Privacy Policy (as of Oct 2025)
Wellenwerk Group
comprising Wellenwerk Berlin GmbH, Wellenwerk Berlin GmbH & Co. Sport KG,
Wellenwerk Berlin GmbH & Co. Gastronomie KG, and WWB Ticketing GmbH
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de
1. Controller
The controller responsible for data processing on this website and within the booking systems is Wellenwerk Group (“Wellenwerk”).
Managing Directors: Robert Havemann, Kilian Hohls.
The controller decides—alone or jointly with others—on the purposes and means of processing personal data.
2. Data Protection Officer
Kilian Hohls
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de
3. Purposes and Legal Bases
We process personal data under Art. 6 GDPR for the following purposes:
Art. 6(1)(b): contract initiation and performance (booking, payment, communication)
Art. 6(1)(c): compliance with legal obligations (e.g., statutory retention)
Art. 6(1)(f): legitimate interests (IT security, operations, marketing)
Art. 6(1)(a): consent (e.g., newsletter, photo/video recordings)
4. Categories of Data Processed
Master data (name, address, date of birth, phone, email)
Contract data (bookings, payments, participation)
Usage data (log files, Surf Eye video recordings)
Communication data (email, contact form, support requests)
5. Data Collected via the Website
When visiting our website, the server automatically collects log data (pages visited, date/time, IP address, browser, operating system, referrer).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security).
No merging with other data takes place.
6. Contact Forms & Communications
Requests submitted via contact forms or email are processed for handling and follow-up.
Legal basis: Art. 6(1)(a) (consent, where applicable) and Art. 6(1)(b) GDPR (contract/pre-contractual measures).
7. Booking, Customer Account, and Payments
Bookings are made via our website and customer portal (Bookinglayer). Data is used solely for contract execution, administration, and invoicing.
Payment service providers:
Stripe Payments Europe Ltd., Ireland (Dublin) – EU servers, no third-country transfers.
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Sofortüberweisung (Klarna Bank AB, Sweden)
Legal basis: Art. 6(1)(b) GDPR.
8. Video Recordings (Surf Eye & Marketing)
During surf sessions, videos are captured using the Surf Eye camera system.
Purpose: creation of personalized surf videos and quality assurance.
Processor: Surf Eye B.V., EU (EU servers).
Retention: 30 days, then automatic deletion.
By participating in a surf session, you consent to processing under Art. 6(1)(a) GDPR.
Marketing use only with explicit consent. You may object at any time via info@wellenwerk-berlin.de.
9. Video Surveillance
Entrance, parking, and pool areas are subject to video surveillance for safety.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security).
Retention: 72 hours, then automatic deletion.
10. Newsletter
With separate consent (double opt-in), we send newsletters via Brevo (EU servers, France).
Legal basis: Art. 6(1)(a) GDPR.
You can unsubscribe at any time via the link in the newsletter or by emailing info@wellenwerk-berlin.de.
11. Cookies and Local Storage
Our website uses only essential cookies for session management and booking functionality.
No tracking or analytics cookies.
Legal basis: Art. 6(1)(f) GDPR.
12. Retention and Deletion
Contract and billing data: 10 years (German commercial/tax law)
Customer communications: until purpose is fulfilled or consent is withdrawn
Surf Eye recordings: 30 days
Video surveillance: 72 hours
13. Your Rights
You have the following rights at any time:
Access (Art. 15), Rectification (Art. 16), Erasure (Art. 17), Restriction (Art. 18), Data portability (Art. 20), Objection (Art. 21), and the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information.
14. Withdrawal of Consent
You may withdraw consent at any time by emailing info@wellenwerk-berlin.de.
The lawfulness of processing prior to withdrawal remains unaffected.
15. Changes
This Privacy Policy is reviewed regularly and adapted to technical and legal developments.
The current version is always available at www.wellenwerk-berlin.de/datenschutz.
Version: October 2025