Privacy Policy

When you submit the contact form we collect the following details so we can respond to your enquiry.

For bookings or memberships we may also need billing and identity‑verification data. Legal basis: Art. 6(1)(b) GDPR (contract/pre‑contract) and, where applicable, Art. 6(1)(c) or (f) GDPR.

We use necessary cookies and local storage to remember your language and your cookie selection.

Analytics and marketing cookies are only set with your consent. You can change your choice by deleting cookies in your browser.

We use Google Tag Manager and Google Analytics (Google Ireland Ltd., Ireland) to manage tags and measure usage.

The tag manager itself does not place cookies, but can load analytics or marketing tags. These tags are only activated after you consent.

Google Analytics sets cookies (e.g. _ga, _ga_*) for pseudonymised usage statistics. IP anonymisation is enabled and Google Signals is disabled. Legal basis: consent (Art. 6(1)(a) GDPR).

If you allow marketing cookies, we use the Meta Pixel and Conversions API (Meta Platforms Ireland Ltd.) to measure campaigns.

Cookies such as _fbp or _fbc may be set and technical data (IP, browser info, events) may be transmitted to Meta. Legal basis: consent (Art. 6(1)(a) GDPR).

We use Resend, Inc. (USA) to deliver contact form messages to our inbox. The information you submit is processed on our behalf under a data processing agreement that protects your data.

We store data on servers in Germany. Where service providers process data outside the EU, we implement appropriate safeguards (e.g. standard contractual clauses).

On the contact page we provide a button that opens Google Maps. Only when you click “Open directions in Google Maps” are your IP address (and possibly device details) sent to Google Ireland Ltd. (Ireland). Google may then set cookies or similar technologies. We have no influence over that processing. If you prefer, simply don’t follow the link.

We review contact submissions regularly and delete them once your enquiry has been resolved, and in any case after twelve months.

ID copies are deleted no later than 30 days after your membership ends or your last visit (whichever is later).

You can request access, rectification, deletion, restriction of processing, or object to our processing of your personal data. Where applicable, you also have the right to data portability or to withdraw consent with future effect.

To exercise your rights, reach us at kontakt@innergarden.community. If you believe your data protection rights have been infringed, you may lodge a complaint with the competent supervisory authority.

We implement appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, and destruction. Only Innergarden team members who need the information to respond can access your submission.

We may update this privacy policy as our processing activities or legal obligations evolve. We will publish the revised version on this page and adjust the update date accordingly.