Privacy Policy

General information

This privacy notice explains the processing of personal data when visiting the YachtMemory marketing website at www.yachtmemory.net and using the public live demo embedded from app.yachtmemory.net.

Under the current technical configuration, YachtMemory does not use its own advertising networks or analytics and marketing trackers. Processing necessary to deliver the website and optional third-party demo services is described below.

Controller

Fritz-Jochen Weber, Wildbader Straße 7a, 68239 Mannheim, Germany.

Email: [email protected].

Self-hosting and technical delivery

The website runs on a server owned and operated by the controller in Mannheim, Germany. Cloudflare serves as an upstream reverse proxy to provide public connectivity and secure the connection.

Delivery of the website involves processing technical connection data. The legal basis is Article 6(1)(f) GDPR (legitimate interest in secure and reliable website operation).

Apache server logs and retention

The web server records technical access information such as request times and requested resources, HTTP status, transferred data volume and, where supplied, browser identifiers and referrers. Due to the Cloudflare proxy and current Apache configuration, logs generally contain a Cloudflare server IP address rather than the original visitor IP. Cloudflare itself may process the original visitor IP address.

Apache access and error logs are rotated daily, with 14 previous rotations retained on the live server. Log files are also included in Borg backups, which are deleted after 30 days. Consequently, individual entries may be retained for approximately 45 days in total, unless separately retained to investigate a security incident.

The purpose is troubleshooting, operational security and protection against attacks. The legal basis is Article 6(1)(f) GDPR.

Cloudflare

Cloudflare (Cloudflare, Inc., USA) acts as an upstream service. For delivery and security, Cloudflare processes connection data, including visitor IP addresses, requested resources and technical request characteristics.

Managed security rules and Browser Integrity Check are among the functions enabled for yachtmemory.net. Additional security checks may take place depending on the request. Cloudflare may set necessary security cookies, in particular cf_clearance after a challenge. No cookies were observed during one ordinary page-load test; this does not rule out cookies during security events.

Personal data may be processed or transferred outside the European Economic Area, particularly to the United States. Cloudflare provides a Data Processing Addendum (DPA), which forms part of its Self-Serve Subscription Agreement. For relevant international transfers, the DPA provides among other safeguards EU Standard Contractual Clauses under Article 46 GDPR. More information: https://www.cloudflare.com/cloudflare-customer-dpa/ and https://www.cloudflare.com/privacypolicy/

The legal basis is Article 6(1)(f) GDPR (website delivery and protection).

Privacy preferences and local storage

Visitors can allow or reject optional external live-demo content. The choice (accepted or rejected) is stored in the browser localStorage under the key ym_external_content_consent_v1.

There is no preset expiry: the setting remains until it is changed or the browser storage is cleared. The “Privacy settings” link in the footer allows visitors to change their choice or withdraw consent for future loading at any time.

This storage is used solely to honour the visitor’s explicit choice, not for advertising or analytics. Where storage of or access to information on a device is relevant, Section 25 TDDDG applies, including the exemption for strictly necessary functions under subsection 2.

Optional live demo

The public demo shows technical onboard data and vessel-stay information from Silent-Sea. The YachtMemory widgets are provided through app.yachtmemory.net. Until permission is given, the marketing website does not load them as iframes.

Only after express approval can widgets and their external resources be loaded. Other information pages remain usable without approval. Withdrawal prevents future loading but cannot undo data already transmitted.

Where loading optional external content involves processing personal data, the legal basis is Article 6(1)(a) GDPR. Where device storage or access requires consent, Section 25(1) TDDDG applies.

OpenStreetMap maps

After approval, map tiles may be requested from tile.openstreetmap.org (OpenStreetMap Foundation). The browser connects directly to the map service, potentially transmitting the IP address, technical browser and request data, and the map areas requested.

More information: https://osmfoundation.org/wiki/Privacy_Policy

Leaflet via unpkg.com

Interactive maps use Leaflet. Some JavaScript and CSS assets are loaded from unpkg.com. Technical connection data may be transmitted to the service providing these files. Requests occur only after the live demo has been approved.

Chart.js via jsDelivr

Selected battery, wind and anchor-chain-force charts use Chart.js loaded from cdn.jsdelivr.net. The provider may receive technical connection data when these files are requested. Requests occur only after the live demo has been approved.

Contact by email

When you contact us by email, we process the sender address, message content and any voluntarily provided information to handle your enquiry and related correspondence.

Depending on the request, the legal basis is Article 6(1)(b) GDPR (pre-contractual steps) or Article 6(1)(f) GDPR (legitimate interest in responding to enquiries). Data is deleted once no longer needed for these purposes, unless legal retention obligations apply.

Your rights

Subject to GDPR requirements, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), where applicable data portability (Article 20), and objection to processing based on legitimate interests (Article 21). Consent may be withdrawn at any time for the future (Article 7(3)).

For requests, contact [email protected]. You also have the right to complain to a data protection supervisory authority. The authority responsible at the controller’s location is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg: https://www.baden-wuerttemberg.datenschutz.de/

Changes to this notice

This notice will be updated when technology, services or legal requirements change. Last updated: 12 October 2026.