign-up only takes effect once you confirm. We store your email address, the language of the page, a random identifier for the links in the email and the times of sign-up, confirmation and the last email. The list is kept in a protected area of our web space at IONOS that cannot be accessed publicly. We delete unconfirmed sign-ups after 7 days; we send a new confirmation email no sooner than one hour later. Unsubscribing takes two steps: the link in the email opens a page on which you then confirm the cancellation.

Protection against misuse. To prevent anyone from signing up other people's addresses in bulk, we allow at most 5 attempts per IP address and hour. For this we do not store the IP address in plain text, only as a check value (SHA-256 with a random, secret additional value), together with the time of the attempt. Entries older than one hour are deleted the next time the form is used. The legal basis is our legitimate interest in protecting the service against misuse (Art. 6(1)(f) GDPR).

(c) Christmas markets near you. On the Christmas market pages you can have markets near you displayed. Only when you tap the button for this does your browser ask whether it may use your location. The position is used exclusively in your browser to calculate distances. It is neither transmitted to us nor to third parties, and it is not stored.

5. Cookies, tracking and external services

This website uses no cookies and stores nothing else on your device either (no localStorage, no sessionStorage). It uses no analytics or tracking tools, no external fonts (e.g. no fonts loaded from Google servers) and no other content from third-party providers: fonts, images, videos and scripts are stored on our own web space. Consent via a cookie banner is therefore not required.

Links to other websites (for example to organisers of Christmas markets or to the app stores) only open the respective provider's page when you tap them. That provider's privacy policy applies there.

6. Your rights

Under the GDPR, you have in particular the following rights:

• access to the data processed about you (Art. 15)
• rectification of inaccurate data (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing (Art. 21)

You can withdraw any consent you have given at any time with effect for the future. An informal message to the contact details given above is sufficient to exercise your rights.

7. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. As a rule, the competent authority is that of your federal state or that of our place of business: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

8. SSL/TLS encryption

For security reasons, this site uses TLS encryption. You can recognise an encrypted connection by the “https://” in the address bar of your browser.

9. Changes to this privacy policy

We adapt this privacy policy as soon as changes to our processing activities make this necessary (for example in the case of new features of this website). The version published on this page applies in each case; the date below indicates the date of that version.

As of: 24 October 2026