Last updated: 31 October 2026

Privacy policy

Who is responsible

Responsible for processing personal data on this website (controller under the GDPR):

devylon GmbH Banzhaldenstr. 20 70469 Stuttgart Germany Email: contact [at] 4x4pulse [dot] com

In short

4x4 Pulse shows opening times, rules and news for off-road tracks. You can use it without an account and without telling us anything about yourself. There is no tracking, no analytics and no advertising.

We process personal data only as described below: to deliver the website, to remember your language, and for the Track-Update newsletter if you sign up for it.

Hosting and server logs

The website runs on servers of DigitalOcean, LLC (USA) in its data centre in Frankfurt am Main, Germany. When you open a page, the server processes what your browser sends with every request: your IP address, the date and time, the page requested, the page you came from and your browser type.

This is necessary to deliver the website and keep it secure; the legal basis is our legitimate interest in a working, secure website (Art. 6(1)(f) GDPR). Log files are deleted after 7 days. We have a data processing agreement with DigitalOcean (Art. 28 GDPR). As DigitalOcean is a US company, access from the USA cannot be ruled out; it is certified under the EU-US Data Privacy Framework, with the EU standard contractual clauses as a fallback.

Fonts, map and links

Fonts come from our own server, and the map is drawn by the website itself: opening a page contacts no other service.

News items link to their sources on other websites. Their own privacy policies apply once you follow such a link.

Track-Update newsletter

If you sign up for the Track-Update, we store your email address, the language of the page you signed up on, and when you signed up and confirmed. We use them only to send you the Track-Update: when something opens, closes or changes on the tracks, at most once a week.

We first send you an email with a confirmation link (double opt-in). Only once you click it are you subscribed. If you do not confirm, the address is deleted after 7 days. The legal basis is your consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time with the unsubscribe link in every email. Your address is then deleted completely.

To stop the form being misused, the server counts sign-ups per IP address for an hour, in memory only, without storing the address (Art. 6(1)(f) GDPR).

The emails are sent through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), which processes your email address and the email on our behalf under a data processing agreement (Art. 28 GDPR). Resend is based in the USA; the transfer is covered by the EU standard contractual clauses.

Your rights

You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on our legitimate interest (Art. 21). A consent you gave can be withdrawn at any time, with effect for the future (Art. 7(3)).

To exercise these rights, write to the address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart.

We do not use automated decision-making or profiling.