Controller
YourServiceNet UG (haftungsbeschränkt)
Südliche Ingolstädter Str. 3a
85716 Unterschleißheim
Germany
Email: contact [at] yourservice.net
General information
When a website is accessed, data is transferred between the visitor’s browser and the web server for technical reasons. We do not use this data to create visitor profiles.
This portal does not provide user accounts or its own contact form and does not store visitor details in its own database.
Personal data is not disclosed for advertising purposes or sold, and no automated decision-making takes place.
Hosting and server logs
This website is delivered through Cloudflare. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare distributes the website through its global network and protects it against abusive traffic. Further information is available in the Cloudflare privacy policy.
Technically necessary connection data must be processed each time a page is requested. This includes, in particular, the IP address, date and time, the page requested, the amount of data transferred, connection and browser information, and the address of the previously visited page where provided by the browser. Without this data, the requested page cannot be delivered securely to your browser.
Cloudflare processes the necessary network and security data to establish the connection, deliver content and prevent abusive access. Cloudflare Web Analytics and optional visitor logging are disabled for this portal. We do not create our own access or analytics logs and do not use connection data for audience measurement or profiling. Cloudflare may generate technical network and security information under its own responsibility to operate its network securely; this does not provide us with personal visitor profiles.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. We do not store personal visitor logs ourselves. Where Cloudflare temporarily stores technically necessary security data, the retention period is determined by the purposes of delivery and security, the applicable data-protection terms and any statutory obligations. The data is erased or anonymised once it is no longer required for those purposes, unless statutory obligations or the establishment, exercise or defence of legal claims require further retention.
No portal cookies, analytics or tracking
This information portal does not itself set cookies. It does not embed analytics tools, marketing pixels, social-media tracking tools or comparable tracking technologies. Non-essential Cloudflare features used for analytics or advertising are not enabled.
In a specific security situation, Cloudflare may use a cookie that is strictly necessary to prevent abusive access and securely provide the website you expressly requested. This cookie is not used for our analytics or advertising. Consent is not required under Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG); where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting and reliably providing the portal.
Interactive maps using OpenStreetMap
When a page contains an interactive map, your browser retrieves the required map sections from the OpenStreetMap Foundation, St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom (OSMF), or its worldwide delivery network as the page opens. Your browser also connects to this service when you open a link to OpenStreetMap.
In particular, your IP address, browser and device type, operating system, referring page, date and time, and the map tiles requested may be processed. OSMF processes this data as an independent controller; we have no access to the resulting usage data and no control over its further processing.
The legal basis for embedding the map is Article 6(1)(f) GDPR. Our legitimate interest is to show a cemetery’s location clearly and make orientation easier. Map requests are made only on pages that display a map; we do not use them for audience measurement or profiling. Opening an additional OpenStreetMap link is a redirection you choose yourself.
OSMF states that connections may be made to servers in the United Kingdom and through a global network of cache servers. The European Commission has adopted an adequacy decision for the United Kingdom. We have no control over any storage by OSMF; its duration is determined by OSMF’s information and criteria. Further information is available in the OpenStreetMap Foundation privacy policy.
Links to the GraveStay enquiry
The grave-care buttons link to the enquiry form at app.gravestay.com. This portal does not embed content or scripts from that service. Your browser connects to GraveStay only after you open one of those links.
On cemetery pages, the link contains the postal code and, where available, a verified cemetery reference to provide a suitable preselection. The complete address of the portal page currently open is also transferred as the source page; it may include additions already present in your browser’s address bar. The subsequent use of the enquiry form is governed by the GraveStay privacy policy.
The transfer is necessary to preselect the location and referring page in the enquiry form. The legal basis is Article 6(1)(b) GDPR because opening the form prepares an enquiry relating to your selection.
Contact by email
If you contact us by email, we process the information you provide, particularly your email address, the content of your message and the technical metadata associated with the email.
The processing is carried out to respond to your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual measures. In all other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to enquiries.
An email service provider acting on our behalf may receive the message content and connection data required to transmit and provide the email.
We erase your message once the enquiry has been conclusively answered, no follow-up is reasonably expected, and the information is no longer needed for a contractual relationship or potential legal claims. Statutory retention obligations remain unaffected.
Voluntary and necessary information
The connection data processed when a page is requested is technically necessary. Without it, your browser cannot retrieve the website.
On pages with an interactive map, the map requests are required to display the map section. Pages without a map do not make this connection to OSMF. Opening an additional OpenStreetMap link, opening the GraveStay enquiry form and contacting us by email are voluntary. If you do not open the GraveStay link, no context-aware transition or transfer to GraveStay takes place. Without a reply address and the information needed to deal with your message, we cannot respond to an email enquiry.
Recipients and international data transfers
Personal data is disclosed only where necessary to operate the website, process an enquiry or comply with legal obligations.
We use Cloudflare to deliver and secure the website. Where Cloudflare processes personal data on our behalf, Cloudflare acts as a processor and the applicable data-protection terms govern that processing. Cloudflare processes certain technical network and security data under its own responsibility as described in its privacy policy. Our email service provider receives the data technically required to transmit and provide your message. On pages with an interactive map, OSMF receives the technically necessary map requests as an independent controller. If you open a grave-care link, the context data described under “Links to the GraveStay enquiry” is transferred to the GraveStay platform, which is also operated by YourServiceNet UG (haftungsbeschränkt).
Cloudflare is a global company based in the United States and may process data outside the European Union or European Economic Area. Cloudflare identifies the EU-U.S. Data Privacy Framework and, where required, Standard Contractual Clauses as safeguards for transfers to the United States. Details are available in the Cloudflare privacy policy and the Cloudflare Data Processing Addendum.
Where an email service provider we use processes data outside the European Union or European Economic Area, this takes place only on the basis of an adequacy decision or appropriate safeguards under Article 46 GDPR, in particular Standard Contractual Clauses.
Your rights
Under the General Data Protection Regulation, you have the right to access, rectify and erase your personal data, restrict its processing, receive data in a portable format, and object to certain processing activities.
Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
Right to object under Article 21 GDPR
Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object to that processing at any time on grounds relating to your particular situation. We will then cease processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims. You can send your objection to the email address given above.
Security
We use appropriate technical and organisational measures to operate this website as securely as possible. Production delivery uses encrypted HTTPS connections.