Legal

Privacy Policy

According to GDPR & German Federal Data Protection Act (BDSG) · eckstain.com · As of: May 2026

01Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

eckstein Influence GmbH
Haus Vierbirken, Marcusallee 16, 28359 Bremen, Germany
Email: booking@eckstain.com

02General Information on Data Processing

We process personal data of our users only insofar as this is necessary to provide a functional website as well as our content and services. Processing generally takes place only with the consent of the user (Art. 6(1)(a) GDPR) or where a legal basis permits it (in particular Art. 6(1)(b) and (f) GDPR).

03Hosting

Our website is hosted by an external service provider in Germany. Personal data collected on this website is stored on the hoster's servers within the European Union. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision). A data processing agreement under Art. 28 GDPR is in place with the hoster.

Hosting provider: VerusIT, Sieboldstraße 7, 97688 Bad Kissingen, Germany

04Server Log Files

When the website is accessed, the provider automatically records information in server log files transmitted by the browser. This includes in particular:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer / shortened IP address
  • Time of the server request

Legal basis is Art. 6(1)(f) GDPR. This data is not combined with other data sources.

05Cookies

Our website uses only technically necessary cookies insofar as they are required for the operation of the website. Legal basis is Art. 6(1)(f) GDPR and § 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Cookies are not used for analytics or marketing purposes; a consent banner is therefore not required.

06Contact

If you contact us by email or through a contact form, your details will be stored for processing your request and in case of follow-up questions. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / contract initiation) or Art. 6(1)(f) GDPR. Data will be deleted as soon as it is no longer required to fulfil the purpose and no statutory retention obligations stand in the way.

07No External Fonts and No Web Analytics

No external fonts (e.g. Google Fonts) are loaded from third-party servers on our website; the fonts used are embedded locally. No web analytics or tracking tool is used. No user profiles are created.

08Social Media Profiles and Links

We maintain profiles on social networks (e.g. Instagram, TikTok, LinkedIn). When visiting these profiles, the privacy policies of the respective providers additionally apply. Where our website links to such networks, personal data is only transmitted to the provider upon active click.

09Recipients and Third-Country Transfers

No transfer of your personal data to recipients outside the European Union or the European Economic Area takes place in the course of website operation. Should this change in the future, a transfer will only occur insofar as legally permitted, in particular on the basis of an adequacy decision or appropriate safeguards (e.g. standard contractual clauses).

10Storage Duration

Personal data is deleted or blocked as soon as the purpose of storage ceases to apply. Storage beyond this period only occurs insofar as it is required by statutory retention periods (e.g. under commercial and tax law).

11Your Rights as a Data Subject

Under the GDPR you have, in particular, the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent authorities include the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen.

The original German privacy policy takes precedence in case of discrepancies.

12Currency and Changes

This privacy policy is as of May 2026. Adjustments may become necessary due to further development of the website or changed legal requirements.