Privacy policy
We treat your personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). This policy explains what we collect, why, and what you can do about it.
Last updated: 1 September 2026
1. Controller
Kraftraum Hamborn GmbH, Kaiser-Wilhelm-Straße 288, 47166 Duisburg, Germany. Telephone +49 203 4588120, email moin@kraftraum-hamborn.de. The controller decides on the purposes and means of processing your personal data. We have not appointed a data protection officer, as we are not legally required to do so.
2. Hosting
This site is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Transfers to the USA are based on the EU standard contractual clauses and the EU-US Data Privacy Framework. The legal basis is our legitimate interest in a secure and efficient presentation of our website, Art. 6(1)(f) GDPR.
3. Server log files
Each time this site is accessed, the hosting provider automatically records: the page requested, the date and time, the amount of data transferred, the referring URL, the browser type and version, the operating system and an abbreviated IP address. This data is not merged with other sources and is deleted after seven days at the latest. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in the technically secure operation of the site.
4. Trial and contact form
If you use the trial form we process the name, email address, optional telephone number, requested date, the type of visit and any message you write. We use this data solely to answer your enquiry and to prepare your visit. Legal basis: Art. 6(1)(b) GDPR for pre-contractual measures, and Art. 6(1)(a) GDPR for the consent you give with the checkbox. You may withdraw that consent at any time with effect for the future. Enquiries are deleted six months after the last contact unless a membership has come about, in which case the retention periods below apply.
5. Membership data
If you become a member, we process your name, address, date of birth, bank details and attendance data in order to perform the contract, Art. 6(1)(b) GDPR. Accounting records are kept for ten years under §147 AO and §257 HGB. Access data from the turnstile is deleted after 90 days.
6. Cookies and local storage
This website sets no analytics cookies and no advertising cookies. We store two values in your browser's local storage: whether you have acknowledged the cookie notice, and whether you have allowed the map to load. Both stay on your device, are never transmitted to us, and can be deleted at any time by clearing your browser storage. Legal basis: §25(2) TTDSG, as these values are strictly necessary to provide the function you requested.
7. Map
We do not embed a map until you actively click to load it. Once you do, the map tiles are requested from OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge CB4 0WS, United Kingdom, which necessarily transmits your IP address to that server. Legal basis: your consent under Art. 6(1)(a) GDPR. If you do not click, no request is made.
8. Your rights
You have the right to information about the data we hold on you (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Write to moin@kraftraum-hamborn.de and we will answer within one month.
9. Right to complain
You may lodge a complaint with a supervisory authority. The one responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf.
10. Encryption
This site uses TLS encryption for all connections. You can recognise an encrypted connection by the https:// prefix and the padlock in your browser's address bar.