DEEN
List your club

Privacy Policy

Last updated: 3 August 2026

This is a translation for convenience. In case of doubt, the German version prevails.

1. Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Webmagics Ltd.
Gladstonos 12-14
8046 Paphos, Republic of Cyprus
Email: kontakt(at)sufis-berlin.de

We have not appointed a data protection officer, as the thresholds of Art. 37 GDPR are not met. Please direct any privacy enquiries to the address above.

2. General

We process personal data only where this is necessary to provide this website and its content, or where you have given consent. Depending on the processing, the legal basis is Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract or pre-contractual steps) or Art. 6(1)(f) GDPR (legitimate interest).

This site is served statically. There is no user account, no login and no comment function, and we do not run our own database of user data.

3. Hosting and server log files

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The servers are located in the European Union. A data processing agreement under Art. 28 GDPR is in place.

When you open a page, the server automatically records:

  • the IP address of the requesting device
  • date and time of the request
  • the URL requested and the amount of data transferred
  • referrer URL, browser type and operating system

This data is technically required to deliver the page and to keep it stable and secure. The legal basis is Art. 6(1)(f) GDPR. It is not combined with other data sources. Log files are deleted or anonymised after seven days at the latest.

4. Cookies and consent management

The website itself does not set any cookies beyond those strictly necessary for operation. Cookies and comparable technologies are used solely by the third-party services listed in section 5.

For advertising and measurement we use Google's consent management platform (Google CMP). On your first visit you can decide there whether personalised advertising and the associated cookies may be used. The legal basis for consent-requiring cookies is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. You can change or withdraw your choice at any time via the link in the consent banner; withdrawal takes effect for the future.

5. Third-party services

5.1 Google Tag Manager

We use Google Tag Manager, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Tag Manager is not itself an analytics tool and stores no cookies containing personal data; it manages the scripts embedded on the site. Loading it does, however, transmit your IP address to Google. Only the services delivered through it (see 5.2 and 5.3) process further data, and only within the scope of your consent. The legal basis is Art. 6(1)(a) GDPR.

5.2 Google Analytics 4

Google Analytics 4 (Google Ireland Limited, address as above) is delivered through Tag Manager. Analytics records how our pages are used — pages viewed, time on page, approximate location derived from a truncated IP address, and device and browser information. Google truncates the IP address before storing it; according to Google, the data is combined with other Google data only where you have consented in your Google account. A transfer to the USA cannot be ruled out.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, given via the consent banner and withdrawable at any time. Without consent, only cookieless, aggregated measurement signals are transmitted (Google Consent Mode). More information: policies.google.com/privacy.

5.3 Google AdSense

This site is partly financed through Google AdSense advertising (Google Ireland Limited, address as above). AdSense uses cookies and comparable technologies to serve ads, measure their performance and — where you have consented — tailor advertising to your interests. Data such as your IP address, device and browser information and interactions with ads may be transferred to Google and processed in third countries, in particular the USA. Google LLC is certified under the EU-US Data Privacy Framework; the EU Commission's standard contractual clauses apply in addition.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent, only non-personalised ads are served. You can adjust ad personalisation at myadcenter.google.com. More information: policies.google.com/technologies/ads.

5.4 Stay22 (hotel map and booking links)

On our hotel pages we embed an interactive booking map from Stay22 Inc., Montreal, Canada, as an iframe. Loading the map transmits your IP address and technical details about your browser and device to Stay22 and the booking portals connected to it. Canada is covered by an EU Commission adequacy decision under Art. 45 GDPR.

If you click an offer you are forwarded to the respective booking portal, where that portal's privacy policy applies. Bookings made through these links earn us a commission from the provider at no extra cost to you. The legal basis for the embed is our legitimate interest in financing the site, Art. 6(1)(f) GDPR, or — where cookies are set — your consent under Section 25(1) TDDDG. Stay22 privacy notice: stay22.com/privacy.

5.5 Web3Forms (form submissions)

The forms on this website are processed by the Web3Forms service, which receives your input and forwards it to us by email. The data processed is what you enter — typically the venue name, contact person, email address, website and your message — plus technical transmission data.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give explicitly in the form, and Art. 6(1)(b) GDPR where the enquiry concerns a contract. You can withdraw consent at any time by informal email; this does not affect the lawfulness of processing carried out beforehand. We delete enquiries once they are dealt with and no statutory retention periods apply — after three years at the latest.

5.6 Fonts

All fonts are served from our own server. There is no connection to Google Fonts or any other external font service, so your IP address is not transmitted to anyone for this purpose.

6. Recipients and transfers to third countries

We pass personal data to the service providers named above only where necessary for the respective purpose. Transfers to third countries occur in connection with Google Analytics and Google AdSense (USA) and Stay22 (Canada), based on the EU-US Data Privacy Framework, the adequacy decision for Canada and the EU Commission's standard contractual clauses. Despite these safeguards, a level of protection equivalent to EU law cannot be guaranteed in every individual case; access by state authorities in particular cannot be entirely ruled out.

7. Retention

We store personal data only for as long as required for the respective purpose or by statutory retention periods, after which it is deleted or anonymised. Specific periods are stated with the individual processing activities above.

8. Your rights

You have the following rights in relation to us:

  • Access to the personal data we process about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on legitimate interests (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)

An informal email to kontakt(at)sufis-berlin.de is enough to exercise these rights.

9. Right to lodge a complaint

You may also lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement (Art. 77 GDPR). As a Cypriot company, our lead authority is the Office of the Commissioner for Personal Data Protection, Iasonos 1, 1082 Nicosia, Cyprus.

10. No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

11. Changes to this policy

We update this policy when the legal situation or the services we use change. The version published on this page at the time of your visit applies.