Privacy Policy

Controller

The controller responsible for processing is AWL Zentrum Ltd, Basepoint Business Centre, Unit 34 John de Mierre House, GB-West Sussex, RH16 1UA, United Kingdom. Reachable at info@awl-zentrum.de. Full details are in the legal notice.

The controller is based in the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom under Art. 45 GDPR; transfers there therefore need no additional safeguards.

We have not appointed a data protection officer; the requirements of Art. 37 GDPR are not met.

What happens when you visit

When you visit a page, your browser transmits technically necessary data to our server so the page can be delivered – including your IP address, the requested path, date and time, and the browser identifier. Without this transmission, no page can be delivered.

Hosting

The site and the database with the facility data run on our own server, rented from Hostinger in a data centre in Frankfurt am Main (EU). No content delivery network or further hosting provider is involved. The database holds no personal data of visitors, except for information you submit yourself via a form (see below).

Maps, routing and images

The maps are based on data from OpenStreetMap and the free map service OpenFreeMap; route calculation uses the OSRM service of FOSSGIS e. V. We do not load map tiles, fonts, symbols or route calculations directly from these providers, but through our own cache on a further server we operate (img.playzonefinder.com, also hosted at Hostinger). Your browser only connects to our server; your IP address is not transmitted to OpenFreeMap, FOSSGIS or OpenStreetMap. That is why the maps load without separate consent.

We also serve images (for example freely licensed images from Wikimedia Commons) through the same server, after caching them there ourselves.

Fonts

Fonts are served from our own server. There is no connection to Google Fonts when the page is loaded.

Consent and local storage

We do not set cookies for advertising purposes. Your decision from the consent banner – whether you allow the optional visitor statistics – is stored exclusively in your browser's local storage, not on our server.

As long as you have not decided, the same applies as necessary only: no analytics. Declining is a single click, just like accepting. Via Cookie settings in the footer of every page, you can change your choice at any time or withdraw your consent; the withdrawal takes effect immediately and does not affect processing carried out before it.

Analytics (only with consent)

Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) is only loaded if you have consented to the visitor statistics. Your shortened IP address is processed; a transfer to the USA cannot be ruled out and relies on the EU-US Data Privacy Framework or standard contractual clauses under Art. 46 GDPR. Advertising features are switched off.

Without your consent, none of these tools is loaded: there is no tracking script in the page source, no request is sent out, and nothing is stored on your device.

Forms (suggest an entry, claim an entry, submit a photo or a review)

When you submit a form, we process the information you provide there – for example your name, email address, optionally a phone number, the entry concerned, your message and, where applicable, a photo. We use this to review your report, contact you with questions and correct the directory. The information is stored on our server and forwarded by email to our mailbox info@awl-zentrum.de.

Business data from external sources

To keep the information about recycling centres up to date, we retrieve public business data (such as opening hours, phone number, website) from Google services and via the data service DataForSEO. These queries run exclusively server-side and without any connection to visitors of the site; nothing is loaded for this purpose when you visit the site, and no visitor data is transmitted.

Legal bases

• Delivery of the site, server logs, maps and images via our own servers: Art. 6(1)(f) GDPR. Our legitimate interest is being able to deliver the site and protect it against attacks.
• Analytics: Art. 6(1)(a) GDPR (consent); for storing and reading information on your device, additionally § 25(1) TDDDG (Germany) or § 165(3) TKG 2021 (Austria).
• Storing your consent decision: § 25(2) no. 2 TDDDG or § 165(3) TKG 2021 (strictly necessary).
• Forms and reports: Art. 6(1)(f) GDPR (legitimate interest in accurate directory information); for operators claiming their entry, Art. 6(1)(b) GDPR.

How long data is kept

• Server logs on our server are automatically deleted after a short period.
• Your consent decision resides exclusively in your browser's local storage until you change it, withdraw it, or clear your browser storage.
• A report submitted via a form is kept until it has been reviewed and processed, for a maximum of twelve months.

Who else processes the data

• Hostinger operates the data centre where our servers are located (EU, Frankfurt am Main).
• Google Ireland Limited (Google Analytics 4) – only with consent.
• Google Search Console shows us how this site is found in Google Search. It evaluates Google's own search data and sets nothing in your browser.
• We do not sell any data and do not share anything for advertising purposes.

Your rights

You can request information about the data stored about you (Art. 15 GDPR), its rectification (Art. 16), its erasure (Art. 17), restriction of processing (Art. 18) and receipt of it in a portable format (Art. 20).

You can object at any time to processing based on a legitimate interest (Art. 21 GDPR).

You can withdraw a consent you have given at any time – via Cookie settings in the footer of every page. The withdrawal takes effect immediately; processing carried out lawfully before that remains unaffected.

For all of this, a message to info@awl-zentrum.de is sufficient.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your habitual residence or place of work.

Notes for individual countries

United Kingdom: The controller is AWL Zentrum Ltd (address above). You can complain to the Information Commissioner's Office (ICO, ico.org.uk).

Norway: You can complain to the Norwegian Data Protection Authority, Datatilsynet (datatilsynet.no).

Switzerland and Liechtenstein: Our servers are located in Germany, a country with adequate data protection under Annex 1 of the Swiss Data Protection Ordinance. If you consent to Google Analytics, data may also be transferred to the USA; Google LLC is certified under the Swiss-U.S. Data Privacy Framework.

USA: Audience measurement only starts after your consent; we do not respond separately to “Do Not Track” signals from your browser. After your consent, Google Analytics may also collect data about your use across different websites. The directory is not directed at children under 13; we do not knowingly collect personal information from children under 13. This policy is effective as of the date stated above; we publish changes on this page with a new date. Google Analytics stores event data for two months and user-level data for 14 months, then deletes it automatically.

Canada: AWL Zentrum Ltd (address above) is accountable for privacy and can be reached at info@awl-zentrum.de. You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) and, in Québec, to the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Japan: Please send requests for disclosure, correction, deletion or cessation of use of your data by email to info@awl-zentrum.de; we do not charge a fee for this. To protect your data, we use encrypted connections (HTTPS) and restrict access to authorised persons. Our servers are located in Germany (European Union); the EU is recognised by Japan's Personal Information Protection Commission (PPC) as having an equivalent level of protection. Google Analytics only transfers data to the USA with your consent. Information under Article 28(2) APPI on transfers to the USA: the recipient country is the United States of America. According to the PPC's country report (survey as of October 2021), there is no comprehensive data protection law there, but laws for individual sectors, such as the Electronic Communications Privacy Act (ECPA), the Gramm-Leach-Bliley Act (GLBA) and the Health Insurance Portability and Accountability Act (HIPAA); the report lists no EU adequacy decision, and the USA has participated in the APEC CBPR system since 25 July 2012. The report does not list any data localisation obligations or obligations to cooperate with government information gathering that could significantly affect your rights. Measures taken by the recipients: Google LLC is certified under the EU-U.S. Data Privacy Framework; Google Analytics transmits data encrypted (HTTPS with HSTS), and according to Google uses it only in line with its contract with us and our settings. This service is only loaded after your consent.