Privacy Policy

Last updated: 24.08.2026

1. General Information

This privacy policy explains how personal data is processed when visiting https://www.gmwarehouse.de/GM/en.

2. Controller

3. Hosting and Server Logs

When the website is accessed, the web server processes technically required connection data such as IP address, time, requested resource, referrer, browser information and HTTP status. This is used to provide the website securely and reliably and to analyse errors or misuse on the basis of Art. 6(1)(f) GDPR.

Server logs are retained in accordance with the hosting agreement and are then deleted unless longer storage is required to investigate a security incident.

Email service: STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. If email forwarding is enabled, this provider may receive communication data.

4. Contact and Private-Hire Enquiries

Depending on the form, you may submit your name, email address, telephone number, message, preferred date, guest count, event type, budget and optional details. The data is stored in the protected backend and, if email delivery is enabled, forwarded to the configured venue address.

The data is processed to handle pre-contractual or contractual enquiries under Art. 6(1)(b) GDPR, or general enquiries on the basis of the legitimate interest in appropriate communication under Art. 6(1)(f) GDPR.

Enquiry data is normally deleted after 180 days unless legal retention obligations or legitimate reasons require longer storage.

5. Local Visitor and Conversion Analytics

The website uses locally hosted analytics to record page views, broad device categories, referring domains and selected interactions. Full IP addresses are not stored in the analytics files. A non-reversible daily identifier is generated from technical request data and a local secret.

No external analytics services or marketing cookies are used. Local analytics files are deleted after no more than 180 days. The legal basis is Art. 6(1)(f) GDPR.

6. Sessions and Essential Storage

Forms and the protected backend may use an essential session cookie for session management, authentication and protection against form-based attacks. The platform does not set advertising, profiling or third-party analytics cookies. A functional language cookie stores the selected language for up to one year and contains no user identifier.

The website uses local system fonts and does not connect to Google Fonts when a page is loaded.

7. Newsletter / Night Alerts

If you subscribe to the Night Alerts newsletter, the system processes your email address, selected language, signup source, consent version, subscription status and the relevant signup, confirmation and unsubscribe timestamps. Technical confirmation and unsubscribe tokens are used to implement the subscription securely.

The subscription uses double opt-in: newsletters are sent only after the confirmation link in the confirmation email has been opened. The legal basis is consent under Art. 6(1)(a) GDPR. Consent can be withdrawn at any time for the future using the unsubscribe link contained in every newsletter.

Subscriber data is stored in the protected NOCTRA backend. Unsubscribed records may remain marked as unsubscribed where this is required to document consent/withdrawal or to prevent further mailings; statutory deletion rights remain unaffected.

8. External Services, Tickets and Sharing

For selected events, a pretix ticket shop is embedded directly. On the homepage, the required pretix widget resources are loaded only after you actively click a ticket button. On an event detail page with an embedded shop, the browser may load the required widget resources when the page is opened and therefore establish a technical connection to pretix. Ticket selection, order data and checkout are then processed inside the embedded pretix shop in accordance with the configuration of the respective event.

pretix is provided by pretix GmbH. The ticket shop may use technically necessary storage and process the information required to complete the ticket purchase. The exact data collected depends on the ticket-shop configuration and the selected payment method.

Google Maps

On the public contact/location experience, Google Maps is initially blocked by a local placeholder. The Google Maps iframe is created only after you actively choose to load the map. At that point your browser establishes a direct connection to Google and technical data such as your IP address, browser/device information and the requested map resource may be transmitted to Google. An external route link also leads directly to Google Maps.

Your map-loading selection is stored only in the browser session storage for the current session so that the map does not have to be confirmed again on each compatible page. Google provides the service under its own privacy policy. Google Privacy Policy ↗

The protected backend uses the OpenAI API to generate English translations of editorial German content. Only content selected by an authorised editor for translation is transmitted through this feature. Visitor enquiries and form submissions are not automatically sent to the translation service.

Copying an event link writes the URL to your local clipboard. Native sharing or WhatsApp is opened only after an active selection.

Services and Recipients

9. Security and Recipients

Personal data may be processed by hosting, email or technical service providers where required, and by legally authorised bodies. Personal data is not sold.

This website is delivered over HTTPS. No internet transmission can be guaranteed to be absolutely secure.

10. Your Data Protection Rights

Subject to the applicable legal requirements, individuals may have rights of access, rectification, erasure, restriction, data portability and objection. Consent may be withdrawn for the future.

To exercise these rights, contact hello@gmwarehouse.de.

You may also lodge a complaint with the competent data protection supervisory authority.

11. Updates

This privacy policy may be updated if the website, the services used or legal requirements change.