The website operator takes your data privacy very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations, in particular the General Data Protection Regulation (GDPR), as well as this privacy policy. This policy applies to our marketing website at https://www.dreivierteleins.com and our online booking portal at https://buchung.dreivierteleins.com, where you can register, book rehearsal rooms, make payments, and manage your studio access.

The controller within the meaning of the GDPR is Dreivierteleins Proberäume GbR, Hans-Pinsel-Straße 10a, 85540 Haar, represented by the partners Michele Concas and Georg Nätscher. You can reach us at info@dreivierteleins.com or by phone at +49 151 20248407.

Our marketing website is hosted by Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit our marketing website, Webflow collects various log files, including your IP address. We base the data transfer to the USA on the EU Commission's Standard Contractual Clauses; details can be found at https://webflow.com/legal/eu-standard-contractual-clauses. The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in a secure and efficient web presence.

The online booking portal at https://buchung.dreivierteleins.com is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When accessing the portal, technically necessary connection data is processed, including your IP address, the time of access, the URL accessed, and information about your browser and operating system; this data may be stored in server log files. Vercel may process data in third countries, particularly in the USA; where necessary, we base the transfer on appropriate safeguards such as the EU Standard Contractual Clauses. Further information can be found in Vercel's privacy policy at https://vercel.com/legal/privacy-policy. The legal bases are Art. 6(1)(b) GDPR, because processing is necessary to provide the portal you requested, and Art. 6(1)(f) GDPR, because we have a legitimate interest in IT security and error analysis.

The respective hosting provider automatically collects and stores information in server log files that your browser transmits. This includes the browser type and version, the operating system used, the referrer URL, the hostname of the accessing computer, the time of the server request, and the IP address. We do not merge this data with other data sources unless otherwise described in this policy. The legal basis is Art. 6(1)(f) GDPR. Log data is stored only for as long as is necessary for the respective purpose, usually a few weeks, depending on the hosting provider.

When you contact us via the contact form on the marketing website or by email, we store your information, including the contact details you provide, in order to process your request and answer any follow-up questions. This information is not shared without your consent. The legal basis is Art. 6(1)(b) GDPR, insofar as the request is related to a contractual relationship or pre-contractual measures, or potentially Art. 6(1)(f) GDPR.

You can register as a member, book rehearsal rooms, make payments, and manage your user account via our booking portal. In doing so, we process your first and last name, your email address, and optionally your phone number and details regarding your band or organization, as well as login data for your account (your password is stored only in hashed form by the authentication service provider). We also process booking data such as the room booked, time period, number of people, selected rate, price, cancellation status, and optional comments, as well as payment status, transaction identifiers, and credit balances. Credit card and SEPA data are processed exclusively via our payment service provider, Stripe, and are not stored in full on our own servers. For studio access, we assign a personal studio PIN for the Tedee lock at the entrance and provide you with the shared code for the building's outer door. We also send transactional emails, for example regarding registration, booking confirmation, PIN, login invitations, cancellations, or credit notifications. Technically, your IP address, browser and device data in log files, and your language settings in a cookie may also be processed.

This processing is carried out to manage your membership and room bookings, process payments and manage credit, provide electronic access, facilitate customer communication, prevent abuse and fraud, ensure IT security, and fulfill legal retention obligations, such as those under tax and commercial law. The legal bases are Art. 6(1)(b) GDPR, insofar as processing is necessary for the performance of a contract; Art. 6(1)(c) GDPR, insofar as legal obligations exist; and Art. 6(1)(f) GDPR, insofar as we pursue legitimate interests in security and operational stability. Where we obtain consent, processing is based on Art. 6(1)(a) GDPR; we currently do not send promotional emails without separate consent. Upon registration, you confirm that you are at least 18 years old and accept our Terms and Conditions.

We store membership and booking data for the duration of your membership and beyond in accordance with statutory retention periods; in particular, booking-related documents may be kept for up to ten years for tax and commercial law purposes. After an account is closed in the portal, we deactivate your studio PIN and online login; we block or delete personal data, provided there are no legal retention obligations to the contrary. Any remaining credit to be paid out is subject to our Terms and Conditions.

To provide the booking portal, we use specialized service providers as data processors, where necessary on the basis of contracts in accordance with Art. 28 GDPR. We use Supabase, Inc. for database, authentication, and storage of member and booking data; further information can be found at https://supabase.com/privacy. For payment processing via credit card or SEPA, as well as for checkout, we use Stripe Payments Europe, Ltd. or Stripe, Inc.; Stripe may transfer data to third countries, particularly the USA, and relies on appropriate safeguards for this, including EU standard contractual clauses; details at https://stripe.com/de/privacy. We use Tedee to manage your personal studio PIN for the electronic lock; information is available at https://tedee.com/privacy-policy. We send transactional emails via an SMTP service provider and, where applicable, via Resend, Inc. The portal is hosted via Vercel, as described above.

If you save a payment method or pay for a booking in the booking portal, you may be redirected to Stripe, or Stripe components may be integrated. Stripe processes information including your name, email, payment method details, and transaction information. We do not receive full access to your card number from Stripe; instead, we store a Stripe customer ID and the payment status. The legal basis is Art. 6 (1) (b) GDPR.

On the booking portal, we use technically necessary cookies, in particular a Supabase auth session for login and protected areas, as well as the "dv_locale" cookie, which saves your language preference (German or English) for twelve months and is not used for tracking; the legal basis is Art. 6 (1) (f) GDPR. We do not use analysis or marketing cookies such as Google Analytics or Meta Pixel on the booking portal. Webflow may set its own cookies on the marketing website; for this, we refer you to the provider's notices.

Video surveillance on our premises takes place exclusively in the storage and hallway areas, not in the rehearsal rooms themselves. The recordings are used for property protection and security. The legal basis is Art. 6 (1) (f) GDPR. Recordings are stored for a maximum of two months and then automatically deleted, unless a security-related incident requires longer retention. Please direct questions regarding video surveillance to the address provided in the legal notice.

Our marketing website contains links to the social media services Facebook and Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We do not use social plugins or "like" buttons that transmit data as soon as the page loads, but only simple links. Data is only transmitted to Meta once you click an icon and are redirected to the platforms. Information on data usage by Meta can be found at https://www.facebook.com/about/privacy/.

The booking portal may offer links to an introductory video, for example on YouTube set to "unlisted," or to a PDF guide. If you access such a link, you may leave our portal; the privacy policy of the respective provider, such as Google/YouTube, applies to any subsequent data processing. The legal basis for providing these links is Art. 6 (1) (f) GDPR, representing our legitimate interest in informing our users.

Under the applicable legal provisions, you have the right at any time to receive information free of charge regarding your stored personal data, its origin and recipients, and the purpose of the processing. You also have the right to have incorrect data corrected, to have data deleted (provided there are no legal retention obligations to the contrary), to restrict processing, to data portability (where applicable), and to object to processing based on Art. 6 (1) (f) GDPR. You may revoke any consent given at any time. You also have the right to lodge a complaint with a supervisory authority, particularly in the member state of your habitual residence, place of work, or the place of the alleged infringement; the competent authority includes the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, https://www.lda.bayern.de. Please direct data protection inquiries to info@dreivierteleins.com with the subject line "Data Protection." Members can view and update much of their information in their account; account cancellation is possible in the portal under "Delete account." Further regulations can be found in our General Terms and Conditions.

We reserve the right to update this privacy policy if the legal situation, the services used, or our booking portal change. We will publish the current version at https://www.dreivierteleins.com/datenschutzerklarung; the booking portal provides a link to this in the footer.

Last updated: October 2026