As of: February 19, 2026
Only the German version of this Privacy Policy is legally binding; translations are provided solely for easier understanding.
1. Controller
The Kölsch Crew, Owner: Michael Piel
Schmiedegasse 30, 50735 Cologne, Germany
Phone: 0221 66994069
Email: tours@koelschcrew.com
(Hereinafter: “we”, “us”)
A data protection officer has not been appointed, as the legal requirements are currently not met (Art. 37 GDPR).
2. Terms & Legal Basis
- Personal Data means any information relating to an identified or identifiable natural person (Art. 4 No. 1 GDPR).
- Processing means any operation performed on personal data (Art. 4 No. 2 GDPR).
- Legal Basis: Art. 6 para. 1 lit. a (consent), lit. b (contract/initiation), lit. c (legal obligation), lit. f (legitimate interest) GDPR.
- TTDSG: For setting/reading not strictly necessary cookies or similar technologies, consent according to § 25 para. 1 TTDSG is required. We base technically necessary cookies on § 25 para. 2 TTDSG.
3. Hosting, Log Data & Security
We host the frontend and backend on our own dedicated server with a professional infrastructure provider (Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany). The servers are located within the European Union.
The server is managed independently by us. Hetzner provides the infrastructure (data center, hardware, network) but has no access to the content or customer data we process.
When you visit our pages, the server automatically collects log data:
- IP address, date/time, time zone, status code, referrer URL, retrieved resources/URLs, user agent (browser, OS, device).
Purposes: Operation, security (e.g., attack defense), error analysis (Art. 6 para. 1 lit. f GDPR).
Storage duration: usually 7–30 days, then deletion/anonymization, unless security-relevant retention is necessary.
4. Obligation to Provide / Consequences of Non-Provision
The provision of certain data (e.g., for a booking) is required for contractual purposes. Without this data, the service cannot be provided.
5. Cookies & Consent Management
We use a consent banner (CMP) that manages your consents for Analytics/Marketing.
- Technically necessary cookies (e.g., session, language, shopping cart/booking context): Use without consent (§ 25 para. 2 TTDSG, Art. 6 para. 1 lit. f GDPR).
- Non-essential cookies (Analytics/Marketing): only with consent (§ 25 para. 1 TTDSG, Art. 6 para. 1 lit. a GDPR).
- Revocation/Adjustment: You can change your settings at any time via the “Cookie Settings” link in the footer.
6. Contacting us
When you contact us (via form, email, or phone), we process your details to handle your request.
Legal basis: Art. 6 (1) (b) or (f) GDPR.
Email delivery: Microsoft 365/Exchange Online (EU).
7. Booking system & CRM (Recras)
To process bookings, check availability, and manage customers, we use the Recras B.V. system, Helperpark 284-2, 9723 ZA Groningen, Netherlands.
As part of a booking, we specifically process:
- Name, Kontaktdaten
- Buchungs- und Leistungsdaten
- Zahlungsstatus und Transaktionsreferenzen
Purpose/Legal basis: Implementation of pre-contractual measures and fulfillment of contract (Art. 6 (1) (b) GDPR).
A data processing agreement exists with Recras where necessary.
8. Payments
Payments are made online via Mollie B.V., Amsterdam, Netherlands, or by invoice/advance payment.
Legal basis: Art. 6 (1) (b) GDPR; tax-related retention according to Art. 6 (1) (c) GDPR.
9. Analytics & Measurement
9.1 Google Analytics 4 (GA4)
Used only with consent (Art. 6 (1) (a) GDPR; Section 25 (1) TTDSG). IP masking enabled.
9.2 Microsoft Clarity
We use Microsoft Clarity (Microsoft Ireland Operations Ltd.) to analyze the use of our website (e.g., heatmaps, scrolling, and clicking behavior) to improve user-friendliness and conversion.
Clarity is only loaded after express consent (Section 25 (1) TTDSG; Art. 6 (1) (a) GDPR). It can be deactivated at any time via the cookie settings.
We use technical protective measures (masking) to avoid recording form entries and sensitive content.
Further information: https://clarity.microsoft.com/privacy
10. Embedded content
Google Maps, reCAPTCHA, or video services are only loaded with consent.
11. Recipients
- Hosting and IT service providers (EU/EEA)
- Microsoft 365 (Email)
- Google (Analytics/Ads – optional)
- Meta (Pixel – optional)
- Microsoft (Clarity – optional)
- Recras (Booking/CRM)
- Mollie (Payments)
12. Rights of the data subject
Access, rectification, deletion, restriction, data portability, objection, and withdrawal of consent. Contact: tours@koelschcrew.com.
13. Changes
We update this privacy policy if our services or the legal situation change.
