Privacy Policy

As of: October 2026. This is a translation for your convenience; only the German version is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Theater im Zimmer GmbH
Alsterchaussee 30
20149 Hamburg, Germany
Phone: +49 (0) 40 414130
Email: info@theater-im-zimmer.de

Represented by the management (see Legal Notice).

2. Summary

We take the protection of your personal data seriously and process it exclusively in accordance with the statutory provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

This website sets no cookies, uses no analytics or tracking tools and shows no advertising. Content from YouTube and Google Maps is only loaded when you actively enable it with a click. No automated decision-making or profiling takes place.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. When you visit our pages, your browser automatically transmits information that the server stores in log files:

• IP address of the requesting device
• date and time of access
• page or file accessed (e.g. images, PDF or audio files)
• amount of data transferred and status code
• previously visited page (referrer), if transmitted
• browser and operating system used

We need this data to deliver the website, to ensure its security and stability and to fix errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. This data is not combined with other data sources. The log files are deleted after a short time unless further retention is necessary to investigate a specific security incident.

We have concluded a data processing agreement with IONOS in accordance with Art. 28 GDPR. IONOS processes the data only on our instructions.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser’s address bar and by the padlock symbol.

5. Contacting us by email or phone

If you contact us by email or phone, we process your details (e.g. name, company, email address, phone number, preferred event date and your message) in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry relates to a contract or pre-contractual measures (e.g. an event enquiry or voucher order by email), and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to your enquiry). We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations (in particular under commercial and tax law, usually 6 or 10 years) prevent this.

6. Google Fonts

To ensure a consistent appearance, we use the fonts “Cormorant Garamond” and “Lato” from Google Fonts, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you open a page, your browser loads the fonts directly from Google’s servers. In doing so, your IP address is transmitted to Google; processing in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. Google Fonts does not set cookies.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a consistent and appealing presentation of our website. For more information, see Google’s privacy policy and developers.google.com/fonts/faq/privacy.

7. YouTube videos

On some pages we embed videos from the YouTube platform, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the privacy-enhanced mode (youtube-nocookie.com) and a two-click solution: as long as you do not click the play button, no connection to YouTube is established and no data is transmitted to YouTube.

Only when you start a video with a click is it loaded from YouTube. In particular, your IP address, the page visited and technical information about your browser are transmitted to YouTube; YouTube may also store cookies or similar technologies on your device. Processing in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. If you are logged in to your Google account, YouTube can associate the request with your account.

The legal basis is the consent you give by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). It applies only to the respective page view. More information: Google’s privacy policy.

8. Google Maps

To show you how to find us, you can display a map from Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded when you click “Load map”; before that, no data is transmitted to Google.

After the click, in particular your IP address and information about your use of the map are transmitted to Google and may be processed in the USA; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). More information: Google’s privacy policy.

9. Links to other websites and social networks

Our website contains links to external websites, for example to partners, press articles, Facebook, X, LinkedIn or Xing. These are simple links, not embedded plug-ins: no data is transmitted to these providers when you visit our pages. Only when you click a link do you leave our website; the respective provider is responsible for data processing on the target page.

10. Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to info@theater-im-zimmer.de is sufficient.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg, Germany
Phone: +49 40 428 54-4040
Email: mailbox@datenschutz.hamburg.de

12. Changes to this privacy policy

We update this privacy policy whenever the website or the legal requirements change. The version published here applies.