This policy explains what personal data is processed when you visit coasttoisland.com and what rights you have under the EU General Data Protection Regulation (GDPR).
Who is responsible
Emre Erol
Schlüterstraße 87
85057 Ingolstadt
Germany
Email: emreerol@gmail.com
Summary
- The site does not use analytics, tracking pixels, advertising networks or social media plugins.
- The site itself does not set cookies.
- Fonts and images are served from this domain. Your browser does not contact Google Fonts or other font or image services when you load a page.
- The site is hosted on Cloudflare, which processes technical connection data (such as your IP address) to deliver the pages and protect the site.
- Some links lead to booking platforms (affiliate links). Those platforms only receive your data if you click through to them.
Hosting and server logs (Cloudflare)
This site is hosted on Cloudflare Pages and delivered through Cloudflare’s network. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
When you open a page, your browser necessarily sends technical data to Cloudflare’s servers: your IP address, the date and time of the request, the page requested, the browser and operating system (user agent) and the referring page. Cloudflare uses this data to deliver the site, to detect and block attacks and abuse, and keeps it in log files for a limited period.
The legal basis is our legitimate interest in providing a secure, reliable website (Art. 6(1)(f) GDPR). We have a data processing agreement with Cloudflare; Cloudflare includes its standard Data Processing Addendum in its self-serve terms.
Data may be processed in the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Cloudflare states that it would rely on the EU Standard Contractual Clauses if that certification lapsed.
For security purposes, Cloudflare may set strictly necessary cookies, for example to distinguish human visitors from bots. These do not track you across websites. Their legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
More information: Cloudflare Privacy Policy and Cloudflare GDPR page.
Affiliate links
Some links on this site are affiliate links to booking platforms such as GetYourGuide and Booking.com. Booking.com links may run through the affiliate network CJ (Commission Junction). These links are marked as sponsored. See our affiliate disclosure.
Nothing is transmitted to these platforms while you are only reading this site. If you click an affiliate link, your browser opens the platform’s website (in some cases via a redirect through the affiliate network). The platform or network can then record that you came from this site, usually with a cookie or an ID in the link, so that a booking can be attributed to us and a commission paid. We do not receive your name, contact details or payment data, only aggregated information about bookings and commissions.
What the platform does with your data, including any cookies it sets, is governed by its own privacy policy and, where required, its own consent banner. Our legal basis for including affiliate links is our legitimate interest in financing this site (Art. 6(1)(f) GDPR).
Links to other websites
Our guides link to ferry operators, booking sites, official authorities and other sources. When you follow such a link, the other website’s privacy policy applies. We have no influence on how they process data.
Contacting us by email
If you email us, we process your email address and the content of your message to answer you. The legal basis is Art. 6(1)(f) GDPR (our interest in answering enquiries) or Art. 6(1)(b) GDPR if your enquiry relates to a contract. We delete the messages once they are no longer needed, unless we are legally required to keep them. Our email is provided by Google (Gmail), so messages are also processed by Google under its terms.
Your rights
You have the right to:
- access the personal data we hold about you (Art. 15 GDPR),
- have incorrect data corrected (Art. 16 GDPR),
- have your data deleted (Art. 17 GDPR),
- have processing restricted (Art. 18 GDPR),
- receive your data in a portable format (Art. 20 GDPR),
- object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 21 GDPR).
To exercise these rights, email us at the address above.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
Changes
We will update this policy if we change how the site works, for example if we add analytics or embedded widgets. The current version always applies.
Last updated: 14 October 2026