Privacy Policy

We process personal data only to the extent necessary to provide a functional website as well as our content and services. Processing is carried out in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable legal provisions.

Personal data means any information relating to an identified or identifiable natural person, such as name, email address, phone number, IP address or information you provide through a contact form.

The website runs on a modern cloud stack. Three providers are involved: Cloudflare as the hosting edge, Lovable as the platform for build and deployment, and Supabase as the database for inquiry submissions.

The website is delivered via the edge network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (EU office: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany).

When you visit the website, Cloudflare automatically processes server log data — in particular IP address, date and time of access, page accessed, referrer URL, browser type, operating system, provider and where applicable cookies for DDoS and bot protection. This data is technically necessary to deliver the website, operate it securely and detect misuse.

For data transfers to the USA, Cloudflare relies on EU Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework, under which Cloudflare is certified. Data processing agreement: https://www.cloudflare.com/cloudflare-customer-dpa/

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, performant and globally available operation of the website.

The technical development and deployment of the website is operated via the platform of Lovable AB, Stockholm, Sweden. As the seat is within the EU, no data transfer to third countries takes place.

Lovable processes build and deployment artefacts as well as project metadata. A data processing agreement can be requested through the Lovable account.

Legal basis: Art. 6(1)(f) GDPR.

Inquiries submitted via the contact form and technical diagnostic logs (submit attempts) are stored in a Supabase database provided through Lovable Cloud. Provider: Supabase, Inc., 970 Toa Payoh North #07-04, Singapore 318992.

The database instance is physically located in AWS region eu-west-1 (Dublin, Ireland). Personal data therefore does not leave the EU.

Processed data: name, email address, phone number, event details (event type, date, number of guests, budget), message and timestamp. Supabase acts as a sub-processor under the data processing agreement with Lovable. Supabase DPA: https://supabase.com/legal/dpa

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in documenting and reliably processing the inquiry).

If you contact us by email, phone or contact form, we process the data you provide in order to handle your inquiry. This may include name, company, email address, phone number, event date, number of guests, event format and your message.

Processing is carried out to take pre-contractual measures or to handle your inquiry on the basis of Art. 6(1)(b) GDPR. Where processing is necessary to organise and document communication, it is also based on our legitimate interest under Art. 6(1)(f) GDPR.

The data is deleted once your inquiry has been fully processed and no statutory retention obligations apply. Business communication may be stored for longer due to commercial and tax retention obligations.

If your inquiry leads to an offer, booking or contract, we process the necessary data to prepare, perform and handle the event. This includes contact details, company data, event details, coordination content, invoice data and contract documents.

The legal basis is Art. 6(1)(b) GDPR. Where statutory retention obligations apply, processing is also based on Art. 6(1)(c) GDPR.

Our website may use cookies and similar technologies. Technically necessary cookies are required for the website to function, to provide security features or to store your privacy settings.

Non-essential cookies and similar technologies, especially for analytics, marketing or external media, are used only with your explicit consent.

The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR. The legal basis for consent-based services is Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG.

You can change or withdraw your consent at any time with effect for the future. We provide a way on the website to reopen your privacy settings.

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics helps us understand how visitors use our website. Cookies or similar technologies may be used. Information such as pages viewed, time spent, interactions, technical device data and shortened IP addresses may be processed.

We use Google Analytics only if you have previously given your consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG.

Google Ireland Limited may transfer personal data to Google LLC in the USA. For transfers to the USA, Google relies on appropriate safeguards, in particular the EU-US Data Privacy Framework or standard contractual clauses where required.

Further information: https://policies.google.com/privacy

This website may use Google Ads and Google conversion tracking provided by Google Ireland Limited. If you reach our website via a Google ad, Google may set a cookie or similar technology to determine whether an ad led to an inquiry or another relevant action.

We use Google Ads conversion tracking only if you have previously given your consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG.

Further information: https://policies.google.com/privacy

This website may use the Meta Pixel or comparable marketing technologies provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

With the Meta Pixel, we can understand whether users perform certain actions on our website after clicking on a Facebook or Instagram ad, such as submitting an inquiry. Meta may also use this information to deliver and optimise ads.

We use the Meta Pixel only if you have previously given your consent. The legal basis is Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG.

Data may be transferred to Meta Platforms Inc. in the USA. Further information: https://www.facebook.com/privacy/policy/

We use Google Search Console provided by Google Ireland Limited to monitor the technical visibility and indexing of our website in Google Search. Google Search Console does not analyse individual website visitors and does not set cookies on our website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical optimisation and visibility of our website.

Our website may include content from external providers, such as videos, maps, social media content or other external media. When such content is loaded, personal data such as IP address, browser information and usage data may be transmitted to the respective provider.

Where external media is not technically necessary, it is loaded only after your consent or through a privacy-friendly two-click solution.

The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with § 25 TDDDG.

Our website may embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube videos are only loaded once you have agreed to external media or actively enabled the respective video. Only then can data be transmitted to Google or YouTube.

Our website contains links to our social media profiles, especially Instagram. If you click on such a link, you leave our website. The respective provider is responsible for processing personal data on the platform.

As long as you do not click the links and no embedded social media content is loaded, a simple link does not transmit data to the platform.

Personal data is passed on to third parties only if this is necessary to process your inquiry, perform a contract, fulfil legal obligations or is based on your consent.

Recipients may include technical service providers, hosting providers, email providers, tax advisors, payment providers, event partners or service providers required for carrying out an event.

We store personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.

Inquiry data is deleted once the inquiry has been fully processed and no further retention obligations apply. Contract and invoice data is stored in accordance with statutory retention obligations.

You have the following rights regarding your personal data:

To exercise your rights, contact us at info@eventlocation-sickertshofen.com.

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law. Responsible supervisory authority in Bavaria:

This privacy policy is currently valid and was last updated in May 2026.

We reserve the right to adapt this privacy policy if technical, legal or organisational changes occur.