Data Controller

This website is operated by:

Curated Cultures GmbH
Schwindgasse 20/5a, 1040 Vienna, Austria
office@curatedcultures.com

This Privacy Policy describes how we handle data on our website in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

Data Management Practices

We provide users with relevant and up-to-date content using carefully selected data sources and APIs. No personally identifiable information is collected, stored, or processed by us. All data usage complies with applicable data protection principles.

Location Data, Contact Information and Images
Location, contact details, and images are sourced via Google Places. These are publicly available data provided through the Google Places API under terms governed by Google’s own policies.

Descriptive Texts
Descriptions of points of interest (POIs) are generated using OpenAI’s AI models. Prompts are created by Curated Cultures. Processing takes place on OpenAI servers in the United States. ´No personal data is transmitted from our website to OpenAI.

Routes and Boundaries
Data about hiking trails, walking routes, and district boundaries is sourced from Open Data Austria (data.gv.at).. Descriptions of these elements are created using OpenAI’s AI models.

District Shapes and Names
District-related data is provided by the Austria Press Agency (APA), with descriptive content generated using OpenAI’s AI models.

Customised Travel Itineraries ("Your Faves")
These itineraries are generated using ChatGPT by OpenAI based on selections made during the browsing session. No user-identifying information is collected or stored.

Map Technology
Map functionality is delivered using Mapbox. For more information, refer to Mapbox’s Privacy Policy.

Analytics and Cookies
We use Google Analytics 4 (GA4) to collect anonymized and aggregated usage data. IP anonymization is enabled. No data is collected that could identify individual users.
The legal basis for this processing is our legitimate interest in improving website performance (Art. 6(1)(f) GDPR). Where required, we obtain prior consent via our cookie banner (Art. 6(1)(a) GDPR).

Data Retention and Security

We do not store server log files or track individual users. GA4 data is anonymized and handled according to Google’s standard retention and security practices.

Note on Data Protection Rights
Since we do not collect or process personal data that can identify users, most provisions of the GDPR—such as access, correction, or deletion rights—do not apply.

Third-Party Data Sources and Privacy Links

We collaborate with the following external service providers. Each is responsible for its own data processing activities, and we encourage users to review their respective privacy policies: