Privacy policy

When you book a workshop, you send us your name, your email address, the number of people and optionally a message. This information reaches us solely as an email in our mailbox and is read exclusively by the operator of Golden Hour Craft.

There is no booking database, no user account and no tracking of your booking. We do not pass your data on to third parties and do not use it for advertising.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures and performance of the contract). We store the email until your booking has been completed and no further questions are to be expected; beyond that only as long as statutory retention periods require (in particular commercial and tax law periods of up to 10 years).

We use the mailbox of our e-mail provider netcup GmbH, Karlsruhe (Germany) to receive and send our e-mails. Bookings and enquiries from this website are delivered through this provider; your name, e-mail address and the content of your message are processed so that we can send you the confirmation with date, location and payment information.

The provider processes this data on our behalf. Processing takes place on servers in Germany; no transfer to a third country occurs.

If you write to us via the contact form or by email, we process your details in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR). We delete this data as soon as it is no longer required and no statutory retention obligations prevent deletion.

This website is hosted by Vercel Inc., USA. When you visit the site, Vercel automatically processes access data (including IP address, date and time, page accessed, browser type). This processing is technically necessary in order to deliver the website and to ensure its stability and security. The legal basis is Art. 6 (1) (f) GDPR.

Vercel acts as our processor under the provider's Data Processing Addendum pursuant to Art. 28 GDPR. As Vercel is based in the USA, personal data may be transferred to a third country. Such transfers are safeguarded by the Standard Contractual Clauses adopted by the European Commission in decision 2021/914, which form part of that agreement.

Details: https://vercel.com/legal/dpa and https://vercel.com/legal/privacy-policy

This website does not set any cookies for analytics or marketing purposes and does not embed any tracking services. The language selection (German/English) is part of the page address and does not require a cookie.

The fonts used are delivered locally from our own server. Visiting the site therefore does not establish a connection to third-party servers (e.g. Google Fonts) and no IP address is transmitted to third parties.

On our contact page you can load a map from OpenStreetMap. The map is only loaded after you explicitly click “Load map” — no connection to OpenStreetMap is established beforehand. By clicking you consent to your IP address being transmitted to the OpenStreetMap Foundation (Art. 6 (1) (a) GDPR). Provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Privacy policy: https://osmfoundation.org/wiki/Privacy_Policy

We link to our Instagram profile. This is a simple link — no Instagram content is embedded and no data is transmitted to Instagram when you visit our site. The provider's privacy policy only applies once you click the link.

For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar starting with “https://”.

You have the right at any time to information about the data we store (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing (Art. 21). You can withdraw any consent you have given at any time with effect for the future.

An informal email to us is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany.