Privacy Policy

1. Controller

The controller responsible for data processing on this website is:
Black Forest Studios
Dietenbacher Str. 20–22
79199 Kirchzarten
Phone: +49 (7661) 988 600-0
Email: contact@blackforest-studios.com

2. General information on data processing

We process our users’ personal data only to the extent necessary to provide a functional website as well as our content and services. Legal bases are in particular Art. 6 (1) GDPR.

3. Hosting & server log files

This website is hosted by an external provider (Cloudflare, Inc., USA, Cloudflare Pages; data processing is based on EU standard contractual clauses, with delivery preferring European data centres). When the website is accessed, information is automatically stored in server log files that your browser transmits: IP address, date and time of access, page accessed, browser type and operating system. Processing takes place to ensure secure and stable operation on the basis of our legitimate interest (Art. 6 (1)(f) GDPR).

4. Contacting us

If you contact us by email or phone or send a space/event enquiry, we process your details to handle the request. The legal basis is Art. 6 (1)(b) GDPR (contract/pre-contractual measures) or (f) GDPR (legitimate interest in responding). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.

5. Newsletter

For sending the newsletter we use the sign-up form on our website. Subscription takes place on the basis of your consent (Art. 6 (1)(a) GDPR) using the double opt-in procedure. You can unsubscribe at any time via the unsubscribe link or by email. We use the service Brevo (Sendinblue GmbH, Berlin, Germany) for sending, under a data processing agreement pursuant to Art. 28 GDPR.

6. Coworking passes

If you book a weekly, monthly or studio pass for coworking at The Barn Kitchen, we process your name and email address as well as the pass type, sign-up time, validity period and payment status. We need this to manage your pass and to remind you about renewing it. The legal basis is Art. 6 (1)(b) GDPR (performance of a contract). We use Notion (Notion Labs, Inc., USA) to manage passes and SumUp (SumUp Limited, Ireland) to process payments. We delete your master data one year after your last pass expires; payment-related records are kept for ten years in accordance with § 147 of the German Fiscal Code.

We deliberately do not record day passes on a personal basis — if you work here for a day, you leave us neither your name nor your email address.

7. Cookies

This website only uses technically necessary cookies required for operation. Tracking or marketing cookies are currently not used.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may withdraw consent at any time with effect for the future.

9. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW).

10. Updates

We adapt this privacy policy as soon as changes to our data processing make this necessary. The version published on this page applies.