Privacy Policy

General information on data processing

Personal data is any information relating to an identified or identifiable natural person, for example a name, email address or IP address.

We process personal data only where this is necessary to provide the website, handle your inquiries and carry out orders, where you have given your consent, or where we have a legitimate interest.

​

Hosting and website platform (Wix)

Our website runs on the Wix platform, provided by Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel. On our behalf, Wix processes the data generated when you visit the website, submit the contact form (including uploaded files) and use the blog. We have a data processing agreement with Wix under Art. 28 GDPR.

The EU Commission has issued an adequacy decision for Israel. Where Wix transfers data to other third countries such as the USA, this is based on the EU Standard Contractual Clauses.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in providing our website securely and reliably) or Art. 6 para. 1 lit. b GDPR where inquiries and contracts are concerned.

​

Server log files

Each time our website is accessed, data is automatically stored in server log files, for example the IP address, date and time, requested page, amount of data transferred, browser type and version, and operating system.

Purpose: delivering the website, operational security and defense against attacks. This data is not combined with other data sources.

Legal basis: Art. 6 para. 1 lit. f GDPR.

​

Cookies, consent and cookie banner

Our website uses cookies and similar technologies. We set technically necessary cookies, for example for security or to store your cookie choices, on the basis of § 25 para. 2 no. 2 TDDDG; any related processing is based on Art. 6 para. 1 lit. f GDPR.

We only set statistics and marketing cookies with your consent under § 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. You make your choice on your first visit via the Wix cookie banner. You can withdraw or change your consent at any time with effect for the future.

​

Contact form and inquiries

When you contact us via the contact form, by email or by phone, we process the information you provide, for example your name, email address, company, phone number, event location, event date, your message, uploaded files and the time of the inquiry.

File upload: you can attach files such as mood boards, photos of the venue or logos to your inquiry. They are stored on Wix servers and used only to handle your inquiry and plan the installation. Please do not upload photos in which other people can be identified unless you are entitled to do so.

Legal basis: Art. 6 para. 1 lit. b GDPR where your inquiry relates to a contract, otherwise Art. 6 para. 1 lit. f GDPR (legitimate interest in answering inquiries).

Retention: inquiries that do not lead to an order are deleted no later than three years after the last communication. If an order is placed, we keep documents for the periods required by German commercial and tax law.

​

Email communication (Microsoft Outlook)

We use Microsoft Outlook for email (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework; transfers are based on the EU Commission's adequacy decision (Art. 45 GDPR).

Legal basis: Art. 6 para. 1 lit. b and lit. f GDPR.

​

Google Analytics 4

With your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates how our website is used, for example pages viewed, time on site, approximate location, and device and browser information. Google Analytics 4 does not store IP addresses.

Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR).

Legal basis: § 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time in the cookie settings.

​

Google Ads and conversion tracking

We run ads via Google Ads (Google Ireland Limited). With your consent, we use Google Ads conversion tracking: if you click an ad and then, for example, send an inquiry, Google and we can see that a conversion took place. We only receive statistical reports that do not identify you personally. With your consent, we may also show visitors of our website ads in Google networks later on (remarketing).

Data may be transferred to Google LLC in the USA on the basis of the EU-US Data Privacy Framework (Art. 45 GDPR).

Legal basis: § 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time in the cookie settings.

​

Visitor Analytics and SiteWit

With your consent, we use the Wix app Visitor Analytics (TWIPLA) to evaluate website usage and the Wix app SiteWit to evaluate our ad campaigns. Usage data such as pages viewed, time on site and the source of the visit is processed. SiteWit may transfer data to the USA on the basis of the EU Standard Contractual Clauses.

Legal basis: § 25 para. 1 TDDDG, Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time in the cookie settings.

​

Social media links

Our website links to our profiles on social networks. These are plain links: data is only transferred when you click a link and open the respective platform, whose privacy policy then applies.

​

Recipients of personal data

We only share data where this is necessary for the purposes described. Recipients are Wix.com Ltd. (hosting, contact form, blog, cookie banner), Microsoft (email), Google Ireland Limited (Google Analytics and Google Ads, only with consent), the providers of Visitor Analytics and SiteWit (only with consent), and tax advisors and authorities where we are legally required to do so. We have data processing agreements under Art. 28 GDPR with our processors.

​

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7 para. 3 GDPR); this does not affect the lawfulness of processing carried out before the withdrawal.

​

Right to object (Art. 21 GDPR)

Where we process data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defense of legal claims. Where data is processed for direct marketing, you can object at any time without giving reasons. An informal message to info@chrolloballoon.de is sufficient.

​

Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, www.datenschutz-berlin.de.

​

Retention periods

We only store data for as long as necessary for the respective purpose or as required by statutory retention obligations.

​

Security of your data

We protect your data with technical and organizational measures such as SSL/TLS encryption, access restrictions and regular updates.

​

Changes to this privacy policy

We update this privacy policy when our website or the legal situation changes.

Current version: October 2026