Privacy
In short: this site collects as little as possible. No cookies, no tracking, no ad networks, no fonts or videos from other servers. This page says exactly what happens — and nothing that doesn't.
This is a translation. If anything differs, the German version applies.
Who is responsible?
Alexander RenzMühlbachstraße 102
88662 Überlingen, Germany
Phone: +49 152 53287793
Email: hi@surftripcrew.com
Hosting
The site is hosted by Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit, Strato keeps technical log files, including your IP address, to deliver the site securely and reliably. The legal basis is my legitimate interest in a working website (Art. 6(1)(f) GDPR). More: strato.de/datenschutz.
Cookies and tracking
There aren't any. This site sets no cookies and uses no analytics or tracking tool. Fonts, images and videos come from this server, not from Google, YouTube or anyone else. If that ever changes, it will say so here first — and where needed, I'll ask you before.
The waiting list
What is stored: your first name, your email address, which destinations you ticked and — if you tell us — how long you've been surfing, which vibe you like, whether you want yoga, what you eat (everything, vegetarian or vegan) and whether you're coming alone or bringing people, and whether you ride a longboard or shortboard. And, if you write it down, your idea for a trip. Plus the time you signed up and confirmed.
On the pages for individual destinations (for example Imsouane) you join the same list, just with the destination already selected.
What for: so I can write to you when a new trip is set — destination, dates, price, open spots — and suggest the trip that fits what you like. Nothing else. No general newsletter, no passing your data on.
How: after signing up you get an email with a link. Only when you click it are you on the list (double opt-in). Anyone who hasn't confirmed within 30 days is deleted automatically.
Where: the list is a file on the Strato server, not with a newsletter provider. I get an email notification for each new sign-up; that also runs through the Strato server.
How long: until you unsubscribe. Every email from me has an unsubscribe link — one click and your entry is deleted completely. You can also just write to me.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time.
Protection against abuse
To stop anyone flooding the list with thousands of fake sign-ups, an encrypted value derived from your IP address is stored with each sign-up — not the readable IP — and deleted after one hour. No more than five sign-ups per hour are possible from the same place. The legal basis is my legitimate interest in a list without spam (Art. 6(1)(f) GDPR).
When you ask to join a trip
On a trip page you can ask whether you can come along.
What is stored: your first name, your email address, how many of you there are and — if you tell us — how long you've been surfing and whatever else you write. Plus the time of your request. I get an email that you've asked.
What for: so I can get in touch and work out with you whether you're coming. Nothing else — it doesn't put you on the waiting list.
Legal basis: your request, i.e. steps before a possible shared trip (Art. 6(1)(b) GDPR). If you don't come along, I delete the request no later than three months after the trip; earlier if you write to me. The same abuse protection as for the waiting list applies.
When you come along
A trip you're invited to has its own page. You can only reach it through a personal link — search engines don't find it.
What is stored: your name, whether you're in, your surf level and — if you provide them — your email address, your preferences (vibe, yoga, food, own board or rental) and wishes like "cabin with …". Plus what you've already paid.
Who sees what: the others in your crew see your name, your role, your level, whether you're confirmed and which offer you marked as your favourite. Nobody but you and me sees your email address, preferences, wishes and payments. The public page of a trip only shows numbers — how many are in — never names.
In your browser: after signing up, your browser remembers a random key. Only with it can you change your details later — and nobody else can confirm or cancel in your name. Your personal link contains the same key, so you can continue on another device. This is technically necessary for the feature you use (§ 25(2) no. 2 TDDDG). It is not a cookie and is not analysed.
Legal basis: organising the shared trip (Art. 6(1)(b) GDPR). After the trip and the final accounts, I delete these details, at the latest six months later — unless the law requires keeping records longer.
Encryption
The connection to this site is encrypted (SSL/TLS). You can tell by the "https://" and the lock in the address bar.
Your rights
You can find out at any time, free of charge, what I have stored about you, and have it corrected, deleted or restricted. You can withdraw consent at any time. An email to hi@surftripcrew.com is enough.
You also have the right to complain to a data protection authority. The competent one is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Postfach 10 29 32, 70025 Stuttgart, Germany (baden-wuerttemberg.datenschutz.de).
As of: October 2026