Legal

Privacy notes

This site collects as little as it can get away with. What follows is the full account of what is stored, why, and how to have it removed.

Last updated August 2026. The company details behind this notice are in the imprint. 

Who is responsible

Jana Ganguly, Elephant Lines
Rankbachstraße 35, 71272 Renningen, Germany
privacy@elephantlines.com

A separate data protection officer is not required at this size and none has been appointed.

When you open a page

The hosting provider writes a server log for every request: IP address, date and time, the page requested, the referring page, and browser and operating system version. This is needed to deliver the site and to detect attacks, on the basis of Art. 6 (1) f GDPR. Logs are deleted after 30 days and are not merged with anything else.

The contact form

Name, email address, subject and message are used only to answer you, on the basis of Art. 6 (1) b and f GDPR. Nothing from a contact thread is used for marketing. Messages are kept while the matter is open and deleted once the thread is closed, unless retention periods under tax or commercial law apply.

The newsletter

Sign-up uses double opt-in: the address is stored only once you confirm the link in the first email. The legal basis is your consent under Art. 6 (1) a GDPR, which you can withdraw at any time through the unsubscribe link in every issue or by writing to us. Sign-up time and confirmation are logged as proof of consent.

Placeholder: name the sending provider and its data processing agreement here.

Cookies and measurement

No tracking cookies, no advertising pixels, no third-party analytics. The only value stored in your browser is your choice of light or dark mode, which stays on your device and is never sent anywhere. Fonts and images are served from the site's own domain, so no request reaches an external font or media network.

Who else sees your data

Only the providers needed to run the site: the host, the email provider, and the newsletter service. Each works under a data processing agreement under Art. 28 GDPR and stores data inside the EU. Nothing is sold, and nothing is passed on for advertising.

Placeholder: list each provider by name and location before launch.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, or a copy in a portable format, and you can object to processing based on legitimate interests. Consent, once given, can be withdrawn at any time with effect for the future. Write to privacy@elephantlines.com and you will hear back within a month.

Complaints and changes

You may complain to a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information. This notice will be updated when the site changes; the date at the top always shows the current version.

The short version

No tracking

No analytics, no advertising pixels, no third-party cookies. Only your light or dark preference is stored, and it never leaves your browser.

Inside the EU

Hosting, email and the newsletter all run on EU servers under processing agreements. Server logs are deleted after 30 days.

Yours to remove

One email to privacy@elephantlines.com and everything held about you is sent to you or deleted.