Privacy
Policy
Last updated: September 18, 2025
This Privacy Policy explains how Polheim ("we", "us", "our") collects, uses, and protects your personal information when you visit our website at https://polheim.com and use our services.
1. Who We Are
Polheim is operated by Milan Kaszas, based in Germany.
If you have any questions about this policy, please contact us at:
2. What Data We Collect
We may collect the following personal data:
- Account information: email address, username, password.
- User content: adventure plans, gear loadouts, posts you create.
- Technical data: IP address, browser type, operating system, log files.
- Cookies and analytics data: usage patterns, site performance metrics.
3. How We Collect Data
- When you register an account.
- When you create or share content.
- Automatically, through cookies and analytics tools.
4. Why We Process Your Data
We process your personal data on the following bases:
- Contract: to provide you with an account and access to the platform.
- Consent: for optional features such as newsletters or non-essential cookies.
- Legitimate interests: to keep our service secure, prevent abuse, and improve site performance.
5. How We Use Your Data
- To operate your account and provide services.
- To moderate and publish user-generated content.
- To improve our platform through analytics and feedback.
- To enable content sharing on social media platforms (when you choose).
6. Sharing of Data
We may share your data with:
- Hosting providers (e.g., DigitalOcean, GitLab).
- Analytics providers (e.g., Google Analytics).
- Moderation and security tools to detect abuse or illegal content.
We do not sell or rent your personal data to third parties.
7. International Data Transfers
If we transfer data outside the European Economic Area (EEA), we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
8. Data Retention
- Account data is stored as long as your account is active.
- If you delete your account, we will erase or anonymize your data unless legal obligations require retention.
- Log data is generally retained for up to 12 months.
9. Your Rights
As an EU resident, you have the following rights under GDPR:
- Access: request a copy of your data.
- Rectification: correct inaccuracies.
- Erasure: request deletion ("right to be forgotten").
- Restriction: limit how your data is processed.
- Data portability: obtain a copy in machine-readable format.
- Objection: object to processing under certain conditions.
- Complaint: file a complaint with your local data protection authority.
10. Security
We take appropriate technical and organizational measures to protect your personal data, including encryption and access controls. However, no method of transmission over the internet is 100% secure.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be published on this page, with the "last updated" date shown above.