Privacy Policy

Last updated: October 2026

1. Controller

The controller responsible for data processing on this website is:

Miles and less LLC

2. General

This website is a personal travel blog. It uses no analytics, no tracking tools, no advertising cookies and no social media plugins. Personal data is only processed where described below.

3. Hosting and server log files

This website is hosted by Lovable Labs Incorporated, 1111b South Governors Avenue, Dover, DE 19904, USA (EU contact: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden), together with its infrastructure providers. When you visit the website, technically necessary data is processed automatically: IP address, date and time of the request, the page accessed, referrer URL, browser type and operating system. This is required to deliver the website securely and to detect errors and attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, working website). The data is kept only as long as the hosting provider needs it for these purposes. We have concluded a data processing agreement with the provider (Art. 28 GDPR).

4. Database and file storage

Blog posts, newsletter signups and contact messages are stored in a database operated through Lovable Cloud, which uses Supabase, Inc. (USA) as its service provider. Legal basis: the legal basis of the respective processing described below, and Art. 28 GDPR for the use of the processor.

5. Contact form and email

If you contact us via the contact form or by email, we process the data you provide (name, email address, optionally company, and your message) to answer your inquiry. Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to a possible collaboration, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries). We delete your message once your inquiry is fully handled, and at the latest after 12 months, unless legal retention obligations require longer storage.

6. Newsletter

If you subscribe to the newsletter, we store your email address, the time of your consent, the consent text you agreed to and the page on which you signed up. We use this only to send you the newsletter and to be able to prove your consent. Legal basis: Art. 6(1)(a) GDPR (your consent). You can withdraw your consent at any time, for example by emailing milesnless@gmail.com or via the unsubscribe link in every newsletter. Your email address is then deleted from the list. If we use an external newsletter service to send emails, it will be named in this policy before the first newsletter is sent.

7. Fonts

All fonts are hosted on our own server. No connection to Google or other font providers is made when you visit the website.

8. Cookies and local storage

This website does not use tracking or marketing cookies. It only uses technically necessary browser storage, for example to reload the page correctly after an update. The private editor login also stores a session in the browser, but only for the site owner. Legal basis: § 25(2) TDDDG and Art. 6(1)(f) GDPR. No consent is required for this.

9. Transfers to countries outside the EU

Some of the providers named above are based in the USA or may process data there. Such transfers take place on the basis of the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

10. Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interest (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3)). To exercise these rights, email milesnless@gmail.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg.

11. No automated decision making

We do not use automated decision making or profiling. You are not required to provide personal data; without it, however, we cannot answer your inquiry or send you the newsletter.