Skip to content
deen
Appearance
Wind & cams for Cape Town

Privacy Policy

This is a translation for convenience. The German version of this page is the authoritative one; in case of any discrepancy, the German text prevails. You can read it at cape-town.at/datenschutz.

Version 21.09.2026

Introduction and overview

We have written this privacy policy (version 21.09.2026) to explain to you, in accordance with the General Data Protection Regulation (EU) 2016/679 and applicable national law, what personal data we as the controller – and the processors we commission (e.g. our provider) – process, will process in future, and what lawful options are available to you.
In short: we tell you comprehensively about the data we process about you.

Privacy policies usually sound very technical and use legal jargon. This one is meant to describe the important things as simply and transparently as possible. Where it helps clarity, technical terms are explained in plain language and links to further information are provided.

If questions remain, please contact the controller named below or in our legal notice.

Scope

This privacy policy applies to all personal data processed by us and to all personal data processed by companies commissioned by us (processors). By personal data we mean information within the meaning of Art. 4 no. 1 GDPR, such as a person's name, e-mail address and postal address. The scope of this privacy policy covers:

In short: the privacy policy applies to all areas in which personal data are processed in a structured way through the channels listed. Should we enter into legal relations with you outside these channels, we will inform you separately where necessary.

Below we give you transparent information about the legal principles and provisions of the General Data Protection Regulation that allow us to process personal data. As far as EU law is concerned, we refer to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, which you can read online at EUR-Lex.

We process your data only where at least one of the following conditions applies:

  1. Consent (Article 6 (1) (a) GDPR): you have given us your consent to process data for a specific purpose. On this website this concerns in particular the loading of external content such as weather widgets, webcams and videos.
  2. Contract (Article 6 (1) (b) GDPR): we process your data in order to perform a contract or pre-contractual obligations with you – for example, an enquiry about an advertising placement.
  3. Legal obligation (Article 6 (1) (c) GDPR): where we are subject to a legal obligation, we process your data. For example, we are required by law to retain invoices for accounting purposes.
  4. Legitimate interests (Article 6 (1) (f) GDPR): where we have legitimate interests that do not override your fundamental rights, we reserve the right to process personal data. For instance, we need to process certain data in order to operate this website securely and efficiently.

In addition to the EU regulation, national law also applies:

Contact details of the controller

If you have questions about data protection or the processing of personal data, you will find the contact details of the controller pursuant to Article 4 (7) GDPR below:

Tobias Meier-Nkunzana
Berg 41
6840 Götzis
Austria

E-mail: info@cape-town.at
Phone: +43 664 5120574
Legal notice: cape-town.at/impressum

Retention period

It is our general principle that we store personal data only for as long as is strictly necessary to provide our services. This means we delete personal data as soon as the reason for processing them no longer exists. In some cases we are legally obliged to retain certain data beyond the original purpose, for example for accounting purposes.

If you wish your data to be deleted or withdraw your consent to processing, the data will be deleted as quickly as possible, unless a retention obligation applies.

We inform you about the specific duration of each processing activity below.

Your rights under the GDPR

In accordance with Articles 13 and 14 GDPR we inform you of the following rights, so that data are processed fairly and transparently:

In short: you have rights – please do not hesitate to contact the controller named above.

If you believe that the processing of your data infringes data protection law or that your data protection rights have been violated in some other way, you may complain to the supervisory authority. In Austria this is the Data Protection Authority, whose website you will find at https://www.dsb.gv.at/. In Germany there is a data protection commissioner for each federal state; for further information you can contact the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

On your first visit, a notice appears at the bottom of the screen with two equally weighted buttons: Accept and Decline. It is a bar, not a window that blocks the page – the website is fully usable without making a decision.

As long as you have made no selection, no connection is made to any of the third parties named below. No data are transmitted to them, and nothing is stored on your device by them. This applies expressly to Google Analytics as well: before you consent, not a single request goes to any Google server, not even a “cookieless” ping. Independent of this is the visit counting with Cloudflare Web Analytics, which works without cookies and without storing anything on your device and therefore does not depend on consent – see the section of that name.

Your choice controls this content:

If you decline – or have not yet chosen – you will see a placeholder in place of the content describing what would be loaded and to whom data would be transmitted. The content is loaded only when you tap that placeholder. You lose no functionality; you simply decide consciously, element by element.

If you accept, this content is loaded automatically as you scroll – with one exception: the camera at Langebaan still starts only when you tap play. With your consent, Google Analytics is loaded immediately and on every page. There is no placeholder to tap for Google Analytics: it is switched on solely by “Accept” in the notice bar.

Changing your decision: in the footer of every page there is a link that reopens the notice, so you can withdraw or give your consent at any time. A withdrawal takes effect for the future; the lawfulness of processing carried out until then remains unaffected. You can also clear your browser's local storage – after which the initial state applies again and nothing is loaded. If you decline after having accepted earlier, the page deletes the two Google Analytics cookies at once, sends nothing further to Google and reloads itself so that no script already loaded keeps running.

Cookies and local browser storage

Without your consent this website sets no cookies

This is not a matter of wording but a property of this website: as long as you have not consented, we set no cookie whatsoever. Not for recognition, not for statistics, not for advertising. Only with your consent does Google Analytics set two cookies on our domain; they are listed individually further down. Cookies from other third parties can only arise if you have consented or have tapped an external element yourself – and those cookies then come from the provider concerned, not from us. The following sections say which ones.

What is stored instead: local storage

So that the site can remember your settings, we use your browser's local storage. This is an area your browser reserves for a website. Unlike a cookie, this information is never transmitted to us on any page request. It stays on your device, we do not see it, and it never reaches our server.

The only things stored are:

These entries contain no name, no e-mail address and no identifier that identifies you as a person. They serve only the function you triggered yourself and are read for no other purpose.

For the duration of your visit: session storage

The site also places four entries in your browser's session storage. It works like local storage with one difference: the entries are deleted the moment you close the tab. These, too, are never transmitted to us at any point.

The only things stored are:

These entries, too, contain no name and no identifier that identifies you as a person. They record nothing but a decision you made yourself.

So the site opens without a connection: the offline store

As a third area, the site uses your browser's offline store (Cache Storage). It, too, is never transmitted to us at any point.

The only thing stored is:

Only after your consent: the two Google Analytics cookies

If you have tapped “Accept” in the notice bar, the page loads Google Analytics, and its script sets two cookies. Unlike the entries above, these are real cookies: they sit on the domain cape-town.at and are therefore sent to our server with every page request; we do not read them ourselves. Without your consent neither of them comes into being.

The only ones set are:

Google states a lifetime of two years for both cookies, renewed with every visit. Many browsers shorten that: Chrome caps cookies at 400 days at most, Safari deletes them after seven days without a return visit. If you decline via the “Change cookie choice” link in the footer, the page deletes both cookies at once. Everything else is in the section “Google Analytics”.

Right to object – how to delete this

You can delete or block local storage, the offline store and all cookies at any time in your browser settings (in most browsers under “site data”); session storage disappears by itself when you close the tab. The website will remain fully usable afterwards; it simply will not know your settings any more. Instructions for the common browsers:

Chrome · Safari · Firefox · Microsoft Edge

Legal basis

Storing information on your device is governed in Austria by § 165 (3) TKG 2021 and in Germany by § 25 TDDDG. The entries listed above – in local storage, in session storage and in the offline store alike – are strictly necessary for the function you requested in each case and therefore take place without consent (§ 165 (3) no. 2 TKG 2021 and § 25 (2) no. 2 TDDDG). Everything that is not strictly necessary – that is, all third-party content and Google Analytics with its two cookies – is loaded only with your consent (Art. 6 (1) (a) GDPR; for the cookies § 165 (3) TKG 2021 and § 25 (1) TDDDG).

Web hosting

What is web hosting?

When you visit websites, certain information – including personal data – is automatically created and stored, and that is true of this website too. These data should be processed as sparingly as possible and only with justification. To display the website, your browser has to connect to another computer on which the website is stored: the web server. Operating a web server is generally handled by professional providers.

What data are processed?

When our website is accessed, the server generally processes data such as:

How long are data stored?

The retention period is determined by our hosting provider Cloudflare and is generally less than 24 hours for the plans we use. See the next section. We do not pass these data on, but we cannot rule out that they may be inspected by authorities in the event of unlawful conduct.

Legal basis

Lawfulness follows from Art. 6 (1) (f) GDPR (protection of legitimate interests), since professional hosting is necessary to present the website securely and in a user-friendly way. A data processing agreement pursuant to Art. 28 GDPR is in place between us and the hosting provider.

Cloudflare

What is Cloudflare?

This website is operated on Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). Cloudflare is at once our hosting provider, our content delivery network (CDN) and our security service. A CDN is a network of connected servers that holds copies of our website worldwide so that it can be delivered from a server near you. Cloudflare additionally protects the website against attacks and abusive access.

Cloudflare also holds:

What data are processed?

Cloudflare receives data such as IP address, log information, security fingerprints and performance data. Log data help Cloudflare to detect threats. Cloudflare processes these data as part of its services in compliance with applicable law, including the GDPR.

How long and where are the data stored?

Cloudflare stores information mainly in the USA and in the European Economic Area. User-level data are generally stored for less than 24 hours on the plans we use. Exceptions are possible where IP addresses trigger security alerts.

Legal basis

The use of Cloudflare is based on our legitimate interest (Art. 6 (1) (f) GDPR) in operating this website securely and efficiently. Since Cloudflare is also our hosting provider, its use is necessary in order to provide the website at all and does not depend on consent.

Cloudflare also processes data in the USA. Cloudflare, Inc. is listed as an active participant in the EU-US Data Privacy Framework, with the status “Active – Re-certification under Review”: the certification is in effect and its renewal is currently being reviewed (as at 21.09.2026, https://www.dataprivacyframework.gov/list). More information about the framework is available from the European Commission. Cloudflare also uses standard contractual clauses (Art. 46 (2) and (3) GDPR), available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj. More in Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.

Cloudflare Web Analytics

What is Cloudflare Web Analytics?

Cloudflare Web Analytics is the visit counter of our hosting provider Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) – the same company that delivers this website anyway (see the section “Cloudflare”). No further company is added. The counting runs on every visit, whatever you choose in the notice bar.

How it works

When a page is opened, your browser loads a small script from static.cloudflareinsights.com. That script sends one report when the page loads and one when you leave it to cloudflareinsights.com. As with any connection, Cloudflare necessarily receives your IP address in the process; according to Cloudflare it is discarded at the nearest data centre and not stored.

Which data are processed – and which are not?

What is transmitted is the address of the page viewed, the address of the referring page, timing measurements of the page load (how quickly the page was built on your device) and a random number that is valid for that one page view only and is stored nowhere. From your browser's technical details Cloudflare derives browser, operating system and device type; Cloudflare also reports the country the request comes from.

Cloudflare Web Analytics sets no cookies and stores nothing on your device – neither in local storage nor anywhere else. According to Cloudflare no “fingerprint” is built from IP address, browser identification or other characteristics either, and individual visitors are not recognised across page views or websites. For Cloudflare a “visit” is simply a page view that does not come from another page of this website. That the script sets no cookies and puts nothing on the device is something we measured ourselves before using it (21.09.2026), and it is checked again automatically with every change to the website.

How long are the data stored?

According to Cloudflare the counting data can be retrieved for the previous six months; the complete individual reports are kept for seven days and continued only as a sample after that.

Legal basis

The counting is based on our legitimate interest (Art. 6 (1) (f) GDPR) in knowing how many people use the website and which pages are needed. Because no cookies are set for it, nothing is stored on your device and no visitors are recognised, we do not obtain consent for it. Cloudflare processes the data on our behalf on the basis of the data processing addendum Cloudflare concludes with its customers: https://www.cloudflare.com/cloudflare-customer-dpa/. For transfers to the USA, what is said in the section “Cloudflare” applies. You may object to the processing (see “Your rights under the GDPR”); technically you prevent the counting by blocking requests to cloudflareinsights.com in your browser. More about Cloudflare Web Analytics at https://www.cloudflare.com/web-analytics/.

Google Analytics

What is Google Analytics?

Google Analytics is a service for evaluating website visits. The contracting party for customers in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data on our behalf (processing under Art. 28 GDPR) on the basis of the Google Ads Data Processing Terms: https://business.safety.google/adsprocessorterms/. We remain the controller within the meaning of the GDPR.

Only after your consent

Google Analytics is loaded solely after you have tapped “Accept” in the notice bar. As long as you have chosen nothing or have declined, no connection to Google is made – not even in the form of the “cookieless” pings that Google's consent mode can send before consent; we do not use that feature. Advertising features are switched off: with every report we tell Google that the data may not be used for advertising or for personalised ads, and Google Signals is deactivated.

Which data are processed?

After your consent your browser loads the script from www.googletagmanager.com; the measurement data go to www.google-analytics.com and www.google.com and, according to Google, depending on region to further addresses under google-analytics.com and analytics.google.com. What is transmitted is the pages viewed, the time and duration of the visit, the referring page, details of browser, operating system, screen and language, and the identifier from the _ga cookie. Google necessarily receives your IP address; according to Google, for visitors from the EU it is not logged or stored but used only to derive an approximate location (such as city and country), and the data are first received on servers in the EU.

Which cookies are set, and for how long?

Two, both on our own domain: _ga (distinguishes visitors from one another) and _ga_7FQ6RCTQL8 (keeps the state of the session). Google states a lifetime of two years for both, renewed with every visit; many browsers shorten that (Chrome to 400 days at most, Safari to seven days without a return visit). The usage data stored at Google that are linked to this identifier are deleted after 14 months at the latest; aggregated statistics with no link to individual visitors are not affected.

Transfer to the USA

Google also processes data in the USA. Google LLC is an active participant in the EU-U.S. Data Privacy Framework (as at 21.09.2026), for which there is an adequacy decision of the European Commission (Implementing Decision (EU) 2023/1795): https://eur-lex.europa.eu/eli/dec_impl/2023/1795/oj. Google states that it relies on it for these transfers: https://business.safety.google/adsdatatransfers/. Should that framework not apply, Google's data processing terms provide for standard contractual clauses (Art. 46 (2) and (3) GDPR).

How can I withdraw or prevent collection?

The “Change cookie choice” link in the footer of every page reopens the notice; tap “Decline”. The page then deletes both cookies at once, sends nothing further to Google and reloads itself; from that moment Google Analytics is no longer loaded. The withdrawal takes effect for the future. Independently of this website, Google offers a browser add-on that prevents collection by Google Analytics on all websites: https://tools.google.com/dlpage/gaoptout.

Legal basis

The use of Google Analytics is based solely on your consent (Art. 6 (1) (a) GDPR); the setting of the two cookies on § 165 (3) TKG 2021 and § 25 (1) TDDDG. More on how Google uses data from websites that use its services at https://policies.google.com/technologies/partner-sites, and in Google's privacy policy at https://policies.google.com/privacy.

Live-Puls ("Geht was heute?")

On every spot page you can indicate with one tap whether conditions are working at that spot today. No text is entered, no name is asked for and no sign-in is required. There is no comment function and no way to publish your own content.

What is processed: your answer (yes or no), the spot, the date (Cape Town time) and – if you have chosen a discipline on this website – that discipline (wing, kite, windsurf, surf or prone). In addition, two identifiers with two different jobs:

1. A random identifier in your browser. The first time you vote, your browser generates a random string (a UUID) and puts it in its local storage. It is sent with your vote and ensures that exactly one vote counts per browser, spot and day – and that you can change your mind without being counted twice. This identifier contains no personal data: no name, no address, no device identifier, nothing that points back to you. It is read for no other purpose, is not combined with other data and is not passed to third parties. You can delete it at any time in your browser settings; your browser will then generate a new one the next time you vote.

2. A hash to prevent abuse. A SHA-256 hash is formed from your IP address and your browser identifier (user agent) together with a secret key and the current date; only the first 16 characters are stored. It serves solely to limit the number of votes accepted from the same network for one spot on one day (at most fifteen), so that nobody can distort the vote with a script. The IP address and the user agent themselves are neither stored nor logged nor returned. Because the date forms part of the key, the same network produces a different hash on each day; today's cannot be linked to yesterday's, and without the secret key it cannot be reversed to an IP address. No profile of you or your behaviour over several days arises from this, nor can one be formed. If your browser has no local storage (for example without JavaScript), this hash takes on the role of the identifier in point 1.

Why: to count the votes for a spot on a day and show them to all visitors as a total ("5 of 7"), and so that a vote replaces rather than duplicates an earlier one when you change your mind.

How long: entries are deleted automatically after 30 days.

Where: in a database at Cloudflare (Cloudflare D1), the hosting provider of this website. See the Cloudflare section.

On your device: besides the identifier in point 1, your own answer for the day is stored in your browser's local storage so the page can show you your result again after a reload. This is not a cookie, is not transmitted to us, and is used only for that day.

Legal basis: for the processing, our legitimate interest (Art. 6 (1) (f) GDPR) in showing visitors a current assessment of conditions on site and in preventing multiple voting; for placing the identifier in your browser, § 165 (3) no. 2 TKG 2021 and § 25 (2) no. 2 TDDDG, because it is strictly necessary for the function you triggered yourself. Processing is limited to what is needed for this; identifying individual persons is neither intended nor possible with reasonable effort.

Advertising partners and click links

This website is funded through direct partnerships with local businesses and through referral links. Advertising placements are always labelled as such.

No advertising networks, no advertising scripts and no counting pixels are embedded. All logos are held on our own server. There is therefore no disclosure of your data to advertising networks and no advertising profiling.

When you click an advertising link, it passes through an address on our own domain (/go/…) and forwards you immediately. In doing so, a counter for the advertising partner and calendar month is increased by one, and nothing else. It is not recorded who clicked, from which page, with which device or at what time. The counter allows no conclusions about individual persons. The counters are held at Cloudflare (Cloudflare KV).

Once you have been forwarded, the privacy policy of the destination company applies.

Legal basis: Art. 6 (1) (f) GDPR – our legitimate interest in being able to demonstrate to advertising partners the effect of their placement. Since no personal reference arises, no interference with your rights is involved.

External content – overview

The following sections describe content loaded from external servers. The same rule applies to all of them: they are loaded only once you have consented in the notice bar or have tapped the relevant placeholder. Before that, no connection is made to these providers and nothing is stored on your device.

As soon as such content is loaded, the provider concerned necessarily receives your IP address, because without it no data transfer is possible. In addition, browser type, operating system, screen resolution, language setting and the address of the page on which the content is embedded may be transmitted.

Windguru

On the spot pages we embed the weather forecast from Windguru (Windguru s.r.o., Czech Republic). Windguru is not the source of our own figures: the values on this site come from the ECMWF model, which our server retrieves via Open-Meteo and which we correct ourselves. No data of yours is transmitted in the process, because that request happens on our server and not in your browser. The Windguru table sits beside it as a second, independent forecast: it shows several weather models side by side, because comparing the models is more informative than a single value.

What data are processed: when the widget is loaded, a connection is made to Windguru's servers (windguru.cz and windguru.net). Your IP address and technical details about your browser are transmitted. Windguru stores a language-setting cookie in your browser as well as entries in local storage and in the browser database (IndexedDB) that serve the operation of the widget.

Google Fonts: the Windguru widget in turn loads fonts from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). This means a connection is also made to Google and your IP address is transmitted. We have no influence over this, because it happens inside the embedded widget – it is one of the reasons this widget is loaded only with your explicit decision. See the "Google Fonts" section.

Legal basis: Art. 6 (1) (a) GDPR (consent), and § 165 (3) TKG 2021 / § 25 (1) TDDDG for storing the information named on your device. Without your consent or your click, none of this is loaded.

More information is available in Windguru's privacy policy at https://www.windguru.cz/help.php?sec=privacy.

Wind2Speed

At the Langebaan, Rietvlei and Big Bay spots we embed the wind widget from Wind2Speed (Wind2Speed (PTY) Ltd., South Africa). It shows the measured values of a weather station on site, with history and further sensor data.

What data are processed: when it loads, a connection is made to wind2speed.africa, transmitting your IP address and technical details about your browser.

Important note about Google Analytics: inside its embedded frame, the Wind2Speed widget loads Google Tag Manager and Google Analytics and sets cookies in doing so (including _ga). This analytics is not ours and has nothing to do with our own visit counting (see the section “Google Analytics”): it runs under an identifier belonging to the widget provider, we receive no reports from it and evaluate none of these data in any form – they arise at the widget provider.

It is precisely for this reason that this widget is loaded only after your explicit decision. If you decline or make no selection, none of this occurs and not one of these cookies is set.

Transfer to third countries: Wind2Speed is a South African company; Google processes data among other places in the USA. Google is an active participant in the EU-US Data Privacy Framework and uses standard contractual clauses (Art. 46 (2) and (3) GDPR).

Legal basis: Art. 6 (1) (a) GDPR (consent), and § 165 (3) TKG 2021 / § 25 (1) TDDDG for the setting of the cookies. More information at https://wind2speed.africa/ and in Google's privacy policy at https://policies.google.com/privacy.

Webcams

The cameras on this website are not ours. They are operated by partners and shown with their permission; the operator is named on the page for each camera.

Nothing starts by itself. On your first visit you see a still image or a graphic with a play button. Only when you tap it is the video stream loaded and a connection made to the camera operator's server. Your IP address is transmitted to that operator in the process.

If you have started a camera once, your browser remembers that preference in local storage so that the camera runs straight away on your next visit to that spot. You can undo this at any time by clearing your browser's local storage or withdrawing your consent. If you have declined in the notice bar, no camera starts automatically – not even one you started earlier.

The cameras currently embedded:

Legal basis: Art. 6 (1) (a) GDPR (consent), since the transfer is triggered only by your action.

YouTube

What is YouTube?

YouTube is a video platform and has been a subsidiary of Google since 2006. It is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. For data processing in Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible.

How we embed YouTube

We use the extended privacy mode (youtube-nocookie.com). According to Google, no recognition cookies are set as long as you do not start the video, and the DoubleClick advertising network is not involved.

In addition, the player is loaded only when you click. As long as you do not start playback yourself, no connection whatsoever is made to YouTube or Google – the page holds only a still image with a button. The player is loaded only on your click.

What data are processed?

As soon as you start the player, your browser connects to YouTube's and Google's servers. Your IP address and technical information such as browser type, operating system and screen resolution are transmitted. If you are also signed in to a Google account, Google may associate this use with your account. We have no influence over that.

How can I delete my data or prevent storage?

If you do not start the player, no transfer takes place. If you have a Google account, you can delete data stored there manually. Independently of that, you can configure your browser to delete or block Google cookies.

Legal basis

The legal basis is your consent under Art. 6 (1) (a) GDPR, which you give by starting playback. Google is an active participant in the EU-US Data Privacy Framework and uses standard contractual clauses (Art. 46 (2) and (3) GDPR). More in Google's privacy policy at https://policies.google.com/privacy.

SkylineWebcams

At the Langebaan spot we embed the video player of SkylineWebcams (VisioRay S.r.l., Via dei Tulipani 9, 88069 Stalettì (CZ), Italy). The camera itself is operated by the Flamingo Wing Foil Center in Langebaan; SkylineWebcams delivers the stream. The operator is named under the camera.

What is loaded: not SkylineWebcams’ public cam page, but their bare embed player – a page that contains only the video. It is tied to our domain and is served only when your browser sends cape-town.at as the referring page. On 13 September 2026 we measured in a real browser what it loads: connections to www.skylinewebcams.com (the player page), cdn.skylinewebcams.com (the preview image and the player’s files), hd-auth.skylinewebcams.com (the stream’s authorisation) and a video server of the form hddn….skylinewebcams.com, as well as to cdn.jsdelivr.net, the content delivery network the player software (“Clappr”) is loaded from. In that measurement no connection was made to Google or to any advertising network. The player page attempts to set a single cookie: PHPSESSID, a technical session cookie of the web server that expires when you close the browser. Because it is sent without the SameSite attribute, Chrome blocks it inside a cross-site embedded frame; Safari and Firefox likewise block or isolate cookies from third-party frames. Whether it is actually stored on your device therefore depends on your browser. We measure this again with a check script before every release; if a further provider or a further cookie appears, this section is amended before the change is published.

Which data are processed: when the player loads, your IP address, technical details of your browser and the address of our page are transmitted to SkylineWebcams – and your IP address likewise to the operator of cdn.jsdelivr.net (Volentio JSD Limited, a company registered in England and Wales), which according to its privacy policy serves all CDN traffic through the providers Cloudflare, Fastly and Gcore, who likewise receive your IP address. jsDelivr states that it sets no cookies. The video starts as soon as the player has loaded and transmits picture data continuously – measured at around 5 to 6 MB per minute in full HD. That volume is the reason the placeholder states it explicitly.

What we deliberately do not embed: SkylineWebcams’ public cam page (www.skylinewebcams.com) carries Google advertising (AdSense) and Google’s consent platform (“Funding Choices”) and sets advertising cookies when opened. That page is not embedded on cape-town.at. Where we link to SkylineWebcams, it is an ordinary link; only when you click it yourself do you leave our site, and SkylineWebcams’ privacy terms apply from there.

Only after your decision: as with all external content, the player is loaded only once you have consented in the notice bar or tapped the placeholder under the camera. Until then the page holds nothing but a graphic with the spot’s name; no connection is made to SkylineWebcams or jsDelivr. Even with consent the camera does not start by itself – you press play.

Transfer to third countries: VisioRay is an Italian company. According to its privacy policy it processes the data at its operating offices and wherever the parties involved in the processing are located, and does not rule out transfers to countries outside the EU; it does not name the location of its video servers. jsDelivr serves files through a globally distributed network; which server answers depends on your location.

Legal basis: Art. 6 (1) (a) GDPR (consent), given through your acceptance in the notice bar or by tapping the placeholder, and § 165 (3) TKG 2021 and § 25 (1) TDDDG for the session cookie, insofar as your browser admits it. The “remember for this visit” entry in session storage, by contrast, is your own decision and strictly necessary (see “For the duration of your visit”). More information in SkylineWebcams’ privacy policy at https://www.skylinewebcams.com/en/privacy-policy.html (version of 3 February 2020) and jsDelivr’s at https://www.jsdelivr.com/terms/privacy-policy (version of 23 November 2023).

Content delivery networks

A content delivery network (CDN) is a network of regionally distributed servers through which files can be delivered quickly. The website itself is delivered via Cloudflare's CDN – see the relevant section.

In addition, the CDN cdn.jsdelivr.net is requested inside the SkylineWebcams player. Your IP address is transmitted to the operator of that CDN as well. This happens only after you have loaded the camera through your consent or your click.

Web design and fonts

"Web design" covers all services that improve the website visually and functionally – fonts, for example. On this website all such elements are embedded locally. No connections to third-party servers are made for them.

Google Fonts – embedded locally

For this website's own typefaces we use fonts embedded locally on our own server – not on Google's servers. When you open our pages, no connection is therefore made to Google servers, no data are transmitted to Google and nothing is stored at Google.

Google Fonts – inside the Windguru widget

Important for context: we do not embed Google Fonts ourselves – our own fonts are held locally on our server (see the previous section). A connection to Google Fonts arises exclusively inside the embedded Windguru widget, that is, only if you have loaded that widget through your consent or your click.

Google Fonts is a directory of typefaces provided by Google Inc.; for Europe, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is responsible. The files are requested via the Google domains fonts.googleapis.com and fonts.gstatic.com.

What data are processed: the external request transmits data to Google's servers. Google thereby learns that your IP address has opened this page. Information such as language setting, browser version, screen resolution and browser name may additionally be transmitted. According to Google, no cookies are set for Google Fonts.

How long and where: Google stores requests for CSS files for one day and the font files themselves for one year, predominantly on servers outside the EU.

How to prevent this: do not load the Windguru widget – that is, decline in the notice bar or do not tap the placeholder. None of these transfers then takes place.

Legal basis: Art. 6 (1) (a) GDPR (consent). Google is an active participant in the EU-US Data Privacy Framework and uses standard contractual clauses (Art. 46 (2) and (3) GDPR). More information at https://developers.google.com/fonts/faq and https://policies.google.com/privacy.

Explanation of terms used

We try to write our privacy policy as clearly and understandably as possible. Below you will find a list of important terms. Where these are taken from the GDPR, we quote the GDPR text and add our own explanation where helpful.

Processor

"processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Explanation: as the owner of this website we are responsible for all data we process about you. A processor is any company that processes personal data on our behalf – on this website, principally Cloudflare as our hosting provider.

"consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;

Explanation: on this website such consent is given through the notice bar at the bottom of the screen or by deliberately tapping a placeholder. If you do not consent, the external content concerned is not loaded.

Personal data

"personal data" means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Explanation: personal data are all data that can identify you as a person – typically name, address, e-mail address or telephone number. According to the Court of Justice of the European Union, your IP address is also personal data. Transmitting an IP address to a third party therefore requires a legal basis – which is precisely why the external content on this website is loaded only after your decision.

Profiling

"profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person;

Explanation: profiling means gathering information about a person in order to learn more about them. We ourselves carry out no profiling: we evaluate no personal aspects of individual visitors, build no user profiles and take no automated decisions. Google Analytics, which runs only after your consent, evaluates visits by means of a random identifier; what is processed in doing so is described in the section “Google Analytics”.

Controller

"controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;

Explanation: in our case we are responsible for the processing of your personal data. The contact details are given above.

Processing

"processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

Note: when we speak of processing, we mean every kind of data processing – not only collection, but also storage and use.

Closing words

If you are reading this line, you have worked your way through our entire privacy policy or at least scrolled to the bottom. It matters to us to inform you as fully as we can about the processing of personal data – and not only about which data are processed, but why.

This website is deliberately built so that as little as possible arises: no cookie without your consent, visit counting without cookies, no advertising networks, and apart from that counting nothing external that loads unasked. If you have questions about data protection, please do not hesitate to contact us.

All texts are protected by copyright.

Source: privacy policy created with the privacy policy generator for Austria by AdSimple

Your profile

This only decides when a day counts as “Good”. The site works fine without it.

Discipline
Ability