Privacy policy

Controller

Karsten Kühn
Linkstr. 57
München
Email: info@vaycando.com

Hosting

This website is hosted by All-Inkl.com. When you access the pages, the provider processes technically necessary data (incl. IP address, time of access) in server log files on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in secure and stable operation. Further information: All-Inkl.com (privacy).

Server log files & retention

Data recorded in server log files is stored only for as long as necessary for secure operation and for analysing malfunctions or attacks, and is then deleted or anonymised. This data is not merged with other data sources.

Encryption (SSL/TLS)

For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.

Analytics (Cloudflare Web Analytics)

To improve our offering we use Cloudflare Web Analytics. Measurement is cookieless and only takes place after your explicit consent (Art. 6(1)(a) GDPR). Without consent, no analytics script is loaded. You can withdraw your consent at any time via the cookie settings.

Affiliate advertising (Awin)

We display affiliate advertising banners via the Awin partner network (provider: AWIN Ltd, 2 Thomas More Square, London E1W 1YN, United Kingdom). Such creatives are labelled "Advertisement" and contain partner links marked with rel="sponsored".

When a banner is displayed, a tracking pixel and possibly cookies from Awin are loaded. Personal data is transmitted to Awin, in particular your IP address, date/time of access, browser/device information and — if you click a partner link — the attribution of a referred purchase (tracking/cookie ID). The purpose is delivery and settlement of affiliate advertising (commission tracking).

The legal basis is your consent (Art. 6(1)(a) GDPR). Banners are loaded only after you have consented to the "Marketing" category. Without consent, no creative and no Awin pixel is loaded. You can withdraw your consent at any time with effect for the future via the cookie settings; banners already shown are removed immediately after withdrawal. Provider address and further details: Awin site notice.

To be distinguished from these are the partner buttons in our guide articles, which lead to offers from kurz-mal-weg.de (provider: GetAway Travel GmbH, Hainstraße 1, 04109 Leipzig, Germany; Leipzig local court, HRB 43653). They are plain forms without any script or cookie and are therefore shown regardless of your consent. Only when you click does our server redirect you via the short-link domain tidd.ly and the Awin redirect awin1.com to the provider. In doing so, your IP address, date/time, browser and device information and a tracking ID for commission attribution are transmitted. No transfer to a third country takes place. The legal basis is our legitimate interest in funding this site (Art. 6(1)(f) GDPR); the transfer only happens as a result of your deliberate action.

Advertising and partner links (Travelpayouts)

We also embed advertising and travel offers via the Travelpayouts advertising network (provider: Go Travel Un Limited, 4007 Central Plaza, 18 Harbour Road, Wanchai, Hong Kong; company number 1658681). The ad script of the "Drive" service is loaded from the domain tpembars.com.

When the script loads, personal data is transmitted to Travelpayouts or its advertising partners, in particular your IP address, date/time of access, browser/device information and cookies or tracking IDs used to serve and settle the advertising. The purpose is delivery of relevant (travel) advertising and commission tracking. The script additionally reports technical errors to sentry.avs.io, an error-diagnostics service used by Travelpayouts; this transmits details of the error, your browser and device information and your IP address. The legal basis is your consent (Art. 6(1)(a) GDPR); the script is loaded only after you have consented to the "Marketing" category. Without consent, nothing is loaded from tpembars.com, no cookie is set and sentry.avs.io is not contacted. You can withdraw your consent at any time with effect for the future via the cookie settings.

The partner buttons we place on individual comparison pages are a different matter: they are plain forms without any script or cookie and are therefore shown regardless of your consent. As long as you do not click such a button, nothing is transmitted to Travelpayouts. Only when you click does our server redirect you to the redirect domain kiwi.tpx.lv; in doing so, your IP address, date/time, browser and device information and a tracking ID for commission attribution are transmitted. The legal basis is our legitimate interest in funding this site (Art. 6(1)(f) GDPR); the transfer only happens as a result of your deliberate action.

Provider based in Hong Kong: there is no EU Commission adequacy decision for Hong Kong. By giving your consent you also consent to the transfer of your data to a third country (Hong Kong or the servers of the advertising partners used) pursuant to Art. 49(1)(a) GDPR; an equivalent level of data protection cannot be guaranteed there. Further information: Travelpayouts privacy policy.

Partner buttons and creatives (CHECK24)

On individual comparison pages we place partner buttons leading to offers from CHECK24 (provider: CHECK24 Vergleichsportal Reise GmbH, Trappentreustraße 1–3, 80339 Munich, Germany; Munich local court, HRB 208238). They work as described above: a form without any script or cookie, shown regardless of your consent. Only when you click does our server redirect you to a redirect domain of the provider (currently c24n.de). In doing so, your IP address, date/time, browser and device information and a tracking ID for commission attribution are transmitted. No transfer to a third country takes place. The legal basis is our legitimate interest in funding this site (Art. 6(1)(f) GDPR); the transfer only happens as a result of your deliberate action.

Should we additionally embed CHECK24 creatives that load a tracking pixel or cookies when displayed, these are loaded only after you have consented to the "Marketing" category (Art. 6(1)(a) GDPR). The data transmitted then includes in particular your IP address, date/time of access and browser/device information. Without consent, no such creative and no tracking pixel is loaded; you can withdraw your consent at any time with effect for the future via the cookie settings. Further information: CHECK24 privacy notice.

Contact form

If you contact us via the contact form, we process your details (name, email address, message) to handle your enquiry (Art. 6(1)(a) and (b) GDPR). Transmission takes place via encrypted email (SMTP) to our own mailbox at All-Inkl.com; no disclosure to other third parties takes place. We store the data until your enquiry has been fully dealt with and then delete it, unless statutory retention obligations require otherwise.

Spam protection (Cloudflare Turnstile)

To protect the form against automated abuse we use Cloudflare Turnstile (a service of Cloudflare, Inc., USA). In doing so, your IP address and technical browser information are transmitted to and evaluated by Cloudflare. The legal basis is our legitimate interest in preventing spam and attacks (Art. 6(1)(f) GDPR). To limit abuse we also briefly process your IP address server-side (stored hashed).

Transfers to third countries

We use services provided by Cloudflare, Inc. (USA) (Turnstile spam protection and Web Analytics). In this context, personal data may be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, so an adequate level of data protection is ensured (Art. 45 GDPR).

Your rights

You have the right to access, rectification, erasure, restriction of processing and data portability. Where processing is based on your consent, you may withdraw it at any time with effect for the future. You also have the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority.

Last updated: August 2026