SouthTyrolQuests Logo SouthTyrolQuests
en

Privacy Policy

Last updated: August 2026

This Privacy Policy informs you about how we process personal data when you use the SouthTyrolQuests website and app. It also explains your rights under the General Data Protection Regulation (GDPR).

Note: This Privacy Policy is for information purposes only. You do not need to “agree” to the Privacy Policy. Where we require your consent (e.g., for location access), we request it separately.

1. Controller

Dipl.-Ing. Benjamin Hofer Färbergasse 6, 8010 Graz (Austria) Email: privacy@southtyrolquests.com (Controller within the meaning of Art. 4(7) GDPR.)

2. Definitions

  • Website / App / Service: SouthTyrolQuests
  • Personal data: Information relating to an identified or identifiable natural person.
  • Usage data: Technical data generated when using the app (e.g., IP address, device information, timestamps).
  • Device: Smartphone/tablet or another internet-enabled end device.
  • Processor / Service provider: Companies that process data on our behalf.

3. Which data do we process?

Depending on how you use the website or app, we process in particular:

3.1 Location data (GPS)

  • Precise location, if you allow location access on your device.

3.2 Diagnostic data (Sentry)

  • Crash data/error logs, app version
  • Device/operating system information (e.g., model, OS version)
  • Timestamps (when an error occurred), performance data (e.g., loading times)
  • Installation-related identifier (e.g., randomly generated installation ID or platform-specific device identifier), to the extent necessary for error analysis

3.3 Connection/usage data for map display (MapTiler)

  • In particular: IP address
  • Device and app information (e.g., operating system, app version, language settings)
  • Technical usage data required to request and display map tiles

3.4 Analytics/usage data (PostHog)

  • Device and operating system information (e.g., device type, OS version, language)
  • App version
  • In-app actions (e.g., starting, continuing, completing, or resetting a tour; solving a riddle; unlocking the next riddle; using a hint)

3.5 Website features

  • Location data if you allow browser location access for the tour map
  • Connection data, especially IP address and technical browser data, when map tiles are loaded

4. What do we use your data for? (Purposes)

4.1 App functionality – Location (GPS)

Purpose: Displaying your position on the tour map, navigating to puzzles, and unlocking puzzles at the relevant location.

  • Location processing takes place only while the app is open.
  • Your location is not transmitted to us and is not captured in crash reports.
  • We do not create movement profiles and do not store your location permanently.

Legal basis: Your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time in your device settings.

4.2 App functionality – Tour map (MapTiler)

We use MapTiler (provider: MapTiler AG, Switzerland) rendered via the open-source maplibre-gl library for tour map display. Map tiles are rendered locally on the device; your GPS position is not sent to MapTiler.

When the map is opened, a connection to MapTiler servers is established to load map tiles. In particular, IP address and technical usage data required to deliver the map tiles may be processed.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest: providing the map functionality).
  • Switzerland has an EU adequacy decision: no additional safeguards are required for data transfers.

4.3 App analysis and improvement (Sentry)

We use Sentry (Functional Software, Inc.) for error analysis and performance monitoring.

Legal basis: Art. 6(1)(f) GDPR.

Retention period: Crash and diagnostic data are stored for 6 months and then deleted or anonymized.

No merging: We do not combine diagnostic data with location data.

4.4 App usage analytics (PostHog)

We use PostHog (PostHog Inc.) to anonymously analyze app usage and improve its features. Data is sent to an EU-hosted PostHog instance.

No person profiles are created. Only anonymous behavioral events are tracked, such as: starting, continuing, completing, or resetting a tour; solving a riddle; unlocking the next riddle; using a hint.

  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest: improving the app).
  • No merging: we do not combine analytics data with GPS location data.

4.5 Website features – maps and location

On the website, we use browser geolocation only if you explicitly allow access. The tour map can show your current position. We do not store this location data permanently and do not create movement profiles from it.

For the website map, we load map tiles from the OpenStreetMap Foundation (tile.openstreetmap.org) via Leaflet. Your IP address and technical request data are transmitted to the OpenStreetMap Foundation where necessary to deliver the map tiles.

  • Legal basis for browser geolocation: your consent (Art. 6(1)(a) GDPR).
  • Legal basis for map tiles: Art. 6(1)(f) GDPR (legitimate interest: providing the requested website features).

5. Data sharing

  • With service providers/processors (e.g., MapTiler, Sentry, PostHog)
  • With the OpenStreetMap Foundation when map tiles are loaded on the website
  • With authorities if legally required
  • In the context of corporate restructuring

6. Retention (general)

We store personal data only for as long as necessary for the stated purposes or as required by law.

7. Your rights

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR)

To exercise your rights, please contact: privacy@southtyrolquests.com

Right to lodge a complaint

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

8. Data security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, and unauthorized access.

Our website and app may contain links to external websites. We are not responsible for their content or privacy practices.

10. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is available in the app and/or on the relevant page.

11. Contact

Email: privacy@southtyrolquests.com