Privacy policy

1. Data controller

The controller responsible for processing personal data on bubble-boom.com is:

2. Visiting the website

When you visit the website, we process your IP address, the date and time, the page or file requested, the response status, and browser and operating system information. This also includes the previously visited page if your browser transmits it.

This serves to provide and secure the website and detect faults and abuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website. Recipients are the service providers responsible for web hosting and technical maintenance.

The data is processed to deliver the requested page. Technical logs are kept only as long as needed to analyse faults or prevent attacks. In the event of security incidents, longer retention may be needed for investigation or legal action.

3. Contacting us

For email enquiries, we process your email address, the contact details you provide and your message to answer your enquiry and prepare or arrange a possible booking. The recipient is the email service provider responsible for our mailbox.

The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and Article 6(1)(f) GDPR otherwise. Our legitimate interest is handling your enquiry.

After we have handled your enquiry, the data is deleted once it is no longer needed for a booking or to establish, exercise or defend legal claims. Correspondence and records subject to statutory retention duties are kept until the applicable period expires (Article 6(1)(c) GDPR).

Providing your details is voluntary. Without the information needed, we may be unable to answer your enquiry or arrange a booking.

4. Cookies and external services

We do not use analytics or advertising trackers. Fonts, images and scripts are loaded from the website server. Instagram and TikTok are provided only as links; a connection to these platforms is made only when you open the relevant link. The respective provider’s privacy information then applies.

5. Your rights

Subject to the applicable legal conditions, you have the following rights:

• Access to your personal data (Article 15 GDPR);
• Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR);
• Erasure of your data (Article 17 GDPR);
• Restriction of processing (Article 18 GDPR);
• Data portability where processing is based on consent or a contract and is carried out automatically (Article 20 GDPR).

Right to object under Article 21 GDPR: Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

6. Right to lodge a complaint

Under Article 77 GDPR, you may complain to a data protection supervisory authority, particularly in the place of your usual residence, workplace or the alleged infringement. The Hamburg supervisory authority can be contacted at: