What this site collects, what it deliberately doesn't, who else touches it, and what you can make us do about it.
The controller for the purposes of the GDPR (DSGVO) and the German BDSG and TDDDG is:
Thomas SittigWe have not appointed a data protection officer, and are not required to. Full company details are in the imprint.
Worth stating plainly, because most sites can't: Coliving Algarve sets no cookies. It writes nothing to local storage, session storage or IndexedDB. It loads no scripts, stylesheets, fonts or images from third-party servers — typefaces are self-hosted. There are no social media widgets, no embedded players, and no advertising network.
This is why you are not being shown a cookie banner. There is nothing to consent to under §25 TDDDG, because nothing is stored on or read from your device.
The site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Every request necessarily reaches their infrastructure, and their servers record standard access data: your IP address, the requested URL, the referring page, the date and time, and your browser's user agent string.
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is operating a website that is reachable, stable and defensible against abuse. This data is not used to identify you and is not combined with anything else.
Transfer outside the EU: Vercel is a US company, so serving this site involves processing outside the EEA. We have a data processing agreement with them under Art. 28 GDPR, and that agreement incorporates the European Commission's Standard Contractual Clauses — the safeguard provided for in Art. 46(2)(c) GDPR — as the basis for the transfer.
We use Vercel Web Analytics to count page views. It is cookieless: it does not store an identifier on your device and cannot follow you to other websites. Vercel derives a short-lived, non-reversible hash from your IP address and user agent to approximate a visitor count for a single day, then discards the inputs.
Legal basis: Art. 6(1)(f) GDPR — a legitimate interest in knowing which pages are read, in the least invasive way we could find. You can suppress it entirely with any standard content blocker; nothing on the site depends on it.
The site has no working forms, no search, no accounts and no interactive tools. Nothing you do here is written to a database.
Under the GDPR you can require us to:
Write to hello@colivingalgarve.com and we'll deal with it. Realistically, given how little we hold, most of these will be answered with a short explanation rather than a data export.
You can complain to a supervisory authority, in the member state where you live, work, or where you think something went wrong. The authority competent for us is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf.
When the site changes what it does with data, this page changes first. The date at the top is the last time that happened.