Privacy policy
This is an English translation for convenience. Only the German version is legally binding: Datenschutzerklärung.
1. Controller
Niklas Mattes, sole proprietor trading as REACHPappenheimstraße 3, 80335 Munich, Germany
Email: info@reach-tsn.com
Data protection officer: not appointed.
2. Hosting and server logs
When you visit this website, the hosting provider processes technically necessary data such as your IP address, the time and the page requested. Legal basis: Art. 6(1)(f) GDPR (DSGVO) (secure operation of the website). This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, and delivered via its global server network. Data may be transferred to the USA; Vercel participates in the EU-US Data Privacy Framework. A data processing agreement under Art. 28 GDPR is in place with Vercel (Data Processing Addendum as part of Vercel's terms); transfers are additionally covered by the EU Standard Contractual Clauses. Details: vercel.com/legal/privacy-policy.
3. Fonts
The fonts Barlow and Barlow Semi Condensed are hosted on our own server and loaded from there. No data is transferred to Google or any other provider for this. Nor does this website load any other content from third-party servers.
4. Cookies, browser storage and audience measurement
This website sets no cookies, loads no tracking scripts and stores nothing on your device. Exception: the online onboarding (only via a personal link for clients) stores your answers, at your request, in your browser's local storage (localStorage) so you can continue later. The data stays on your device and is not transmitted to us. You can remove it with "Delete answers in this browser" on the page or via your browser's site data. Details in section 6.
The legal basis for this storage is Section 25(2) No. 2 TDDDG (strictly necessary for the service you requested). No audience measurement takes place.
5. Enquiry form
You can request a proposal via the enquiry form (on the “Plan your coverage” and “Contact” pages). Only the event, date, venue and your email address are required. The services you want, your name, club or organisation, a message and how you heard about REACH (a drop-down, for example recommendation, trade fair or search engine) are voluntary. We use this source information only to see through which channels enquiries reach us. An invisible extra field keeps out automated spam.
No form service is connected at present. When you click “Create enquiry”, your browser checks your details and turns them into a finished enquiry text that you can copy or download as a text file. Nothing is transmitted to us or to third parties and nothing is stored. Your details only reach us when you send us this text yourself, for example by email. We then process them to answer your enquiry and prepare a proposal. Legal basis: Art. 6(1)(b) GDPR (DSGVO); for the voluntary source information Art. 6(1)(f) GDPR. We delete your enquiry once it is settled; if a contract results, statutory retention periods apply.
5a. Contact by email
If you email us, we process your address and the content to reply. Legal basis: Art. 6(1)(b) GDPR (enquiry about a contract), otherwise Art. 6(1)(f) GDPR. Our mailbox is operated on our behalf by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. We delete emails once the enquiry is settled; business correspondence is kept for the statutory periods.
6. Online onboarding for clients
After an order, clients receive a personal link to an online onboarding. The page only contains information you already know (name of the club or company, event, booked services, dates). It is not indexed by search engines and not linked; however, the link is not access protection.
Your answers initially stay only in your browser's local storage (see section 4) until you download them, send them by email or delete them. The page does not load anything from third-party servers. No sending service is connected yet; “Send answers” only checks your entries and transmits nothing. Once sending is connected, your answers reach us when you send them, to prepare and carry out your project. Legal basis: Art. 6(1)(b) GDPR. Retention: for the duration of the project and the statutory retention periods.
Please do not enter passwords or data about competitors (for example lists of people who must not be shown); send these to us separately.
No service is currently connected for sending, file upload or booking. Hosting: see section 2.
7. Videos and podcast
This website currently does not embed videos or podcast players from third parties.
8. Social media profiles
This website does not embed content or buttons from social networks.
9. Recordings at events
For livestream, photo and video recordings at regattas, there is a separate privacy notice for each event, published together with the organiser (a notice board poster with QR code and the full notice online). We do not use facial recognition.
10. Your rights
You have the right of access (Art. 15 GDPR (DSGVO)), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3)).
11. Right to lodge a complaint
You can lodge a complaint with a supervisory authority, for example the Bayerisches Landesamt für Datenschutzaufsicht (Bavarian Data Protection Authority, Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de).
As of 5 October 2026.