Privacy policy

We only process the data we need to answer your request and run your event.

• No cookies, no tracking, no analytics, no advertising.
• Fonts are served from our own server; loading the site opens no connection to Google or any other font provider.
• The website and the database run on a server in Germany.

This website and our database run on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. We have a data processing agreement with Hetzner under Art. 28 GDPR.

Each time the website is accessed, the server automatically records technical data your browser sends:

• IP address
• date and time of access
• page or file requested
• referrer (the page visited before)
• browser and operating system

This is needed to deliver the website, find errors and fend off attacks. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Log files are deleted automatically after 14 days.

When you request a date through our form, we process:

• the requested date and package
• name and email address
• phone number (optional)
• the event location
• your message (optional)

We use this to check availability, reply to you and prepare the booking. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).

The request is stored in our database on our server in Germany, and we are notified by email. If a booking is confirmed, you receive a confirmation from us by email.

Retention: declined or unanswered requests are deleted after 6 months, confirmed bookings 12 months after the event. Where a contract results, we keep invoices and booking records for as long as German tax and commercial law requires (up to 10 years).

When you write to us through the contact form or by email, we process your name, email address and message to answer you. Messages from the contact form are not stored in a database; they are sent straight to our mailbox.

The legal basis is Art. 6(1)(b) GDPR where your message concerns a booking, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete messages once your matter is settled, unless statutory retention periods apply.

Our mailboxes and the sending of emails from the forms are provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS.

While you type the event location, the form suggests matching addresses. The suggestions come from Photon, a service of komoot GmbH, Potsdam, Germany, based on OpenStreetMap. Our server makes the request, not your browser: komoot only receives the text you typed, not your IP address.

For the address you pick, our server calculates the driving distance from Mannheim using the routing service of FOSSGIS e.V. (routing.openstreetmap.de). Only coordinates are sent.

The legal basis is Art. 6(1)(b) GDPR: we need the address to check whether the event lies within our service area.

[OPEN: complete once LumaBooth is set up — what guests enter at the booth (QR code only, or email/phone too), gallery via fotoShare Cloud by Lumasoft LLC, East Brunswick, New Jersey, USA; transfer to the USA under the EU-US Data Privacy Framework or the EU Standard Contractual Clauses; after how many days event galleries are deleted; a notice at the booth with a QR code to this section.]

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• have incorrect data corrected (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on our legitimate interest (Art. 21 GDPR)

Just send us an email. You can also complain to a data protection supervisory authority, for example the one responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

We do not use automated decision-making or profiling.