Privacy policy

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Personal data is generally only processed with the user's consent or where processing is permitted by law (Art. 6(1) GDPR).

Each time our website is accessed, our system automatically collects data and information from the accessing device (server log files). The following data is collected:

• IP address of the requesting device
• Date and time of access
• Page/file accessed
• Browser and operating system used
• Referrer URL (previously visited page)

This data is stored for security reasons (e.g. to investigate cases of misuse); the legal basis is Art. 6(1)(f) GDPR (legitimate interest). The data is deleted after 7 days at the latest, unless further retention is required for evidentiary purposes.

This website is hosted by the following provider:

The hosting provider processes the log file data mentioned above on our behalf as a processor pursuant to Art. 28 GDPR.

When you contact us by email, phone or via the contact form, your inquiry — including any personal data resulting from it (name, inquiry) — is stored and processed for the purpose of handling your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measure or performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

For booking our water sports equipment (SUP boards, kayaks, pedal boats), we use an online booking system accessible at buchen.dock7.de. During the booking process, the following personal data is processed:

• Name, email address, and if applicable phone number (for booking confirmation and communication)
• Booking data (date, time, product booked)
• Payment data (processed via the payment provider Stripe, see below)

The legal basis is Art. 6(1)(b) GDPR (performance of a contract).

For payment processing, we use the service Stripe (Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA, or Stripe Payments Europe, Ltd., Dublin, Ireland for EU customers). Your payment data is transmitted directly to Stripe and processed there. We ourselves do not receive complete payment data (e.g. credit card numbers). For more information, see Stripe's privacy policy: stripe.com/en/privacy

On this page we offer a map for directions, embedded via Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). For privacy reasons, the map is not loaded automatically when the page is accessed, but only after you actively click "Load map".

Only once you click does your browser establish a connection to Google's servers, transmitting your IP address to Google, where it may be further processed, including in the USA. The legal basis is your consent given by clicking (Art. 6(1)(a) GDPR). More information can be found in Google's privacy policy: policies.google.com/privacy

This website uses only technically necessary cookies. These are required to ensure basic website functionality, in particular during the booking process (e.g. to maintain the session while booking on buchen.dock7.de). The legal basis is Art. 6(1)(f) GDPR or Sec. 25(2) No. 2 TDDDG (technically necessary cookies are exempt from the consent requirement).

No cookies are used for analytics, marketing or tracking purposes. A cookie consent banner is therefore not required.

You have the right at any time to:

• request information about the personal data we process (Art. 15 GDPR)
• request correction of inaccurate data (Art. 16 GDPR)
• request deletion of your data (Art. 17 GDPR)
• request restriction of processing (Art. 18 GDPR)
• request data portability (Art. 20 GDPR)
• object to processing (Art. 21 GDPR)
• lodge a complaint with a supervisory authority (Art. 77 GDPR)

Competent supervisory authority:
Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163, 65021 Wiesbaden, Germany

For security reasons, this site uses SSL/TLS encryption to transmit confidential content. You can recognize an encrypted connection by the "https://" in your browser's address bar.