Privacy

The German version of this policy is the legally binding one.

Controller

Doppelweiss GmbH, Meddenwarf 1, 22457 Hamburg, Germany — [email protected]

Visiting this website

The site is delivered through Cloudflare, Inc. as a processor, which handles technical connection data (IP address, time, page requested, browser identifier) to deliver the page and to defend against attacks. Legal basis: our legitimate interest in secure operation (Art. 6(1)(f) GDPR). We use no cookies and store nothing on your device. The only exception arises if you start a YouTube video yourself (see “YouTube videos”).

Audience measurement with Umami

To understand which content is read, we count page views with the open-source software Umami. We run Umami ourselves on our own server (tracking.doppelweiss.com, hosted by Hetzner Online GmbH as a processor); no data goes to third parties. We record the page viewed, the referring page, time, browser, operating system, device type, screen size, language and the country or region derived from the IP address. The IP address itself is not stored. Umami sets no cookies and stores nothing on your device; visits are grouped by an anonymous, regularly changing hash that does not identify you. Legal basis: our legitimate interest in designing the site according to demand (Art. 6(1)(f) GDPR). You can object by blocking scripts from tracking.doppelweiss.com or by writing to us.

YouTube videos

The home page shows a video from our YouTube channel. When the page loads you only see a still image from our own server; no request goes to YouTube. Only when you click the image does the player load from youtube-nocookie.com (Google Ireland Limited). Google then receives your IP address and technical data about your browser, may store data on your device and may transfer data to third countries, in particular the USA. Legal basis: your consent by clicking (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Without a click there is no connection to YouTube.

Booking and payment

Payments are handled by Stripe Payments Europe, Ltd. You enter your details directly with Stripe; we receive name, e-mail address, billing address, VAT ID where applicable and the payment status — never full card data. Legal basis: performance of the contract (Art. 6(1)(b) GDPR). Invoices are retained for ten years under German commercial and tax law.

Communication via WhatsApp

Part of the service runs over WhatsApp, operated by WhatsApp Ireland Limited (Meta). Message content is end-to-end encrypted; connection data still arises at Meta and may be transferred to third countries. We use this channel only because you choose it when booking. Please do not send highly sensitive data over WhatsApp. On request we will communicate by e-mail or phone.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection, and you may lodge a complaint with a supervisory authority — here, the Hamburg Commissioner for Data Protection and Freedom of Information.