Privacy

Who is responsible

The controller for the purposes of the GDPR (DSGVO) and the German BDSG and TDDDG is:

We have not appointed a data protection officer, and are not required to. Full company details are in the imprint.

What this site doesn't do

Worth stating plainly, because most sites can't: Just Workation sets no cookies. It writes nothing to local storage, session storage or IndexedDB. It loads no scripts, stylesheets, fonts or images from third-party servers — typefaces are self-hosted, icons are inline. There are no social media widgets, no embedded players, and no advertising network.

This is why you are not being shown a cookie banner. There is nothing to consent to under §25 TDDDG, because nothing is stored on or read from your device.

Hosting and server logs

The site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Every request necessarily reaches their infrastructure, and their servers record standard access data: your IP address, the requested URL, the referring page, the date and time, and your browser's user agent string.

Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is operating a website that is reachable, stable and defensible against abuse. This data is not used to identify you and is not combined with anything else.

Transfer outside the EU: Vercel is a US company, so serving this site involves processing outside the EEA. We have a data processing agreement with them under Art. 28 GDPR, and that agreement incorporates the European Commission's Standard Contractual Clauses — the safeguard provided for in Art. 46(2)(c) GDPR — as the basis for the transfer.

Usage measurement

We use Vercel Web Analytics to count page views. It is cookieless: it does not store an identifier on your device and cannot follow you to other websites. Vercel derives a short-lived, non-reversible hash from your IP address and user agent to approximate a visitor count for a single day, then discards the inputs.

Legal basis: Art. 6(1)(f) GDPR — a legitimate interest in knowing which articles are read, in the least invasive way we could find. You can suppress it entirely with any standard content blocker; nothing on the site depends on it.

Forms and tools

None of the tools on this site have accounts, and none of them keep what you type. In detail:

• Search, article sorting and the spaces directory submit your query as a URL parameter. It appears in the server logs described above and nowhere else.
• The day counter takes the countries and dates you enter and encodes them back into the page URL so the result can be bookmarked and shared. It is not written to any database and we cannot retrieve it later. Be aware that, like every other request, the resulting URL appears in Vercel's access logs — so treat it as you would any other data you put in an address bar.
• The destination matcher works the same way: your answers travel in the URL and are not stored.

Your rights

Under the GDPR you can require us to:

• tell you what data we hold about you (Art. 15);
• correct it if it's wrong (Art. 16);
• delete it (Art. 17);
• restrict what we do with it (Art. 18);
• hand it over in a portable format (Art. 20);
• stop processing it where we've relied on legitimate interest (Art. 21) — which, on this site, means the two sections above.

Write to hello@justworkation.com and we'll deal with it. Realistically, given how little we hold, most of these will be answered with a short explanation rather than a data export.

Complaints

You can complain to a supervisory authority, in the member state where you live, work, or where you think something went wrong. The authority competent for us is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Düsseldorf.

Changes to this policy

When the site changes what it does with data, this page changes first. The date at the top is the last time that happened.