Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

2. Hosting and website delivery

This static Astro website is delivered through Cloudflare Pages and Cloudflare's network. When you access the website, technically necessary connection data is processed. This can include your IP address, access time, requested content, browser and device information, and technical log data.

This processing supports secure, stable and efficient website delivery and helps prevent abuse and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

The provider is Cloudflare, Inc., USA. Cloudflare offers contractual data-protection safeguards, including a Data Processing Addendum and, where required, transfer mechanisms such as Standard Contractual Clauses. Processing outside the European Union cannot be ruled out.

3. Booking enquiries

When you use the booking form, we process the information you provide to review and answer your enquiry and, where relevant, to prepare an event or potential contract.

The form collects the following information:

• name
• email address
• phone number
• event date
• event location / venue
• event type
• approximate number of guests
• preferred contact method
• message / event description

Article 6(1)(b) GDPR applies where processing is necessary to respond to a specific enquiry and take steps prior to entering into a contract. Where limited processing is required to secure the form and prevent abuse, it is based on Article 6(1)(f) GDPR.

4. Email processing

Booking enquiries are processed through a Cloudflare Worker and Cloudflare Email Service / Email Routing, then forwarded to the Gmail inbox [email protected].

Gmail is a Google service. Google may process personal data, and transfers to countries outside the European Economic Area, particularly the United States, cannot be ruled out.

Further information is available in Google's Privacy Policy.

5. Cloudflare Turnstile

We use Cloudflare Turnstile to protect the booking form from automated submissions and abuse. Cloudflare processes technically necessary signals such as the IP address, browser or User-Agent information, TLS-related characteristics, information about the website being accessed, the site key, and its associated origin.

This processing primarily serves to detect automated access and secure the form. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting the form and our technical infrastructure from spam, bots and abuse.

Further information is available in the Cloudflare Turnstile Privacy Addendum.

6. Cookies and local storage

We currently use no analytics, advertising or marketing cookies.

Technically necessary cookies or comparable storage mechanisms may be used by the security and infrastructure services involved where required to deliver and secure the website. We currently use no non-essential tracking technologies.

7. Retention

We keep personal data only for as long as necessary for the relevant purpose.

Enquiries that do not lead to a contractual relationship are deleted once they are no longer needed to handle the enquiry and carry out reasonable follow-up, unless statutory retention obligations require otherwise. If a contract is formed, commercial and tax-law retention requirements may require data to be kept for longer.

8. Recipients and international transfers

Cloudflare may process data as part of the hosting, security and email infrastructure. Google or Gmail may process booking notifications forwarded to the Gmail inbox. International transfers, including transfers to the United States, may occur. Where available and applicable, providers use legal safeguards for these transfers. We cannot guarantee that processing takes place exclusively within Europe.

9. Your rights

Subject to the GDPR's requirements, you may have rights including:

• access to your personal data
• rectification of inaccurate data
• erasure of your data
• restriction of processing
• data portability where applicable
• objection to processing where applicable

You also have the right to lodge a complaint with a competent data-protection supervisory authority.

10. Updates

We update this Privacy Policy when the website, the services we use, or legal requirements change.