Privacy Privacy

1. Controller

The controller responsible for data processing on this website is:

Kevin Finck
Doormannsweg 22
20259 Hamburg
Germany

E-Mail: kevo@tabletales.hamburg
Website: tabletales.hamburg

2. General Information About Data Processing

Protecting your personal data is very important to us. We process personal data exclusively in accordance with applicable data protection laws, especially the General Data Protection Regulation (GDPR).

Personal data refers to any information relating to an identified or identifiable natural person.

3. Hosting

This website is hosted by Webgo.

The hosting provider processes personal data for the purpose of operating and securing the website. This may include:

  • IP addresses
  • browser information
  • date and time of access
  • accessed pages
  • referrer URLs
  • operating system information

The processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in the secure and stable operation of the website.

A data processing agreement pursuant to Art. 28 GDPR has been concluded with the hosting provider.

4. Server Log Files

When visiting this website, information is automatically collected and stored in so-called server log files by the hosting provider.

This includes in particular:

  • browser type and browser version
  • operating system used
  • referrer URL
  • hostname of the accessing device
  • time of the server request
  • IP address

This data is used exclusively for technical monitoring, security, and optimization of the website.

This data is not merged with other data sources.

The legal basis is Art. 6(1)(f) GDPR.

5. Cookies and Consent Management

This website uses cookies.

Cookies are small text files stored on your device that contain certain information.

Non-essential cookies are only set after you have given your explicit consent.

We use Complianz to manage user consent.

Complianz stores users’ consent preferences in order to ensure legally compliant handling of cookies and external services.

The following data may be processed:

  • anonymized IP address
  • consent status
  • timestamp of consent
  • browser information

Legal basis:

  • Art. 6(1)(c) GDPR
  • Art. 6(1)(f) GDPR
  • Section 25(2) TTDSG

Further information:
Complianz Privacy Statement

6. Google Tag Manager

This website uses Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used solely for managing and deploying tags and scripts.

The Tag Manager itself does not permanently store personal data, but technical data such as IP addresses may be transmitted as part of the connection process.

The service is used only after your explicit consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Data transfers to the United States cannot be excluded.

Further information:
Google Privacy Policy

7. Google Analytics 4

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyze user behavior on this website.

The following data may be processed:

  • IP address (anonymized/truncated)
  • device information
  • browser information
  • user behavior
  • page views
  • time spent on pages
  • on-site search queries
  • interactions with content

IP anonymization is enabled.

Processing takes place only after your explicit consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Analytics data is stored for 14 months.

Google may process data on servers located in the United States. For transfers to third countries, Google relies on Standard Contractual Clauses approved by the European Commission.

Further information:

Opt-out browser plugin:
Google Analytics Opt-Out

8. Embedded Content and Third-Party Services

This website may include embedded content and services provided by third parties.

This includes in particular:

When embedded content is loaded, personal data may be transmitted to the respective providers, including:

  • IP address
  • browser information
  • device information
  • referrer URL
  • usage data

Embedded content is only loaded after your explicit consent.

Legal basis:

  • Art. 6(1)(a) GDPR
  • Section 25(1) TTDSG

Further information:

9. External Data Sources and APIs

Google Places API

We use the Google Places API server-side to display and update location data, opening hours, and related information.

The processing is performed server-side only. No direct transmission of visitors’ personal data to the Google Places API occurs in the user’s browser.

The legal basis is Art. 6(1)(f) GDPR due to our legitimate interest in providing accurate and up-to-date location information.

Bright Sky / German Weather Service (DWD)

For weather information, we use data from Bright Sky based on data provided by the German Weather Service.

Weather data is processed server-side only. No personal visitor data is transmitted to the weather service.

The legal basis is Art. 6(1)(f) GDPR.

10. Social Media Links

This website contains links to social media platforms, including:

No personal data is transmitted to these platforms merely by visiting this website.

Data is only transferred once you actively click on a corresponding link.

11. Data Retention

Personal data is retained only for as long as necessary for the respective purposes or as required by law.

Analytics data is deleted after 14 months.

Server log files are deleted automatically on a regular basis.

12. Rights of Data Subjects

Under applicable law, you have the following rights at any time:

  • right of access pursuant to Art. 15 GDPR
  • right to rectification pursuant to Art. 16 GDPR
  • right to erasure pursuant to Art. 17 GDPR
  • right to restriction of processing pursuant to Art. 18 GDPR
  • right to data portability pursuant to Art. 20 GDPR
  • right to object pursuant to Art. 21 GDPR
  • right to withdraw consent pursuant to Art. 7(3) GDPR

You also have the right to lodge a complaint with a supervisory authority.

Responsible supervisory authority in Hamburg:

Hamburg Commissioner for Data Protection and Freedom of Information

13. International Data Transfers

The use of services provided by Google, YouTube, Instagram, or TikTok may result in personal data being transferred to countries outside the European Union, particularly the United States.

According to their own statements, these providers use Standard Contractual Clauses pursuant to Art. 46 GDPR to safeguard international data transfers.

14. Automated Decision-Making

No automated decision-making or profiling pursuant to Art. 22 GDPR takes place.

15. Data Security

This website uses technical and organizational security measures to protect personal data against loss, manipulation, unauthorized access, or other unauthorized processing.

Data transmission is encrypted using SSL/TLS technology.

16. Changes to This Privacy Policy

We reserve the right to amend this privacy policy in order to adapt it to changes in legal requirements or technical modifications to the website.

Last updated: May 2026