Your next way out.
Back to home

Privacy Policy

This privacy policy applies to the website nextout.de. A separate privacy policy applies to the NextOut mobile app.

This English version is provided for convenience. In case of any discrepancy, the German version ("Datenschutzerklärung") is the legally binding text.

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Ilia Ilishenko
Landsberger Str. 446A
81241 Munich
Germany

Postal address: Postfach 10 15 47, 80089 Munich
E-mail: kontakt@nextout.de

There is no legal obligation to appoint a data protection officer.

2. Principles

Personal data is processed only where this is necessary for the operation of the website or where explicit consent has been given. No analytics, tracking or advertising services are used. No profiling and no automated decision-making take place.

3. Hosting

This website is hosted by:

Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus

The servers used for this website are located in Frankfurt am Main, Germany. A data processing agreement pursuant to Article 28 GDPR is in place with the provider. The provider processes the data solely on documented instructions.

Legal basis: Article 6 (1) (f) GDPR. The legitimate interest lies in the secure and efficient provision of the online service.

4. Server log files

When the website is accessed, the hosting provider automatically stores the following data in server log files:

This data is required for the operation, stability and security of the website. It is not merged with other data sources. Log files are deleted after 30 days at the latest, unless they are exceptionally required for longer in order to investigate a specific security incident.

Legal basis: Article 6 (1) (f) GDPR (legitimate interest in security and functionality).

5. Cookies

This website does not use cookies for analytics or advertising purposes.

6. Fonts and external content

All fonts used are stored locally on the server of this website and delivered from there. No connection is established to third-party servers, in particular not to Google Fonts.

All images and scripts are also delivered locally. No external content delivery networks, social media plugins, map services or third-party video embeds are used.

7. Contact by e-mail

If you contact us by e-mail, the information you provide is processed in order to handle your enquiry.

Legal basis: Article 6 (1) (b) GDPR where the enquiry relates to the initiation or performance of a contract, otherwise Article 6 (1) (f) GDPR (legitimate interest in responding to enquiries).

The data is deleted once the enquiry has been dealt with conclusively and no statutory retention obligations apply, at the latest after six months.

E-mail service provider: The mailboxes for the domain nextout.de are operated by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands (Zoho Mail, European data centre). The provider acts as a processor pursuant to Article 28 GDPR. The data is processed within the European Union. Message content is not analysed for advertising purposes.

7a. Access to beta tests

Android: Anyone requesting access to the closed Google Play test by e-mail transmits their e-mail address and the Gmail address stated as linked to Google Play. These data are used solely to process the request and add the Gmail address to the tester list in Google Play Console.

The recipient of the Gmail address is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google processes the data for Google Play under its own data protection responsibility. Processing in third countries cannot be ruled out; according to Google, relevant transfers rely, among other safeguards, on adequacy decisions, the EU-US Data Privacy Framework and, where required, Standard Contractual Clauses. The Google Privacy Policy also applies.

The legal basis is Article 6 (1) (b) GDPR (processing the data subject's request to participate in the beta test). The e-mail request is deleted in accordance with section 7, at the latest after six months. The Gmail address is removed from the tester list when the beta test ends or when the data subject requests its removal.

iPhone: The public TestFlight link leads to an Apple service. When a tester joins through this public link, their name and e-mail address are not displayed to the provider; testers appear anonymously in App Store Connect. Apple may nevertheless show the provider aggregated or pseudonymous information such as installation date, sessions and crashes. Anyone who voluntarily submits feedback including an e-mail address makes that address visible for the respective feedback item. The Apple Privacy Policy applies.

8. Partner links to booking providers

This website contains links to offers from partner companies. These links carry a partner identifier so that a booking made through the link can be attributed and remunerated.

As long as such a link is not clicked, no data is transmitted to the partner. Clicking the link takes the user away from this website. From that point on, only the privacy provisions of the respective provider apply. For technical reasons, the IP address, the referrer information and the partner identifier are transmitted in the process. The partner may set its own cookies.

This processing is outside the controller's influence. No personal data is actively transmitted to the partners.

Partner programmes used: Travelpayouts (flights, including Aviasales), DiscoverCars (car rental), Trip.com, Omio (rail and coach), Tiqets (attractions), Saily (eSIM), AirHelp (air passenger rights).

Legal basis for adding the partner identifier to the link: Article 6 (1) (f) GDPR (legitimate interest in financing a service offered free of charge).

Some of these providers are based outside the European Union. A transfer to a third country only takes place when the partner's website is opened, and therefore as a result of a deliberate action by the user.

9. Images

The travel photographs used on this website are sourced from Pexels and used under the licence granted there. The image files are stored locally on the server of this website. No connection to Pexels is established when the page is loaded.

10. Recipients of the data

Personal data is not sold and is not passed on to third parties for advertising purposes. Access is limited to:

Data is disclosed to public authorities only where there is a legal obligation to do so.

11. Rights of data subjects

You have the following rights:

An informal message to kontakt@nextout.de is sufficient to exercise these rights.

12. Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

13. Data security

The website is delivered exclusively over an encrypted HTTPS connection. Data transmitted is therefore protected against being read by third parties.

14. Changes to this privacy policy

This privacy policy will be updated whenever the functions of the website or the legal situation change. The version published on this page applies.

Last updated: 2 September 2026