DE
Book a surf session

Privacy Policy

This English translation is provided for convenience. The German version is legally binding.

Privacy Policy (last updated July 2026, approved by legal counsel)

Wellenwerk Gruppe, consisting of Wellenwerk Berlin GmbH and WWB Ticketing GmbH
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de

1. Data controller

The party responsible for processing data on this website and in the booking systems is Wellenwerk Gruppe (referred to below as “Wellenwerk”). Managing directors: Robert Havemann, Kilian Hohls. The controller decides, alone or jointly with others, on the purposes and means of processing personal data.

2. Data protection officer

Nikolas Imich
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de

3. Purposes and legal bases

We process personal data in accordance with Art. 6 GDPR for the following purposes:

  • Art. 6(1)(b): Initiating and performing contracts (booking, payment, communication)
  • Art. 6(1)(c): Fulfilling legal obligations (e.g., tax retention requirements)
  • Art. 6(1)(f): Safeguarding legitimate interests (IT security, operations, marketing)
  • Art. 6(1)(a): Consent (e.g., newsletter, photo/video recordings)

4. Categories of data processed

  • Master data (name, address, date of birth, phone, email)
  • Contract data (bookings, payments, participation)
  • Usage data (log files, Surf Eye video recordings)
  • Communication data (email, contact form, support requests)

5. Data collected on the website

When you visit our website, the server automatically collects log data (pages visited, date and time, IP address, browser, operating system, referrer). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security). This data is not combined with other data.

6. Contact forms & communication

Inquiries sent via contact form or email are processed for handling and follow-up. Legal basis: Art. 6(1)(a) (where consent is given) and (b) (contract/pre-contractual measures) GDPR.

7. Booking, customer account and payment processing

Bookings are made via our website or the customer portal (Bookinglayer). This data is used solely for contract processing, administration and invoicing. The booking calendar of our provider Bookinglayer (Bookinglayer B.V., Amsterdam, Netherlands) is embedded directly on the booking pages and loads when the page is opened; technically necessary data (including IP address and browser data) is transmitted to Bookinglayer. The legal basis is Art. 6 (1) (b) GDPR (contract initiation and performance). Within the booking system, Bookinglayer uses its own analytics and marketing services on our behalf (including Google Analytics, Google Tag Manager and Meta Pixel); details are provided in the cookie notice inside the booking area.

Payment providers:

  • Stripe Payments Europe Ltd., Ireland (Dublin), EU servers, no transfer to third countries
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
  • Sofortüberweisung (Klarna Bank AB, Sweden)

Legal basis: Art. 6(1)(b) GDPR.

8. Video recordings (Surf Eye & marketing)

During surf sessions, videos are created using the Surf Eye camera system. Purpose: creating personalized surf videos and quality assurance. Processed by: Surf Eye B.V., EU (EU servers). Retention period: 30 days, then automatically deleted.

By taking part in a surf session, you consent to this processing under Art. 6(1)(a) GDPR. Use for marketing purposes only takes place with explicit consent. You may object at any time by emailing info@wellenwerk-berlin.de.

9. Video surveillance

For security purposes, the entrance, parking lot and pool areas are monitored by video surveillance. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security). Retention period: 6 weeks, then automatically deleted.

10. Newsletter

With separate consent (double opt-in), we send newsletters via Mailchimp (The Rocket Science Group LLC, Atlanta, USA). Mailchimp is certified under the EU-US Data Privacy Framework; data transfers to the USA take place on this basis (Art. 45 GDPR). Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter or by emailing info@wellenwerk-berlin.de.

11. Cookies

Our website, https://wellenwerk-berlin.de, uses cookies and similar technologies (referred to collectively below as “cookies”). Cookies are also placed by third parties we work with. Below we inform you about the use of cookies on our website.

What are cookies? A cookie is a simple, small file sent along with the pages of a website and stored by your web browser on your PC or another device. The information stored in it may be sent back to our servers or those of relevant third-party providers on subsequent visits.

What are scripts? A script is a piece of program code used to make our website function and enable interactivity. This code runs on our servers or on your device.

What is a web beacon? A web beacon (also called a pixel tag) is a small, invisible piece of text or image on a website used to monitor traffic on the website. Various data about you is collected via web beacons for this purpose.

Cookie categories

  • Technical or functional cookies: Ensure that parts of our website work properly and that your user preferences are remembered (e.g., shopping cart contents until payment is complete). Set without consent.
  • Statistics cookies: Used to optimize the website experience and provide insight into how the website is used. Require your permission.
  • Advertising cookies: Provide insight into campaign results based on a behavioral profile on wellenwerk-berlin.de. Link you as a visitor to a unique ID, but do not create a profile for personalized ads.
  • Marketing/tracking cookies: Used to create user profiles for displaying advertising or tracking across multiple websites. Require your consent.
  • Social media:

Services used (excerpt)

  • WordPress · Functional · Technical website operation
  • Polylang · Preferences · Remembers your chosen language version
  • Complianz · Functional · Manages and stores your cookie consent
  • Fluent Forms · Functional · Provision and protection of our forms (contact, newsletter, event requests, cancellation)
  • Google Tag Manager & Google Analytics 4 (incl. _ga, _ga_*) · Statistics/Marketing · Reach and campaign measurement; only activated after your consent (Consent Mode v2)
  • Meta Pixel · Marketing · Conversion measurement; only after consent
  • Bookinglayer (bookings.wellenwerk-berlin.de) · Functional · Booking process and cart within the booking system; for the services used there see section 7
  • Stripe / PayPal / Klarna · Functional · Technically necessary cookies during payment (see section 7)
  • Mailchimp · Functional · Only upon newsletter sign-up (double opt-in), see section 10
  • Surf Eye (wellenwerk.surfeye.video) · External video portal · Surf Eye’s own privacy policy applies

You can view the current cookie overview at any time via the cookie settings in the banner.

Consent
When you visit our website for the first time, we show you a cookie banner. “Accept” consents to all categories, “Deny” sets only technically necessary cookies. Via “View preferences” you can select individual categories and confirm with “Save preferences”. You can change your selection at any time via the cookie settings in the banner. You can also disable cookies in your browser; please note that our website may then not work properly.

Enabling/disabling and deleting cookies
You can use your internet browser to automatically or manually delete cookies, block specific cookies, or have yourself notified whenever a cookie is placed. You can find details on this in your browser’s help section. Please note that our website may not function properly if all cookies are disabled. Deleted cookies will be placed again when you revisit the website.

12. Retention and deletion

  • Contract and billing data: 10 years (German Commercial Code/Fiscal Code)
  • Customer communication: until the purpose is fulfilled or consent is withdrawn
  • Surf Eye recordings: 30 days
  • Video surveillance: 6 weeks

13. Your rights

With respect to your personal data, you have the following rights at any time:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection (Art. 21 GDPR)
  • Lodging a complaint with the Berlin Commissioner for Data Protection and Freedom of Information

To exercise these rights, please contact us using the contact details listed above.

14. Withdrawing consent

Consent can be withdrawn at any time, without any particular form, by emailing info@wellenwerk-berlin.de. The lawfulness of processing carried out up to that point remains unaffected.

15. Changes

This privacy policy is regularly updated to reflect technical and legal developments. The current version at www.wellenwerk-berlin.de/datenschutz always applies.

Last updated: July 2026 (approved by legal counsel)