Privacy policy

1. Controller

2. Accessing the website and hosting

This website is provided via Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (“Vercel”). When the website is accessed, Vercel receives technical connection and log data, in particular the IP address, the time and destination of the request, as well as browser, device, status and error data. The processing initiated by Berolina serves to deliver the website and ensure its stability and security. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest lies in providing a secure and reliable website.

Static content is delivered through Vercel’s distributed infrastructure. Frankfurt am Main (fra1) is configured as the execution region for server-side functions, in particular the technical processing of the event form. This setting does not exclude the processing of technical data at other Vercel locations or by service providers used by Vercel.

When you submit the event form, the form content is first processed in the server environment provided by Vercel and then sent via the email service described in section 5. Berolina does not create an additional database copy of the enquiry through this website. As the hosting platform provider, Vercel receives the resulting technical data and form details.

For customer data that Vercel processes on Berolina’s behalf under the paid Pro plan currently in use, Vercel is engaged as a processor on the basis of the Data Processing Addendum applicable to Pro plans. In addition, according to its published information, Vercel processes service-generated usage, log and metadata for its own purposes. Under the Vercel terms, the use of submitted content to train AI and machine-learning models is not enabled by default on the paid Pro plan; it can be enabled through a team setting.

According to Vercel, data may be processed in the USA and other countries. Vercel states that it is certified under the EU-US Data Privacy Framework. Where a transfer carried out by Vercel as a processor is not covered by an adequacy decision, the Data Processing Addendum incorporates the EU Standard Contractual Clauses. The retention period for Vercel’s own usage and log data is governed by the purposes and necessity criteria described in Vercel’s privacy notice. Further information: Vercel Privacy Notice, Data Processing Addendum and Vercel Terms.

3. Content management and images via Sanity

Content is managed with Sanity, a service provided by Sanity AS, Norway. Where an image from the content management system is used, your browser retrieves the image file directly from cdn.sanity.io. In doing so, the CDN service processes in particular the IP address, time, requested file, and browser and device information. The purpose is fast and reliable image delivery. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our legitimate interest lies in providing a high-performance website.

Berolina retrieves published content data from Sanity on the server side and makes it available to the public pages from a cache. During a normal page view, your browser therefore does not establish a live connection to the Sanity API. On the public website, direct browser connections to Sanity arise only for the image delivery described above. Viewer access, live connections and draft content are available exclusively in the access-protected editorial preview after Draft Mode has been enabled. The server-side API and image delivery use globally distributed networks and may therefore process connection data in countries outside the EEA, in particular the USA. Sanity names Google Cloud as a key infrastructure sub-processor, with primary processing in Belgium and further processing in the USA. Insofar as Sanity processes data on our behalf, the agreement under Art. 28 DSGVO applies; according to Sanity, it uses EU Standard Contractual Clauses or other permissible safeguards for necessary transfers to third countries. Sanity states that it deletes or anonymises technical log data within 90 days of collection. Further information: Sanity Privacy Notice and Sanity sub-processors.

4. No audience measurement with Vercel Web Analytics

Vercel Web Analytics is disabled for this website, and the analytics script is not included. Accordingly, audience measurement through Vercel Web Analytics does not currently take place. The technically necessary processing for hosting is described in section 2.

5. Event and contact enquiries

When you submit an enquiry, we process the data you enter. The required information is your name, email address, occasion and number of people. Company, telephone number, date, time, duration, preferences concerning the VIP lounge or catering, and a message are optional. Berolina uses this information exclusively to process your enquiry, prepare an offer and communicate with you afterwards. Any processing for the hosting provider’s own purposes that differs from this is described in section 2. The legal basis is Art. 6 Abs. 1 lit. b DSGVO; for general matters, Art. 6 Abs. 1 lit. f DSGVO also applies. Our legitimate interest lies in properly responding to and documenting enquiries that are not directly related to a contract.

If the enquiry results in an offer or contract, we also process the contractual and billing data required for that purpose. This may include, in particular, the address and billing address, company and representative details, the name and mobile number of an on-site contact person, service, price, payment and deposit data, correspondence, and confirmed practical event requirements. The processing serves to prepare the offer, conclude the contract, hold and bill for the event, and handle queries and claims. The legal basis is Art. 6 Abs. 1 lit. b DSGVO; Art. 6 Abs. 1 lit. c DSGVO applies to legally required accounting and record-keeping obligations, and Art. 6 Abs. 1 lit. f DSGVO applies to the documentation and defence of claims.

If you provide the contact details of another contact person, please ensure that you are authorised to do so and inform the person concerned about this privacy information. Please do not submit health data or other particularly sensitive personal information in either the free-text field or the subsequent offer process. Where possible, practical food or access requirements should be described without names, diagnoses or any other reference to an identifiable person.

For the optional birthday greeting on the screen, Berolina may take a photograph of the birthday person at the till on the premises. Staff do not proactively ask guests whether they would like this. The photo greeting is provided only if the birthday person—or, where the birthday person is a minor, a person with parental responsibility who is present and authorised to act—requests it on their own initiative and gives oral consent after being informed about the processing. An adult birthday person must give oral consent personally. A photograph cannot be submitted or uploaded in advance for this purpose. Berolina will not take or display a photograph if the person shown clearly objects.

The photograph is processed exclusively for immediate display on the screen at the lane assigned to the celebration. The screen may be visible to other guests present. The system processes the image only transiently for technical purposes during the current display; Berolina does not create or store a permanent image file. In particular, the photograph is not transferred to a mailbox, work storage, cloud service, backup copy or any other archive. It is not published online, used for advertising or other events, subjected to facial recognition, or otherwise analysed biometrically. The legal basis is consent under Art. 6 Abs. 1 lit. a DSGVO. Consent may be withdrawn from staff at any time before the display ends, with effect for the future; the display will then be stopped, while the remainder of the birthday booking is unaffected. Once the display has ended, the image data that was processed only temporarily is no longer available to Berolina.

To protect against automated misuse, each form submission is first checked using a distributed rate limit provided by Vercel. The IP address supplied by Vercel for the server request is used as the limiting key. At present, no more than three submission attempts are permitted within ten minutes. Vercel processes this data as part of the hosting and security services described in section 2.

In addition, after a successful form check, the server function uses an instance-specific limit. For this purpose, the IP address is converted into a check value using a random value generated solely for the respective server instance. Only this check value and time stamps—not the IP address itself—are stored in memory. Only entries from the last ten minutes are taken into account. The list is limited to no more than 5,000 check values; its data ceases to exist no later than when the server instance ends. The legal basis is Art. 6 Abs. 1 lit. f DSGVO; our interest is to protect the form and our mailbox from spam and overload.

The internal enquiry email is normally transmitted directly to the IONOS-hosted event mailbox through an authenticated, TLS-encrypted SMTP connection. The form reports success only when the IONOS SMTP server accepts the message for delivery. Resend, a service provided by Plus Five Five, Inc., USA, is also used to send an automatic acknowledgement to the email address you provided. Sender, recipient, message and technical delivery data are processed. Resend is engaged as a processor for this purpose. The agreed data protection terms incorporate EU Standard Contractual Clauses for relevant third-country transfers. Recipient-specific open and link tracking is disabled in Resend for these emails. Resend does not add a tracking pixel for these functions and does not rewrite links to record opens or clicks. Further information: Resend Privacy Policy.

The website does not create its own database copy of the enquiry. Resend processes the automatic acknowledgement and the associated technical delivery data for as long as necessary for sending, delivery monitoring and error handling; the specific period depends on the agreed settings and terms of the service. In the receiving event mailbox hosted by IONOS, non-binding enquiries that do not result in an order are deleted twelve months after the last substantive contact. Accepted events are transferred to the contract or accounting records when the contract is concluded—by receipt of the acceptance payment specified in the offer or, exceptionally, by the express acceptance in text form required by the offer. Contractual and booking-related documents may be retained for the statutory periods under commercial and tax law.

6. Online reservations via 4bowl

On the Berolina website’s home page, the 4bowl booking interface, operated by Logo-Solution GmbH, Alt-Köpenick 16, 12555 Berlin, is loaded in a dialog when a designated booking or reservation link is clicked normally and JavaScript is enabled. On legal subpages, when the link is activated differently, such as by opening it in a new tab or window, and when JavaScript is disabled, the booking interface instead opens as an external 4bowl page. Your browser does not connect to 4bowl until the booking interface is loaded. In particular, Logo-Solution then receives your IP address, date and time, the requested address, browser and device information and, where applicable, the referring domain. No connection to 4bowl is established during any other visit to our website.

The booking interface currently delivered by 4bowl itself includes external resources, including resources from js-de.sentry-cdn.com, www.clarity.ms, www.google-analytics.com, unpkg.com, accounts.google.com, connect.facebook.net and www.facebook.com. These connections arise only once the 4bowl interface is loaded and may transmit technical connection data, such as the IP address, to the respective providers. The loaded interface contains components or resources from Google and Facebook; however, a selectable sign-in through Google or Facebook is not currently displayed. These integrations take place within the booking interface for which Logo-Solution is responsible and otherwise do not form part of the Berolina website.

By clicking, you request that the booking function be loaded and that the connection to 4bowl required for this purpose be established.

A personal 4bowl account is required for a standard reservation; it is not possible to make a guest reservation without an account. If you already have an account, you sign in with your email address and password. When registering directly, the current interface asks for an optional form of address, as well as first name, surname, telephone number, email address and a password. The current interface also requires confirmation of a checkbox whose text refers to use of the data in accordance with the 4bowl privacy policy. After selecting “Registrieren” (“Register”), 4bowl sends an activation email. The account must be activated successfully using the link it contains. If the relevant confirmation has not yet been stored for the account, the 4bowl activation page may also ask you to confirm its terms and conditions (AGB) and the use of data, and to select “Account aktivieren” (“Activate account”). Activation must take place before the reservation window applicable to the selected date expires. Only then does the reservation become effective and is it transmitted to Berolina; a booking confirmation is subsequently sent by email.

During the booking, registration, activation and sign-in process, Logo-Solution processes the account, authentication and reservation data you enter. This includes the information used for registration or sign-in and, in particular, the leisure venue, date and time, number of people, duration, selected services and optional notes. Please do not enter health data or other specially protected information in free-text fields unless this is absolutely necessary and has been agreed with Berolina in advance.

Insofar as processing is necessary to provide the booking function you requested, including account creation, activation and sign-in; to initiate, confirm and carry out the free online reservation; or to prepare an on-site paid bowling contract that you requested, Art. 6 Abs. 1 lit. b DSGVO is the legal basis. Processing for technical security may be based on Art. 6 Abs. 1 lit. f DSGVO.

Logo-Solution transmits the reservation details to Berolina. Berolina uses the data received to confirm and carry out the free reservation, prepare an on-site paid bowling contract requested by you, communicate with you, and handle queries and claims. Berolina deletes this data as soon as it is no longer needed for these purposes. Statutory retention and record-keeping obligations and any further storage required to establish, exercise or defend legal claims remain unaffected.

Voluntary newsletter signup via 4bowl and Brevo

The 4bowl booking interface includes the voluntary newsletter checkbox “Ich möchte den Newsletter ‚Berolina Bowling Lounge‘ abonnieren und auf dem Laufenden bleiben.” (“I would like to subscribe to the ‘Berolina Bowling Lounge’ newsletter and stay up to date.”) The reservation is not conditional on this consent. If you select the checkbox, 4bowl records your email address, the checkbox selection, and the date and time of the selection. The individual record can be accessed and exported at 4bowl as a record documenting the selection.

No additional confirmation email is sent for the newsletter signup. Authorised employees manually transfer the email addresses of those who selected the checkbox to our newsletter list at Brevo. For list management and sending, we use Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Amtsgericht Charlottenburg HRB 133191. Brevo processes the data on our behalf. The data processing agreement forms part of the Brevo terms.

Recipient-specific open and click tracking is disabled in Brevo. Opens and link visits are therefore not attributed to individual recipients. Berolina does not use this data to create individual usage, interest or response profiles. Brevo continues to process the data required for list management, sending, delivery and technical error handling, in particular the email address, time of sending, delivery status and bounces. Aggregated delivery and error statistics that do not evaluate individual opens or clicks may be used for technical delivery monitoring. Further information: Tracking settings at Brevo.

The legal basis for inclusion in the newsletter list and sending, including the delivery and error data required for this purpose, is your consent (Art. 6 Abs. 1 lit. a DSGVO; for sending, also § 7 Abs. 2 Nr. 2 UWG). You may withdraw your consent at any time with effect for the future by using the email address specified in section 1. Once we receive the withdrawal, we no longer use the address to send new newsletters and remove it from the active distribution list. The lawfulness of the processing carried out on the basis of the newsletter consent before its withdrawal remains unaffected. We then retain the record documenting the selection and any sending, delivery and error data already generated only to the extent and for as long as this is necessary to comply with statutory record-keeping obligations, investigate technical errors as required, or establish, exercise or defend legal claims; otherwise, the newsletter data is deleted. Further information: Brevo Privacy Policy and Brevo Terms, including the Data Processing Agreement.

For processing in which Logo-Solution independently determines the purposes and means, Logo-Solution’s privacy information also applies. In that information, Logo-Solution refers to itself as the controller for the processing described.

The 4bowl interface currently delivered loads, among other things, scripts for Google Analytics and Microsoft Clarity when it is accessed. Further information: 4bowl Privacy Notice.

7. Embedded Google map, Instagram and other external links

On the home page, only a locally provided notice is initially shown in place of the Google map. The Google Maps iframe is embedded and your browser connects to Google only after you select “Accept & load Google Maps”. Before that click, the embedded map does not establish any connection to Google, and no Google cookies are set or read through it.

When the map is loaded and used, your IP address, date and time, browser and device information, unique identifiers, your interactions with the map and—depending on your device and account settings—location information may in particular be transmitted to and processed by Google. The browser policy no-referrer is set for the iframe, so no referrer URL should be transmitted. Google may use cookies or comparable storage technologies. If you are signed in to Google, Google may be able to associate the visit with your account.

For users whose habitual residence is in the European Economic Area, Google generally names Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the responsible provider. Our purpose in embedding the map is to show the location and assist you in planning your journey. The legal basis for loading initiated by Berolina is your consent under Art. 6 Abs. 1 lit. a DSGVO; information is stored on or accessed from your device on the basis of your consent under § 25 Abs. 1 TDDDG.

Consent is voluntary. The rest of the website can be used without the embedded map. You can withdraw your consent for the future by selecting “Hide map”: the iframe is removed and, until the map is loaded again during that page view, no further map content is retrieved. Consent is required again when the page is reloaded. The lawfulness of the processing carried out before consent was withdrawn remains unaffected. We are not technically able to delete cookies already set by Google; they can be managed through your browser or Google settings.

Google operates servers worldwide, so data may also be processed outside the EEA, in particular in the USA. For such transfers, Google refers, among other things, to the EU-US Data Privacy Framework and, where required, EU Standard Contractual Clauses. The retention period depends on the type of data, the purpose of use and your account and deletion settings; Google describes automatic deletion and anonymisation periods as well as longer retention for security and legal obligations. Further information: Google Privacy Policy, Data transfer frameworks and Google retention policies.

The “Plan route” link, Instagram and other external services are only linked. Your browser connects to the respective provider only after you open such an external link. The provider’s privacy terms then apply.

8. Cookies and local storage

We do not use our own marketing or tracking cookies on the public website and do not include our own audience measurement. The embedded Google map loads only after the consent described there has been given; Google may then use cookies or comparable storage technologies. We do not store your decision in a cookie, Local Storage or Session Storage. After the page is reloaded, the map is therefore initially blocked again; see section 7. If you follow an offer link to the event form, we retain the selected occasion and catering preset only briefly in the page’s current working memory. It is removed once it has been transferred to the form and is not written to cookies, Local Storage or Session Storage.

9. Recipients and transfers to third countries

Berolina makes data accessible only to those parties that need it for the stated purposes, in particular our responsible employees and the service providers used for hosting, content and image delivery, map display, email delivery and reservations. Where a provider processes data for its own purposes, this is described in the relevant service-provider section. Art. 44 ff. DSGVO applies to processing outside the EU or EEA. The stated bases for transfer are described in the service-provider sections above, in particular adequacy decisions and EU Standard Contractual Clauses. Additional information on the respective safeguards is available through the privacy notices and data protection agreements linked there.

10. Required information and automated decision-making

The information marked as required is needed to process your enquiry or reservation. Without it, we cannot carry out the relevant process. Further information is voluntary. Neither in the event form nor on the basis of booking data received from 4bowl does Berolina make decisions based solely on automated processing that produce legal or similarly significant effects within the meaning of Art. 22 DSGVO. Berolina does not carry out profiling in connection with the event form or the booking data received. Independent processing by external providers is governed by their privacy notices.

11. Your rights

Subject to the statutory requirements, you have the right of access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may object to processing based on Art. 6 Abs. 1 lit. f DSGVO on grounds relating to your particular situation. You may withdraw any consent you have given at any time with effect for the future. To exercise your rights, use the contact details specified in section 1.

12. Right to lodge a complaint

Under Art. 77 DSGVO, you may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: