Privacy Policy

This privacy policy informs you under Articles 13 and 14 of the General Data Protection Regulation (GDPR) which personal data we process when you visit our website or contact us, for what purposes and on what legal basis, and which rights you have. The German version is legally binding.

1. Controller

René Weinert – anydoors
Stettiner Str. 103
30880 Laatzen, Germany
Phone: 0176-61882073
Email: info@anydoors.de

We are not required to appoint a data protection officer under Article 37 GDPR and Section 38 of the German Federal Data Protection Act (BDSG). For any questions about data protection, please contact us using the details above.

2. Hosting and server log files

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in Germany. IONOS processes the data on our behalf (Article 28 GDPR).

Each time a page is requested, your browser technically transmits data to the server, which is recorded in log files: IP address, date and time of the request, page requested, amount of data transferred, status code, previously visited page (referrer), browser type and operating system.

We need this data to deliver the website, ensure its stability and security and fend off attacks. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. The log files are not combined with other data and are deleted as soon as they are no longer required for these purposes.

3. Visitor statistics without cookies

To understand how our website is used, we count page views with our own method on our server at IONOS in Germany. No cookies are set, no information is stored on or read from your device and no data is passed on to third parties; the method therefore works independently of the cookie banner.

For each page view we store: time, page viewed, the website you came from (only its address without subpages), any campaign tag in the address (e.g. “utm_source”), the device type (phone, tablet, computer) and the language of the page. To avoid counting a visitor twice on the same day, we derive a shortened, irreversible hash value from the IP address, the browser identifier and a random value generated anew every day. The IP address itself is not stored, and the random value is deleted at the end of the day; after that no entry can be attributed to a person. An invisible image that your browser loads when displaying the page confirms that the page was actually displayed; this lets us filter out automated requests. Submitted forms are counted as an event without their content. Likewise, without any content, we count when a phone number, email address or WhatsApp link on a page is clicked or when someone starts typing into a form.

The legal basis is our legitimate interest in privacy-friendly audience measurement in order to improve our offering (Article 6(1)(f) GDPR). We delete the individual entries after 400 days; daily totals without any personal reference are kept longer. You can object to this processing under Article 21 GDPR (see “Your rights”).

4. Cookies and your consent

On your first visit, a banner asks whether we may use analytics and advertising cookies. The box for this is not pre-ticked. Without your consent, no Google analytics or advertising services are loaded and no such cookies are set. Our own cookie-free visitor statistics (section 3) are independent of this.

We store your decision in the cookie anydoors_cookie_consent (content: your choice and the time, retention 12 months). This cookie is technically necessary so that your choice can be respected; the legal basis is Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Article 6(1)(c) and (f) GDPR.

For all other cookies and similar technologies that are not strictly necessary, your consent is the legal basis (Section 25(1) TDDDG, Article 6(1)(a) GDPR). You can withdraw or change your consent at any time with effect for the future via the “Cookie Settings” link at the bottom of every page. When you withdraw, we delete the analytics and advertising cookies that were set.

5. Google Tag Manager, Google Analytics and Google Ads conversion tracking

Only with your consent do we use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”):

Google Tag Manager loads the two services below. The Tag Manager itself does not set cookies but processes your IP address when loading.
Google Analytics 4 shows us how the website is used (e.g. pages viewed, time on site, origin of the visit, device, browser, approximate location at city level). Google Analytics 4 does not store full IP addresses. Cookies: _ga and _ga_*, retention up to 2 years. Google deletes the analytics data after the period set in our account, at the latest after 14 months.
Google Ads conversion tracking measures whether someone, after clicking one of our ads, for example sends an enquiry. Cookie: _gcl_au, retention 90 days. We only receive aggregate figures, no names.

Google also processes the data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Article 45 GDPR); in addition, Google relies on standard contractual clauses for the transfer.

The legal basis is your consent (Section 25(1) TDDDG, Article 6(1)(a) GDPR), which you can withdraw at any time via “Cookie Settings”. More information: policies.google.com/privacy.

6. Fonts

The fonts used on this website are hosted on our own server. No connection to Google or other font providers is established when you visit the site.

7. Contact form, equipment enquiry, email and phone

If you contact us via the contact form, the equipment enquiry form, by email or by phone, we process the details you provide (e.g. name, company, email address, phone number, number of participants, preferred date, location and your message) in order to answer your enquiry and prepare a quote. Form data is sent to us by email and stored in our mailbox at IONOS.

The legal basis is Article 6(1)(b) GDPR where your enquiry relates to a contract, otherwise our legitimate interest in answering enquiries (Article 6(1)(f) GDPR). We need the details marked with an asterisk to process your enquiry; all others are voluntary.

When you submit a form, we add to your enquiry from our visitor statistics (section 3) how you reached our website on the same day: the type of origin (e.g. Google search, direct visit, link from another website), the first page viewed, the number of pages visited, the time until the enquiry and the device type. This shows us which pages and routes lead to enquiries and bookings. The legal basis is our legitimate interest in improving our offering (Article 6(1)(f) GDPR). We store this information together with your enquiry and delete it along with it.

To protect against automated spam, the forms check an invisible field and the time taken to submit. No additional personal data is collected and no third-party services are used for this.

8. AI-assisted processing of your enquiries

To process enquiries more quickly, we use the AI service Claude of Anthropic PBC, 548 Market St #88541, San Francisco, CA 94104, USA. Before any transfer we replace identifying details (name, company, address, phone number, email address) with placeholders; the service only receives pseudonymised content. The transfer to the USA is based on the EU standard contractual clauses (Article 46(2)(c) GDPR). The legal basis is our legitimate interest in efficient processing (Article 6(1)(f) GDPR). We delete logs of this processing after 12 months.

9. Quotes, orders and invoices

For quotes, order confirmations and invoices we process your contact and billing data (Article 6(1)(b) GDPR). We create invoices with Lexware Office of Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany; billing address, services and amounts are transferred, and Haufe-Lexware processes the data on our behalf (Article 28 GDPR). Due to statutory obligations we keep accounting records such as invoices for eight years and business letters for six years (Section 147 German Fiscal Code, Section 257 German Commercial Code; Article 6(1)(c) GDPR).

10. Photos at events and photo galleries

Photos and videos are taken during our events. After the event we provide them to the client via a protected download link (long random key, optionally an additional password). The galleries are stored on our server at IONOS in Germany and deleted automatically after 14 days. The legal basis is our legitimate interest in documenting the event for the client (Article 6(1)(f) GDPR). Use in our advertising is governed by our terms and conditions (Section 11). Anyone shown in a photo who does not want this can simply write to info@anydoors.de; we will remove the images immediately.

11. Applications as a trainer

If you apply as a freelancer via our application form or by email, we process your details (including name, contact details, place of residence, experience, language skills, driving licence, availability, business registration and your message) to decide on a collaboration (Article 6(1)(b) GDPR). If no collaboration results, we delete your documents six months after our decision unless you have consented to longer retention.

For our newsletter (roughly quarterly: new formats, seasonal recommendations, tips) we only need your email address. We use the double opt-in procedure: after signing up you receive an email with a confirmation link. Only when you click it are you subscribed. We delete unconfirmed sign-ups after 30 days.

As proof of your consent we store the time of sign-up and confirmation and an irreversibly encrypted form (hash) of your IP address. The legal basis is your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time via the link in every email or informally by email. After unsubscribing we remove your address from the list; we keep the proof of consent for up to three years in order to demonstrate the lawfulness of earlier mailings (Article 6(1)(f) GDPR). The newsletter is sent from our email account at IONOS; your address is not passed on to third parties.

13. Leaderboard of our online games

In our virtual events (e.g. “Orient Express”), teams can enter their result in a leaderboard. The team or player name you choose, points and playing time are stored on our server at IONOS; the leaderboard is visible to other players. Please use a made-up name. The legal basis is the performance of the booked game (Article 6(1)(b) GDPR). We delete entries immediately on request.

We refer to our profiles on LinkedIn, Facebook and Google with simple links. No data is transferred to these providers when you visit our website. Only when you click a link are you taken to the respective provider, whose privacy policy then applies.

15. Retention periods at a glance

Enquiries and correspondence without an order: 3 years after the last contact
Customer data: 3 years after the last contact, unless a statutory retention obligation applies
Invoices and other accounting records: 8 years; business letters: 6 years
Photo galleries: 14 days
Applications without collaboration: 6 months after the decision
Newsletter: until you unsubscribe; unconfirmed sign-ups 30 days; proof of consent up to 3 years after unsubscribing
Logs of AI-assisted processing: 12 months
Consent cookie: 12 months; analytics and advertising cookies see section 5
Visitor statistics: individual entries 400 days, daily totals without personal reference longer; daily random value 1 day

16. Your rights

You have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You can withdraw any consent at any time with effect for the future (Article 7(3) GDPR); the lawfulness of processing up to that point remains unaffected. An informal message to info@anydoors.de is sufficient.

Right to object (Article 21 GDPR): Where we process your data on the basis of our legitimate interest (Article 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing purposes at any time without giving reasons.

Right to lodge a complaint: You can lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The authority responsible for us is the Data Protection Commissioner of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

17. No automated decision-making

We do not make decisions based solely on automated processing, including profiling (Article 22 GDPR).

Last updated: 30 September 2026