Privacy Policy

This English translation is provided for convenience. The German version is legally binding.

Wellenwerk Gruppe, consisting of Wellenwerk Berlin GmbH, Wellenwerk Berlin GmbH & Co. Sport KG, Wellenwerk Berlin GmbH & Co. Gastronomie KG and WWB Ticketing GmbH
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de

1. Data controller

The party responsible for processing data on this website and in the booking systems is Wellenwerk Gruppe (referred to below as “Wellenwerk”). Managing directors: Robert Havemann, Kilian Hohls. The controller decides, alone or jointly with others, on the purposes and means of processing personal data.

2. Data protection officer

Nikolas Imich
Landsberger Allee 270, 10367 Berlin
Email: info@wellenwerk-berlin.de

3. Purposes and legal bases

We process personal data in accordance with Art. 6 GDPR for the following purposes:

Art. 6(1)(b): Initiating and performing contracts (booking, payment, communication)
Art. 6(1)(c): Fulfilling legal obligations (e.g., tax retention requirements)
Art. 6(1)(f): Safeguarding legitimate interests (IT security, operations, marketing)
Art. 6(1)(a): Consent (e.g., newsletter, photo/video recordings)

4. Categories of data processed

Master data (name, address, date of birth, phone, email)
Contract data (bookings, payments, participation)
Usage data (log files, Surf Eye video recordings)
Communication data (email, contact form, support requests)

5. Data collected on the website

When you visit our website, the server automatically collects log data (pages visited, date and time, IP address, browser, operating system, referrer). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security). This data is not combined with other data.

6. Contact forms & communication

Inquiries sent via contact form or email are processed for handling and follow-up. Legal basis: Art. 6(1)(a) (where consent is given) and (b) (contract/pre-contractual measures) GDPR.

7. Booking, customer account and payment processing

Bookings are made via our website or the customer portal (Bookinglayer). This data is used solely for contract processing, administration and invoicing.

Payment providers:

Stripe Payments Europe Ltd., Ireland (Dublin), EU servers, no transfer to third countries
PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg
Sofortüberweisung (Klarna Bank AB, Sweden)

Legal basis: Art. 6(1)(b) GDPR.

8. Video recordings (Surf Eye & marketing)

During surf sessions, videos are created using the Surf Eye camera system. Purpose: creating personalized surf videos and quality assurance. Processed by: Surf Eye B.V., EU (EU servers). Retention period: 30 days, then automatically deleted.

By taking part in a surf session, you consent to this processing under Art. 6(1)(a) GDPR. Use for marketing purposes only takes place with explicit consent. You may object at any time by emailing info@wellenwerk-berlin.de.

9. Video surveillance

For security purposes, the entrance, parking lot and pool areas are monitored by video surveillance. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security). Retention period: 6 weeks, then automatically deleted.

10. Newsletter

With separate consent (double opt-in), we send newsletters via Mailchimp (Atlanta, USA). Legal basis: Art. 6(1)(a) GDPR. You can unsubscribe at any time via the link in the newsletter or by emailing info@wellenwerk-berlin.de.

11. Cookies

Our website, https://wellenwerk-berlin.de, uses cookies and similar technologies (referred to collectively below as “cookies”). Cookies are also placed by third parties we work with. Below we inform you about the use of cookies on our website.

What are cookies? A cookie is a simple, small file sent along with the pages of a website and stored by your web browser on your PC or another device. The information stored in it may be sent back to our servers or those of relevant third-party providers on subsequent visits.

What are scripts? A script is a piece of program code used to make our website function and enable interactivity. This code runs on our servers or on your device.

What is a web beacon? A web beacon (also called a pixel tag) is a small, invisible piece of text or image on a website used to monitor traffic on the website. Various data about you is collected via web beacons for this purpose.

Cookie categories

Technical or functional cookies: Ensure that parts of our website work properly and that your user preferences are remembered (e.g., shopping cart contents until payment is complete). Set without consent.
Statistics cookies: Used to optimize the website experience and provide insight into how the website is used. Require your permission.
Advertising cookies: Provide insight into campaign results based on a behavioral profile on wellenwerk-berlin.de. Link you as a visitor to a unique ID, but do not create a profile for personalized ads.
Marketing/tracking cookies: Used to create user profiles for displaying advertising or tracking across multiple websites. Require your consent.
Social media: Embedded content from Facebook and Instagram (e.g., “Like,” “Share” buttons) sets cookies from the respective providers. Facebook and Instagram are based in the USA; the privacy policies of the respective networks apply in addition.

Services used (excerpt)

WordPress · Functional · Website operation, user preferences, login status
WP-Optimize · Functional · Technical website optimization
Polylang · Preferences · Management of language versions
Google AdSense · Marketing/tracking · Ad delivery, conversion tracking
GDPR Cookie Consent · Functional · Managing cookie consent
Facebook · Marketing/tracking, functional · Social posts/share buttons, retargeting, fraud prevention
Instagram · Marketing/tracking · Social posts/share buttons
Google Analytics (including _ga, __utm*) · Statistics · Reach/usage measurement
Other (including reCAPTCHA, Stripe session cookies, Elementor/slider plugins, Wistia video progress, TikTok cookies). Functional/marketing, some still under review

A complete, itemized technical cookie list to follow.

Consent
When you visit our website for the first time, we show you a pop-up explaining cookies. As soon as you click “Save settings,” you give us your consent to use all categories of cookies and plugins you have selected, as described in this cookie policy. You can disable the use of cookies through your browser, but please note that our website may then not function properly.

Enabling/disabling and deleting cookies
You can use your internet browser to automatically or manually delete cookies, block specific cookies, or have yourself notified whenever a cookie is placed. You can find details on this in your browser’s help section. Please note that our website may not function properly if all cookies are disabled. Deleted cookies will be placed again when you revisit the website.

12. Retention and deletion

Contract and billing data: 10 years (German Commercial Code/Fiscal Code)
Customer communication: until the purpose is fulfilled or consent is withdrawn
Surf Eye recordings: 30 days
Video surveillance: 72 hours

13. Your rights

With respect to your personal data, you have the following rights at any time:

Access (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR)
Lodging a complaint with the Berlin Commissioner for Data Protection and Freedom of Information

To exercise these rights, please contact us using the contact details listed above.

14. Withdrawing consent

Consent can be withdrawn at any time, without any particular form, by emailing info@wellenwerk-berlin.de. The lawfulness of processing carried out up to that point remains unaffected.

15. Changes

This privacy policy is regularly updated to reflect technical and legal developments. The current version at www.wellenwerk-berlin.de/datenschutz always applies.

Last updated: October 2025