Privacy notice

CSS City and Sea Services GmbH is responsible for the processing of personal data in connection with this website.

This is an informational website. It has no user accounts or contact form. We do not use analytics, advertising technologies, tracking pixels or marketing cookies.

When you access the website, technical connection data may be processed. This can include your IP address, date and time of access, requested address, data volume, referrer, browser and operating-system information. Hosting, content-delivery and security providers may process this information to deliver the website, diagnose errors and protect the service from misuse and attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, stable and efficient provision of this website. We do not use access logs to create advertising profiles. Origin-server access logs are rotated daily and ordinarily no more than seven archived log files are retained, unless an incident or legal duty requires preservation for longer.

The hosting and security infrastructure may store or access technical information on your device where this is strictly necessary to deliver and protect the website. Such functions are used only for secure network delivery, abuse prevention and comparable essential purposes. We do not use optional analytics or marketing storage. For this reason, the website does not display a consent banner.

If you contact us voluntarily by email, we process your sender address, message and any information you provide to answer your inquiry and manage necessary follow-up communication. For inquiries concerning a contract or steps before entering into a contract, the legal basis is Article 6(1)(b) GDPR. In other cases, the basis is Article 6(1)(f) GDPR and our legitimate interest in responding to business correspondence. Legal retention obligations may additionally require processing under Article 6(1)(c) GDPR.

Messages are deleted when they are no longer required for their purpose, unless legal retention duties or legitimate reasons require longer storage. Please do not send sensitive information that is unnecessary for your inquiry.

Current technical recipients include Hetzner Online GmbH for origin hosting, Cloudflare for DNS, secure proxying and content delivery, and Google Workspace for business email. They receive data only where necessary for their respective tasks and are bound by applicable data-protection requirements.

Where a provider processes data outside the European Economic Area, the transfer is made only under an applicable adequacy decision or other safeguards recognised by the GDPR, such as the European Commission’s standard contractual clauses, where required.

Subject to the legal requirements, you may request access, correction, deletion, restriction of processing and data portability. You may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. To exercise your rights, email [email protected].

You also have the right to lodge a complaint with a data-protection supervisory authority. The authority responsible for our Berlin establishment is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, Germany, email: [email protected].

We do not use automated decision-making or profiling on this website. We update this notice if the website or its technical delivery changes materially.

Last updated: 21 July 2026