Privacy Statement

Last updated: 17 October 2026

1. Data Controller

The controller responsible for processing personal data in connection with this website is:

Julia Kossmann
Wonderland Ocean Expeditions
Singener Straße 24
78315 Radolfzell
Germany
Email: hello@wonderlandocean.com

2. General Information About Data Processing

I process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection laws.

Personal data means any information relating to an identified or identifiable individual. Depending on how you use this website, this may include your contact details, the content of messages you send me, and technical information generated when you access the website.

I process personal data only where there is a lawful basis, for the purposes described below, and only for as long as necessary or legally required.

3. Website Hosting and Technical Provision

This website is built and hosted using Framer, provided by Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, the Netherlands.

When you access the website, technical information may be processed to deliver the website, maintain its security, prevent misuse and ensure its proper functioning. Depending on the request and technical configuration, this may include your IP address, browser and device information, access timestamps and technical log data.

The legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in providing a secure, functional website.

Framer may process personal data on my behalf as a service provider. Further information is available in Framer’s Privacy Statement.

4. Framer Analytics

I use Framer’s integrated analytics feature to understand how visitors use this website and to improve its content and performance.

According to Framer, its built-in analytics uses a privacy-focused approach without cookies or persistent identifiers. It provides aggregated website statistics, including page views, unique visitor counts, popular pages and traffic sources.

Framer describes the analytics data as anonymised and states that the feature does not identify individual visitors. I do not use Google Analytics.

Further information is available in Framer’s documentation on built-in analytics.

5. Contact Form and Enquiries

If you contact me through the website’s contact form or by email, I process the information you provide, such as your name, email address, message and any other details you choose to share.

I use this information to respond to your enquiry and, where relevant, to discuss potential expeditions, partnerships or other requests.

The legal basis is Article 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual steps, and Article 6(1)(f) GDPR for other legitimate business enquiries.

The contact form is provided through Framer. Messages and related correspondence may also be processed through Google Workspace when received or handled by email.

I retain enquiry data only for as long as necessary to handle the enquiry and any resulting follow-up, subject to applicable legal retention obligations.

6. Email and Google Workspace

I use Google Workspace for business email and related communication.

When you communicate with me by email, your message and associated contact details are processed to manage the correspondence and respond to your request.

The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual communication and Article 6(1)(f) GDPR for other business correspondence.

Depending on the services and account configuration, data may be processed by Google and its relevant service providers. Please refer to Google’s Privacy Policy for further information.

7. Newsletter and Early-Access Updates

If you subscribe to receive newsletter or early-access updates, I process your email address and any information you voluntarily provide to send you the updates you requested.

The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time, for example by using the unsubscribe option provided in the message or by contacting me at hello@wonderlandocean.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

I currently use Google Workspace for email. I do not use Google Analytics for newsletter tracking.

8. Cookies and Similar Technologies

This website uses Framer’s built-in analytics, which Framer states does not use cookies or persistent identifiers.

The website may nevertheless use technically necessary technologies or process data through additional features, integrations or embedded content, depending on the website’s configuration.

Where applicable law requires consent for cookies or similar technologies, consent will be obtained before the relevant technology is activated. You can manage applicable preferences through the website’s cookie settings, where available.

For further details, please refer to the website’s Cookie Policy.

9. External Links and Embedded Content

This website may contain links to external websites or social media platforms. When you follow an external link, the privacy practices of the relevant provider apply.

If I embed third-party content, such as videos, maps or social media feeds, the provider may process technical information, including your IP address, when that content loads. Where required, such content will only be activated after you provide consent.

Please check the privacy policies of the relevant providers for further information.

10. Data Transfers

Framer and Google Workspace may process data through infrastructure or service providers located outside the European Economic Area (EEA), depending on the services and configurations used.

Where personal data is transferred outside the EEA, the relevant provider must rely on an applicable legal transfer mechanism under the GDPR, where required.

Further information on the safeguards applicable to a particular service can be obtained from the provider’s privacy documentation.

11. Data Retention

I retain personal data only for as long as necessary for the relevant purpose, unless statutory retention requirements or the establishment, exercise or defence of legal claims require longer retention.

When personal data is no longer required, it will be deleted or otherwise handled in accordance with applicable data protection requirements.

12. Your Rights Under the GDPR

Subject to the applicable legal requirements, you have the right to:
• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request erasure of your personal data.
• Request restriction of processing.
• Receive certain personal data in a portable format.
• Object to processing based on legitimate interests.
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact hello@wonderlandocean.com.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

For example, you may contact the competent supervisory authority in Baden-Württemberg, Germany, if it is responsible for your complaint.

14. Changes to This Privacy Statement

I may update this Privacy Statement to reflect changes to the website, the services I use or applicable legal requirements. The current version will be published on this page.