Privacy Policy
This English version is provided for convenience. In the event of any discrepancy, the German version is legally binding.
1. Overview
Protecting your personal data matters to us. This privacy policy explains which personal data is processed when you visit the website cordeshof-berlin.de and when you contact us, on what legal basis this takes place and what rights you have. Personal data is any information by which you can be personally identified.
In short: this website does not set cookies, does not use tracking or analytics services, does not embed content from third-party providers and does not transmit data to social networks. The only data processed is the technically necessary access data of our hosting provider and the information you send us yourself by e-mail or via the enquiry form.
2. Controller
The controller responsible for data processing within the meaning of the General Data Protection Regulation (GDPR) is:
Veranstaltungsatelier
Daniel Klassen
Gudvanger Straße 52
10439 Berlin, Germany
Telephone: +49 173 0000 000
E-mail: event@cordeshof-berlin.de
We are not required to appoint a data protection officer under Art. 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG). For any questions about data protection, please use the contact details above.
3. No cookies, no tracking, no third-party services
This website does not load any external resources. Fonts, images, stylesheets, scripts and the map showing how to get here are delivered exclusively from our own server. No cookies are set, no analytics or marketing services (such as Google Analytics or the Meta pixel) are embedded, no third-party map services or video players are loaded and no social media plugins are used. For this reason the website does not need a cookie banner. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is not required, because no information beyond what is technically necessary is stored on or read from your device.
Our browser script merely remembers, for the duration of your visit (session storage), whether the welcome animation on the homepage has already been shown. No personal data is stored in the process; the entry is deleted automatically when you close the browser tab.
4. Hosting and server log files
This website is hosted by an external service provider: ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you open a page, your browser automatically transmits data to the server, which is stored in so-called server log files. This data comprises: the IP address of the requesting device, the date and time of access, the page or file requested, the amount of data transferred, the access status, the previously visited page (referrer URL) as well as the browser type and operating system. This data is not merged with other data sources.
Processing takes place on the basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, security and stability of the website and in the prevention of attacks. The log files are deleted after seven days at the latest unless they are needed for longer to investigate a specific security incident. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider; processing takes place exclusively in the provider’s data centre in Germany.
5. Contact by e-mail and enquiry form
The enquiry form on this website does not store any data on our web server. When you submit it, it opens your own e-mail program with a prepared message containing your details (occasion, preferred date, approximate number of guests, name, e-mail address and your message). We only receive your data once you send this e-mail yourself. The same applies if you write to us directly by e-mail.
We process this information exclusively to answer your enquiry, check availability and scope, prepare a quote and conduct further communication. The legal basis is Art. 6 (1) (b) GDPR (steps prior to entering into a contract or performance of a contract). Where your enquiry is not aimed at concluding a contract, we base the processing on our legitimate interest in responding to your message (Art. 6 (1) (f) GDPR).
We keep your details until your enquiry has been dealt with in full and no further communication is to be expected; we then delete them unless statutory retention obligations require otherwise. If a contract is concluded, we retain the documents required for its performance for the duration of the statutory retention periods under German commercial and tax law of six or eight to ten years (Section 257 of the German Commercial Code, Section 147 of the German Fiscal Code). Our e-mails are also processed by ALL-INKL.COM (address see section 4); a data processing agreement is in place with this provider as well.
Providing your data is voluntary. Without your name and e-mail address, however, we are unable to answer your enquiry.
6. Disclosure of data
We only pass on your personal data where this is necessary for the performance of a contract (for example to partner trades such as technical or catering companies engaged for your event), where you have given your consent, where we are legally obliged to do so or where this is necessary to enforce our rights. No data is transferred to countries outside the European Union or the European Economic Area. Your data is not sold and is not passed on to third parties for advertising purposes.
7. Data security
This website uses SSL/TLS encryption. You can recognise the encrypted connection by the prefix “https://” and the padlock symbol in your browser’s address bar. We also take technical and organisational measures pursuant to Art. 32 GDPR to protect your data against loss, manipulation and unauthorised access. Please note that e-mail communication without additional encryption may have security gaps; for particularly confidential information, please get in touch with us.
8. Your rights
With regard to the personal data concerning you, you have the following rights vis-à-vis us:
- the right of access to the data processed (Art. 15 GDPR),
- the right to rectification of inaccurate or incomplete data (Art. 16 GDPR),
- the right to erasure (Art. 17 GDPR),
- the right to restriction of processing (Art. 18 GDPR),
- the right to data portability (Art. 20 GDPR),
- the right to withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
Right to object (Art. 21 GDPR): Where we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, an informal message to event@cordeshof-berlin.de or to the postal address given above is sufficient.
9. Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The supervisory authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin, Germany
Telephone: +49 30 13889-0
E-mail: mailbox@datenschutz-berlin.de
www.datenschutz-berlin.de
10. No automated decision-making
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
11. Changes to this privacy policy
We will update this privacy policy whenever the legal situation or our website changes, for instance if new features such as a newsletter or online appointment booking are added. The version published here applies in each case.
Last updated: 21 September 2026