Privacy Policy

The protection of your personal data is of particular concern to us. We process your data exclusively on the basis of legal regulations (GDPR, TKG 2003). In this privacy policy, we inform you about the most important aspects of data processing within the framework of our services.

01 Collection of Information About You

• Membership: We collect your name, address, date of birth, email, and phone number, as well as bank details for payment processing.
• Usage data: We record the time and duration of your use of our devices and machines.
• Website: Automatic collection of IP address, operating system, browser type, and time of visit.
• Event registrations: When registering for courses, training sessions, or guided tours, we collect your first name, last name, email address, as well as the IP address and browser identifier (user agent) at the time of registration. This technical data is used solely to detect and prevent automated abuse (spam protection) and is not shared with third parties. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the security of our services).
• Video surveillance: The premises are partially video-monitored (image data with location/time).

02 Processing of Data

We use your data to provide our services (incl. invoicing), to continuously improve our offerings, and to inform you about news (unless you have unsubscribed). In addition, data collection serves to protect our rights and prevent abuse.

03 Use of Your Personal Data

We only share data as strictly necessary with:

• Service providers for member management and machine control (e.g., Fabman.io).
• Financial institutions and tax advisors for payment processing and legal compliance.

04 International Transfer

Should data be transferred to countries outside the EEA, we ensure through contractual agreements that an adequate level of data protection in accordance with the GDPR is maintained.

05 Data Security

We employ administrative, technical, and physical procedures to protect your information against loss, theft, and unauthorized access.

06 Storage & Deletion

Data is regularly deleted 12 months after the end of the membership, provided no tax retention periods (e.g., for invoices) oppose this. Video surveillance image data is deleted after 72 hours unless required for preserving evidence.

IP address and browser identifier (user agent) collected during event registrations for spam-protection purposes are automatically deleted 30 days after the respective event date.

07 Cookies & Web Analysis

Our website uses cookies for user-friendliness. We use Google Analytics and Facebook Pixel to analyze user behavior. You can disable the storage of cookies in your browser settings at any time.

08 Your Rights & Contact

You have the right to information, correction, deletion, restriction, data portability, revocation, and objection. Complaints can be directed to the national data protection authority.