Privacy Policy

This English version is provided for information only. Only the German version is legally binding.

1. Who is responsible

Thorsten Mann
WolfRope Shibari | Kinbaku
Gritznerstr. 9
76227 Karlsruhe
Germany
Phone: +49 176 34697122
Email: mail@wolfrope.de

For any questions about data protection, you can reach me using these contact details.

2. The essentials first

We do not use any analytics, tracking or advertising services and do not embed content from external platforms. The icons for Instagram, YouTube, Facebook and JoyClub are plain links: only when you click them do you leave our website, and the privacy policy of the respective platform applies. Fonts are hosted on our own server.

3. Hosting and server log files

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the data on our behalf; a data processing agreement is in place. The emails sent by the website also go through STRATO.

With every request, the server automatically stores the browser type and version, operating system, referrer URL, time and IP address. We need this data to operate the website securely and without errors (legitimate interest, Art. 6(1)(f) GDPR). IP addresses are deleted after seven days at the latest.

4. Cookies

We only use cookies that are technically necessary for the website. No consent is required for this (Section 25(2) no. 2 TDDDG; Art. 6(1)(f) GDPR, or Art. 6(1)(b) GDPR when paying).

Should we later use services that require consent, we will ask for it beforehand via the cookie banner.

5. Contact form and email

When you write to us via the contact form, we process your email address, your message, the selected topic, where applicable the date you are asking about, and your name if you provide it. The website sends this information to us as an email and a copy to the address you entered; it is not stored on the website itself. To protect against automated messages, we count for 15 minutes how many messages come from the same IP address, storing only an irreversible checksum of the address for this. We do not use a captcha or any other external service.

The same applies to messages via the form and to emails to us: we use your information only to deal with your request. The legal basis is Art. 6(1)(b) GDPR if it concerns a booking or its preparation, otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the message once your request has been dealt with, unless statutory retention obligations prevent this.

6. Bookings, customer account and vouchers

When you book a date or buy a voucher, we process your name, your email address and your billing address, plus your phone number if you provide it, as well as the content, price and payment status of the order. For a couple ticket you can also enter the name of the second person; please let them know that you are doing so. For a voucher we process the “For” and “From” details, your message and, if we are to send the voucher directly, the email address of the recipient and the delivery date.

You can order as a guest or create a customer account. In your customer account you can see your orders and tickets. If you would like it deleted, an email to mail@wolfrope.de is sufficient; we will then delete it unless retention obligations prevent this.

If a date is fully booked, you can put yourself on the waiting list. For this we process your name and email address in order to notify you as soon as a place becomes available. You can unsubscribe via the link in every notification. We delete the waiting list after the date.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). We need the mandatory fields to carry out the booking; without them we cannot conclude a contract. We keep invoices and other accounting records for eight years and business letters for six years, because tax and commercial law require it (Art. 6(1)(c) GDPR). For this purpose we pass them on to our tax adviser, who is bound by professional secrecy. After that, we delete the data.

7. Payment

For payment, we pass the necessary data (name, email address, billing address, amount, order number) to the payment service you choose:

• Card: Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. You enter your card details directly with Stripe; they do not reach our server.
• PayPal: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg.

The legal basis is the performance of the contract (Art. 6(1)(b) GDPR). Both providers also process the data under their own responsibility, for example for fraud prevention and because of legal obligations, and may transfer it to affiliated companies in the USA. Both are certified under the EU-US Data Privacy Framework, for which an adequacy decision of the EU Commission applies. You can find more information in the privacy notices of Stripe (https://stripe.com/privacy) and PayPal (https://www.paypal.com/de/legalhub/privacy-full).

8. Learning area

The videos in the learning area are delivered on our behalf by BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia; a data processing agreement is in place. When a video is played, Bunny processes your IP address, the browser identifier and the referring page. The videos are stored and delivered only within the EU. The legal basis is the performance of the contract (Art. 6(1)(b) GDPR).

9. Newsletter

If you subscribe to our newsletter, we process your email address and – if you provide them – your first and last name as well as the topics you select. The legal basis is your consent (Art. 6(1)(a) GDPR).

After signing up you will receive an email with a confirmation link; you are only subscribed once you click it (double opt-in). To be able to prove your consent, we store the time of sign-up and confirmation and the IP address used for sign-up (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

We send the newsletter ourselves via our website at STRATO, without an external mailing service, and do not track whether you open it or click links in it. You can unsubscribe at any time via the link in every issue or by email. After that, your address remains stored with the note “unsubscribed” so that we no longer send you anything and can prove the withdrawal (Art. 6(1)(f) GDPR). On request, we will delete it completely.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)). An email to mail@wolfrope.de is sufficient.

Right to object (Art. 21 GDPR): Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, https://www.baden-wuerttemberg.datenschutz.de.