This website uses cookies

Read our Privacy policy and Terms of use for more information.

Privacy Policy

1. Controller

Tim Thorer
Am Kutscherhaus 1
12555 Berlin Germany

Email: [email protected]

I am responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR).

2. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, and to object to processing based on legitimate interest. Where processing is based on your consent, you can withdraw that consent at any time with effect for the future.

To exercise any of these rights, email me at the address above.

Because this site runs on beehiiv, deletion and export requests are handled at platform level. Send those to [email protected].

You also have the right to complain to a supervisory authority. Mine is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin www.datenschutz-berlin.de

3. Hosting

This website is hosted by beehiiv, Inc., 228 Park Ave S, New York, NY 10003, USA.

beehiiv processes data on my behalf under a data processing agreement. When you visit the site, beehiiv's servers automatically record technical information including your IP address, browser type, operating system, referring page, and the time of your request. This is necessary to deliver the site and to maintain its security.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in operating a functioning and secure website.

4. Cookies and consent

This site uses cookies and similar technologies. Strictly necessary cookies, for example those that keep you logged in or run a checkout, are set without consent under § 25(2) TDDDG.

Anything not strictly necessary is only set after you agree via the cookie banner shown on your first visit. You can change or withdraw that decision at any time.

Legal basis: § 25(1) TDDDG and Art. 6(1)(a) GDPR for non-essential cookies, § 25(2) TDDDG and Art. 6(1)(f) GDPR for necessary ones.

5. Newsletter

When you subscribe, I process your email address and, if you provide it, your name. Delivery and subscriber management run through beehiiv.

beehiiv records whether emails are opened and whether links are clicked. I use this to understand which topics are worth writing about and to remove inactive subscribers.

Every email contains an unsubscribe link. Unsubscribing removes you from the list. Your email address may be kept on a suppression list afterwards so that you are not accidentally re-added.

Legal basis: Art. 6(1)(a) GDPR, your consent given at signup.

6. Forms

Forms on this site, including the itinerary request form, are provided by Tally BV, Vlasstraat 17, 8710 Wielsbeke, Belgium. Some forms are embedded in a page, others open on Tally's own domain. Tally receives whatever you enter into a form and processes it on my behalf under a data processing agreement.

Legal basis: Art. 6(1)(b) GDPR where the form relates to a purchase or an enquiry, otherwise Art. 6(1)(a) GDPR.

7. Booking appointments

To book a call with me, you are taken to a Google appointment booking page. When you book, you provide your name, email address and the details you enter into the booking form. Google receives this data and passes it to my calendar.

The responsible provider for users in the EEA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Art. 6(1)(b) GDPR, taking steps at your request prior to entering into a contract.

8. Purchases and payments

Products are sold in two ways: through beehiiv, and through Tally forms for itinerary orders. Both route payments to my own Stripe account. The responsible payment provider is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

When you buy, Stripe receives the payment data required to complete the transaction, and beehiiv or Tally receives the order data required to fulfil it. I never see or store your full card number. I do receive the information needed to fulfil the order and to meet German tax and commercial record-keeping obligations.

Legal basis: Art. 6(1)(b) GDPR for the contract, Art. 6(1)(c) GDPR for the retention obligations under § 147 AO and § 257 HGB.

9. YouTube thumbnails

The homepage displays my latest YouTube videos via an RSS feed. The video titles and thumbnail images are loaded from Google's servers, which means Google receives your IP address when those images load. No YouTube player is embedded and no YouTube cookies are set by this site.

Some posts contain embedded YouTube videos. Where a video is embedded, YouTube loads its player and may set cookies or read information from your device. Google LLC is responsible for that processing. Details: policies.google.com/privacy

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in showing my own video content.

10. Affiliate links

Some links on this site and in my newsletter are affiliate links. My partners are Agoda, GetYourGuide, Skyscanner, Saily and Amazon.

When you click one, the partner records that the click came from me, usually by setting a cookie in your browser. If you then book or buy something, I receive a commission. The price you pay is unchanged. Once you have clicked through, the partner is responsible for the data they collect and their own privacy policy applies.

As an Amazon Associate I earn from qualifying purchases.

Legal basis: Art. 6(1)(f) GDPR, my legitimate interest in financing this site.

11. Search Console

I use Google Search Console to see how this site performs in Google search results. Search Console reports aggregated search data. It does not set cookies on this site and does not track individual visitors here.

12. Transfers outside the EU

beehiiv and Google are based in the United States. Transfers to them are covered by the EU Commission's Standard Contractual Clauses and, where applicable, by the EU-US Data Privacy Framework. US authorities may in principle be able to access data held there. You cannot currently exercise EU-equivalent legal remedies against that in every case.

13. Retention

I keep data for as long as it is needed for the purpose it was collected for. Newsletter data is kept until you unsubscribe. Data connected to a purchase is kept for the periods required by German tax and commercial law, generally ten years.

14. Changes

I will update this policy when the site changes. The current version always applies.

Last updated: August 31, 2026.