Privacy
Policy

1. Controller

2. General information on data processing

We take the protection of your personal data seriously. Personal data is collected on this website only to the extent technically necessary. We do not pass your data on to third parties unless this is required for contract performance or you have given explicit consent.

The legal basis for processing personal data is set out in Art. 6 GDPR: consent (para. 1 lit. a), contract performance (para. 1 lit. b) and legitimate interests (para. 1 lit. f).

3. Hosting

This website is hosted by Vercel Inc., 340 Pine Street, Suite 900, San Francisco, CA 94104, USA. When you access the website, Vercel processes technically necessary connection data (IP address, timestamp, page requested) which is stored in server log files.

Vercel is certified under the EU-US Data Privacy Framework and therefore provides an adequate level of protection for your data pursuant to Art. 46 GDPR. Details: vercel.com/legal/privacy-policy.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a secure and stable website operation). Retention period: log files are automatically deleted after no more than 30 days.

4. Email contact

If you contact us via the contact form or directly by email, the data you provide (name, email address, message) will be used exclusively to handle your request.

The contact form on this website submits data to our serverless function and forwards it via transactional email (Resend) to service@kurklub.shop. Form contents are not stored in a persistent database.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering inquiries). Retention period: emails are deleted after the matter has been concluded, unless statutory retention obligations apply.

5. Appointment booking (Cal.com)

For online appointment booking we use the service Cal.com. When you book an appointment, the data you enter (name, email address, chosen time slot) is transmitted to Cal.com Inc., 1 World Trade Center, New York, NY 10007, USA.

Cal.com is certified under the EU-US Data Privacy Framework. Cal.com's privacy policy is available at cal.com/privacy.

Legal basis: Art. 6 para. 1 lit. b GDPR (carrying out pre-contractual measures at the request of the data subject).

6. Cookies

This website uses no tracking cookies and no web analytics. Only technically necessary session data is processed, which is automatically deleted when the browser is closed. Additionally, the language switcher stores your language preference (DE / EN) in your browser's localStorage — this never leaves your device.

7. No transfer to third parties

We do not transfer your personal data to third parties unless legally required or necessary for contract performance (e.g. hosting providers). No use for advertising purposes by third parties takes place.

8. Your rights

You have the following rights regarding your stored personal data:

• Access (Art. 15 GDPR) — you may request information about the data we store about you.
• Rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
• Erasure (Art. 17 GDPR) — you may request deletion of your data, provided no statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) — you may object to processing based on Art. 6 para. 1 lit. f GDPR.
• Withdrawal of consent (Art. 7 para. 3 GDPR) — you may withdraw consent at any time with effect for the future.

To exercise your rights, please contact: service@kurklub.shop

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent supervisory authority for Hamburg is:

10. Currency of this privacy policy

This privacy policy is currently valid and was last updated in April 2025. Further development of our website or changes to legal or regulatory requirements may make it necessary to amend this privacy policy.