Privacy
and cookies

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. As a company under private law we are subject to the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). We have taken technical and organisational measures to ensure that the regulations on data protection are observed both by us and by our external service providers.

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information on the controller" of this privacy policy.

On the one hand, your data is collected when you provide it to us — for example data that you enter in a contact form. Other data is collected automatically or with your consent by our IT systems when you visit the website. This is primarily technical data such as internet browser, operating system or time of page view.

Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of this data, to revoke a given consent at any time for the future, to request the restriction of processing under certain circumstances, and to lodge a complaint with the competent supervisory authority.

We host the content of our website with Wix: hosting and software for the creation, provision and operation of websites, blogs and other online offers. Service provider: Wix.com Ltd, Nemal St. 40, 6350671 Tel Aviv, Israel. Legal basis: legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR). Basis for third country transfers: Data Privacy Framework (DPF).

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law which ensures that Wix processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. We would like to point out that data transmission over the Internet may be subject to security vulnerabilities; complete protection of data against access by third parties is not possible.

Battle The Beach UG, Erich-Schlesinger-Str. 62, 18059 Rostock, Germany. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. The data protection officer is the website operator with the contact details given here.

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for processing no longer applies. If you assert a justified request for deletion or revoke your consent, your data will be deleted unless we have other legally permissible reasons for storing it (e.g. retention periods under tax or commercial law).

If you have consented, we process your data on the basis of Art. 6 para. 1 lit. a GDPR (and § 25 para. 1 TDDDG for storage of or access to information on your device). If your data is required to fulfill the contract or to carry out pre-contractual measures, we process it on the basis of Art. 6 para. 1 lit. b GDPR. Where necessary to fulfill a legal obligation, Art. 6 para. 1 lit. c GDPR applies; otherwise processing may be based on our legitimate interest under Art. 6 para. 1 lit. f GDPR. Consent can be revoked at any time.

We use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred and processed there. A level of data protection comparable to that in the EU cannot be guaranteed in these countries — US companies are obliged to hand over personal data to security authorities without you being able to take legal action against this.

You have the right to object to processing based on Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation, and an unconditional right to object to direct marketing (Art. 21 GDPR). You have the right to lodge a complaint with a supervisory authority, the right to data portability, the right to information, correction and deletion, and the right to request the restriction of processing.

This site uses SSL or TLS encryption to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" in the address line and the lock symbol in your browser.

Our internet pages use so-called cookies. Cookies are small data packets and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently. Cookies may originate from us (first-party) or from third-party companies (third-party cookies).

Necessary cookies — those required to carry out the electronic communication process, to provide functions you requested or to optimize the website — are stored on the basis of Art. 6 para. 1 lit. f GDPR. Where consent has been requested, processing is carried out exclusively on that basis (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG) and can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude them in general, or activate automatic deletion when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.

The provider of the pages automatically collects and stores information in server log files, which your browser automatically transmits to us. This data is not merged with other data sources and is collected on the basis of Art. 6 para. 1 lit. f GDPR.

If you send us inquiries via the contact form, your details from the inquiry form including the contact data you provide there will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent. We retain the data until you request its deletion, revoke your consent, or the purpose for its storage no longer pertains — mandatory statutory retention periods remain unaffected.

If you contact us by e-mail, telephone or fax, we will store and process your inquiry including all personal data for the purpose of processing your request, and will not pass it on without your consent. The same storage rules as for the contact form apply.

Instead of registering directly on this website you can register with Facebook Connect. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; according to Facebook the data collected is also transferred to the USA. Linking your Facebook profile gives us access to data stored on Facebook. Registration with Facebook Connect is based on your consent (Art. 6 para. 1 lit. a GDPR) and can be revoked at any time.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not create user profiles, store cookies or carry out independent analyses — it only manages the tools integrated via it. It does record your IP address, which may be transmitted to Google in the United States. Used on the basis of Art. 6 para. 1 lit. f GDPR, or on your consent where requested.

This website uses functions of the web analysis service Google Analytics (Google Ireland Limited). Google Analytics enables us to analyze visitor behavior — page views, length of visit, operating systems used and origin of the user, and also mouse and scroll movements and clicks. It uses technologies that enable recognition of the user (e.g. cookies or device fingerprinting). Information is generally transmitted to a Google server in the USA and stored there.

The use of this service is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG and can be revoked at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can prevent collection by installing the browser plugin at tools.google.com/dlpage/gaoptout.

When you visit our website, Google Analytics records your location, search history and YouTube history as well as demographic data. If you have a Google account, this visitor data is linked to your account and used for personalized advertising messages, and to compile anonymous statistics on user behavior.

This website uses the Facebook/Meta visitor action pixel to measure conversions (Meta Platforms Ireland Limited). This allows the behavior of site visitors to be tracked after they have clicked on a Facebook ad, so the effectiveness of ads can be evaluated for statistical and market research purposes. The data is anonymous for us as the operator; Facebook stores and processes it so that a connection to the respective user profile is possible.

Use is based on your consent under Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can deactivate the remarketing function "Custom Audiences" in your Facebook advertising settings, or — without a Facebook account — via youronlinechoices.com.

If you would like to receive the newsletter offered on the website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of that address and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not pass it on to third parties.

The data is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time, for example via the "Unsubscribe" link in the newsletter. After you unsubscribe we may store your e-mail address in a blacklist if this is necessary to prevent future mailings; the blacklist data is used only for this purpose.

This website integrates videos from YouTube (Google Ireland Limited). In extended data protection mode YouTube does not store information about visitors before they watch a video, but the transfer of data to YouTube partners is not necessarily excluded. As soon as you start a video, a connection to the YouTube servers is established and various cookies or comparable recognition technologies may be stored on your device. Use is in the interest of an appealing presentation of our online offers (Art. 6 para. 1 lit. f GDPR), or based on your consent where requested.

Purpose: bot and spam protection. Legal basis: legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Recipient: Captcha GmbH, Muthgasse 2, 1190 Vienna. Processed data is stored for a maximum of 6 months; no personal data is stored. The last 4 digits of the IP address are deleted in the course of processing, before storage. A data processing agreement is in place.

This privacy policy applies to our profiles on Facebook, Instagram and YouTube. Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content. If you are logged into your social media account, the operator can assign the visit to your user account; personal data may also be collected via cookies or your IP address if you are not logged in.

Our social media presence is intended to ensure the widest possible presence on the Internet — a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If you visit one of our social media sites, we are jointly responsible with the platform operator for the data processing triggered during that visit, and you can assert your rights both against us and against the operator. We have no influence on the storage period of data stored by the operators for their own purposes.

As part of contractual and other legal relationships, due to legal obligations or on the basis of our legitimate interests, we offer efficient and secure payment options and use service providers in addition to banks and credit institutions. The data processed by the payment service providers includes inventory data such as name and address, bank data such as account or credit card numbers, passwords, TANs and checksums, as well as contract, total and recipient-related information.

The data entered is only processed and stored by the payment service providers. We do not receive any account or credit card related information — only confirmation or negative information about the payment. Legal bases: fulfilment of contract and pre-contractual inquiries (Art. 6 para. 1 sentence 1 lit. b GDPR) and legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR).