Privacy Policy

1. Controller

2. Scope

This privacy policy applies to the website openbowling.de and to the online reservation of bowling lanes via OpenBowling (end customer area).

3. Definitions

The definitions of the General Data Protection Regulation (GDPR) apply, in particular "personal data", "processing", and "controller".

4. Data Processing When Visiting the Website (Server Log Files)

4.1 Scope of Processing

When you access the website, data is technically processed by the hosting provider (server log files), e.g.:

• IP address
• Date and time of access
• Accessed page/file
• Referrer URL
• Browser type/version, operating system
• Transmitted data volume, status codes

4.2 Purpose and Legal Basis

Purposes: technical provision of the website, stability/security, error analysis, defense against attacks. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure, stable operation).

4.3 Storage Duration

Server log files are deleted after 14 days, unless longer retention is required to investigate security incidents.

5. Online Reservation of Bowling Lanes (Booking)

5.1 Scope of Processing

The following data is processed for reservations:

• Name
• Email address
• Phone number
• Booking data (center, date/time, number of lanes/time slot, notes if applicable)

5.2 Purpose and Legal Basis

Purposes: processing of reservations, sending booking confirmations and email verifications, inquiries, cancellations/changes, fraud prevention. Legal basis: Art. 6 (1) lit. b GDPR (contract/pre-contractual measures) and Art. 6 (1) lit. f GDPR (security/fraud prevention).

5.3 Recipients

The recipient of the booking data is the selected bowling center, where the reservation is carried out. Pro Bowl Bowlingservice provides the technical platform.

6. Cancellation and Changes

Online cancellation is possible up to 24 hours before the start of the booking. Within 24 hours, cancellation/changes must be made by phone directly with the bowling center. The data required for processing will be processed. Legal basis: Art. 6 (1) lit. b GDPR.

7. Contact

When contacting us (e.g., by email), the provided data is processed to handle the inquiry. Legal basis: Art. 6 (1) lit. b GDPR (contractual/pre-contractual) or Art. 6 (1) lit. f GDPR (processing general inquiries).

8. Cookies and Local Storage

8.1 Technically Required Cookies

OpenBowling may use technically required cookies or comparable storage technologies (e.g., session cookies) that are necessary for operation and explicitly desired functions. Legal basis: Art. 6 (1) lit. f GDPR; national regulations (TDDDG) apply for storage/access to terminal equipment information – no consent is required if technically necessary.

8.2 Non-Essential Cookies/Tracking

If non-essential cookies/tracking technologies are used (e.g., analytics/marketing), this is done only after consent. Legal basis: Art. 6 (1) lit. a GDPR, possibly additionally under TDDDG.

9. Payment Processing (PayPal) – Only When Activated

If online payments via PayPal are offered, data required for payment is transmitted to PayPal. PayPal processes data under its own responsibility according to PayPal's privacy policy. Legal basis: Art. 6 (1) lit. b GDPR (payment processing).

10. Data Processors (Service Providers)

Service providers may be used as data processors for hosting, email delivery, operations/support. These are contractually obligated under Art. 28 GDPR.

11. Third Country Transfer

If service providers process data outside the EEA, this is done only if legal requirements are met (e.g., adequacy decision or standard contractual clauses).

12. Storage Duration (General)

Personal data is stored only as long as necessary for the stated purposes or as required by legal retention obligations. Booking data is anonymized or deleted 12 months after the booking date, unless legal retention obligations (e.g., tax law: 10 years pursuant to § 147 AO) prevent this.

12a. Necessity of Providing Personal Data

Providing your name, email address, and phone number is required for the conclusion of the booking contract. Without this information, no reservation can be made. The provision of IP address and server log files is technically required for the operation of the website.

12b. Automated Decision-Making

Automated decision-making including profiling pursuant to Art. 22 GDPR does not take place.

13. Rights of the Data Subject

Data subject rights (depending on requirements): access, rectification, deletion, restriction, data portability, objection to processing based on Art. 6 (1) lit. f GDPR, revocation of given consents with effect for the future.

14. Right to Lodge a Complaint with a Supervisory Authority

There is a right to lodge a complaint with a data protection supervisory authority, particularly at the place of habitual residence or the place of the alleged infringement.

15. Security

Pro Bowl Bowlingservice implements appropriate technical and organizational measures to protect data from loss, misuse, and unauthorized access.

16. Changes to This Privacy Policy

This privacy policy may be updated to reflect legal or technical changes.