Privacy.
This policy explains which personal data we process when you visit firstlight.pt, subscribe to our newsletter or order in our shop, and which rights you have. Last updated: 18 October 2026.
1. Controller
First Light GbR, Chodowieckistraße 30, 10405 Berlin, Germany, represented by Marc Jerschov and Jannick Schulte. Email: firstlightgang@gmail.com.
2. Hosting and server logs
This website is hosted by GitHub, Inc. (GitHub Pages), 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit the site, GitHub processes technical access data (IP address, date and time, requested page, browser and operating system) in server logs to deliver the site securely. Legal basis: Art. 6(1)(f) GDPR (our legitimate interest in a secure, reliable website). GitHub is certified under the EU–US Data Privacy Framework.
3. Fonts and embedded content
We use Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page loads, your browser retrieves the fonts from Google's servers, which transmits your IP address to Google. Legal basis: Art. 6(1)(f) GDPR (uniform presentation of the site). The video on our home page is streamed via Mux, Inc. (San Francisco, USA); loading it also transmits your IP address to Mux.
4. Newsletter
If you subscribe to our newsletter, we store your email address and the time of registration with our provider MailerLite (MailerLite Limited, Ground Floor, 71 Lower Baggot Street, Dublin 2, Ireland) to send you updates about trips, dates and products. Legal basis: your consent, Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in every newsletter; we then delete your address from the list.
5. Shop orders and payment
When you order in our shop, you enter your name, shipping address, email address and payment details on the checkout page of our payment provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. If you choose PayPal, the payment itself is processed by PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Stripe processes the payment and transmits your order and shipping data to us so that we can fulfil the order and send confirmations. We use this data only to process the contract and comply with legal retention obligations (e.g. tax law, 10 years for accounting records). Legal basis: Art. 6(1)(b) and (c) GDPR. Stripe's own privacy policy applies to the payment process.
6. Contact by email
If you contact us by email, we store your message and contact details to handle your request. Legal basis: Art. 6(1)(b) or (f) GDPR.
7. Cookies and local storage
This website does not use tracking cookies or analytics. It only stores a technical flag in your browser's session storage so that the intro animation is shown once per visit; it is deleted when you close the browser tab.
8. Links to social media
Our site links to our Instagram profile. Data is only transmitted to Instagram (Meta Platforms Ireland Limited) when you click the link and visit their site.
9. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests, as well as the right to withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority, e.g. the Berlin Commissioner for Data Protection and Freedom of Information. To exercise your rights, email firstlightgang@gmail.com.
10. Changes
We may update this policy when our website or legal requirements change. The current version is always available on this page.