Last updated: 23 August 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
sixdaysofholidays c/o HY Innovation Ventures UG
Cologne, Germany
Email: hello@hyinnovation.com
You may contact me at the above address with any questions concerning privacy and data protection.
2. General information
I take the protection of your personal data seriously. Personal data is processed in accordance with applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR) and, where applicable, the German Telecommunications and Telemedia Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable individual.
The type of data processed depends on how you use this website.
3. Accessing the website and server log files
When you visit this website, technical information may be processed by the server. This may include:
- IP address of the requesting device
- date and time of access
- requested URL or file
- amount of data transferred
- referrer URL
- browser type and version
- operating system
- other technical information required for secure and reliable operation
This processing is necessary to provide the website securely and reliably, to detect technical problems and to prevent misuse.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is the secure, stable and functional operation of the website.
Log data is deleted once it is no longer required for these purposes, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.
Note: The exact data collected and retention period depend on your hosting provider and should be specified accordingly.
4. Contacting us
If you contact me by email or through a contact form, the information you provide will be processed. This may include your name, email address and the content of your message.
The data is processed to respond to your enquiry and communicate with you.
The legal basis is Article 6(1)(f) GDPR. Where your enquiry relates to entering into or performing a contract, Article 6(1)(b) GDPR may also apply.
The data will be deleted once your enquiry has been fully dealt with, unless statutory retention obligations or other legitimate reasons require further retention.
5. User accounts and login
If this website provides user registration or login functionality, the information required to create and manage your account will be processed.
This may include:
- username
- email address
- password or technically derived authentication data
- other profile information you voluntarily provide
The data is processed to provide and manage your user account and the associated functions.
The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the account you requested.
Account data is generally retained for as long as your account exists. It may be deleted at your request or when the account is closed, unless legal retention obligations or legitimate interests require otherwise.
6. Cookies and similar technologies
This website uses cookies and similar technologies.
Cookies are small files stored on your device. Some are necessary for the website to function, for example to maintain sessions, remember language settings or provide requested functionality.
Technically necessary cookies or similar technologies may be used without consent where they are strictly necessary to provide a service expressly requested by you or to transmit a communication, in accordance with applicable law.
Non-essential cookies and similar technologies will only be used where required after obtaining your consent.
Where consent is required, you may withdraw it at any time with effect for the future.
This section should be completed based on the actual cookies and technologies used by your current website.
7. Language settings and TranslatePress
This website uses TranslatePress to provide and switch between language versions.
Depending on the configuration, technical information or language preferences may be stored or processed so that your selected language can be displayed.
The precise technical processing depends on the TranslatePress configuration used on this website.
Where necessary to provide the language function requested by you, the legal basis is Article 6(1)(f) GDPR and, where applicable, the relevant provisions of the TDDDG.
8. WordPress, Elementor and Astra
This website uses WordPress together with Elementor and the Astra theme to create and display its content.
These systems may process technically necessary information, for example information relating to sessions, logged-in users, security functions or other technical operations.
The legal basis for processing required for secure and functional operation is generally Article 6(1)(f) GDPR.
9. Plugins and other website functions
Additional plugins and functions may be used on this website for user management, content presentation, navigation, filtering, image display and other website functions.
Personal data is processed by these functions only where technically necessary or where you explicitly use the relevant functionality.
The final version of this section should reflect the plugins and functions actually active on the website.
10. Third-party content and services
Some pages may contain externally hosted content, images, videos, maps, fonts or other resources.
When such content is loaded, a connection to the relevant third-party provider may be established. Technical information, including your IP address, may be transmitted to that provider.
The actual third-party services used on this website must be identified individually and described here.
11. Legal bases
Depending on the circumstances, personal data may be processed on the following legal bases:
- Article 6(1)(a) GDPR – consent
- Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures
- Article 6(1)(c) GDPR – compliance with a legal obligation
- Article 6(1)(f) GDPR – legitimate interests
Where Article 6(1)(f) GDPR applies, the relevant legitimate interests will be identified in the relevant section of this Privacy Policy.
12. Recipients of personal data
Personal data may be shared with technical service providers where this is necessary to operate the website.
These may include:
- hosting providers
- technical maintenance and support providers
- providers of plugins or other technical services
- email and communication providers
- analytics or other third-party providers, where applicable
The specific recipients depend on the services actually used on this website.
Where personal data is transferred outside the EU/EEA, the applicable requirements of the GDPR will be observed.
13. Retention period
Personal data is stored only for as long as necessary for the respective purpose or as required by statutory retention obligations.
Where no specific retention period is stated, the duration depends on the purpose of processing and applicable legal requirements.
14. Your rights
Subject to the applicable legal requirements, you have the following rights:
- right of access
- right to rectification
- right to erasure
- right to restriction of processing
- right to data portability
- right to object to certain processing
- right to withdraw consent at any time with effect for the future
To exercise your rights, please contact the controller using the contact details above.
15. Right to lodge a complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You may contact the supervisory authority in your place of residence, place of work or the place of the alleged infringement.
16. Data security
Appropriate technical and organisational measures are implemented to protect personal data against loss, destruction, manipulation, unauthorised access and other unlawful processing.
Security measures are reviewed and adapted as necessary in light of technological developments and organisational circumstances.
17. Changes to this Privacy Policy
This Privacy Policy may be updated where the technical configuration of the website, the services used or applicable legal requirements change.
The current version published on this website applies.