VIBES BJJ
Privacy notice
Controller
VIBES UG (haftungsbeschränkt) Zimmersmühlenweg 14–18 61440 Oberursel Represented by managing director Wolfram Sorg. Email: info@vibesbjj.de Phone: +49 172 9533360
Visiting this website
When you access this website, your IP address is technically necessary to deliver content to your browser. Depending on the server configuration, the date and time, requested files, status codes, and browser, operating system and referrer information may also be processed. The purpose is to provide and secure the website. Article 6(1)(f) GDPR may serve as the legal basis; the legitimate interest is in reliable and secure operation. Retention information is provided under “Hosting and retention periods”.
Hosting and retention periods
Our website and email service are hosted by HostingTime GmbH, Stuttgarter Straße 10, 70469 Stuttgart, Germany (Webhosting Boost). HostingTime processes technical usage data and the contents of contact emails to provide these services. According to the data processing agreement supplied on 1 October 2026, web server access logs are retained for 90 days. Content data is processed in data centres in Germany and the EU/EEA. The agreement lists Hetzner Online GmbH, IP-Projects GmbH & Co. KG and comtrance GmbH for infrastructure, and InternetX GmbH for domain services. For SSL certificates it also lists ISRG / Let's Encrypt (USA) and Sectigo Limited (United Kingdom). According to the agreement, any transfers for certificate issuance are limited to necessary technical information, such as domain names and IP addresses, and do not include contact email contents. The agreement refers to standard contractual clauses or an applicable adequacy decision as transfer safeguards. Information about these safeguards can be requested from us. Daily backups are created for recovery purposes. As confirmed for our hosting service, backups and mail logs are retained for no more than 90 days. Web server access logs are retained for 90 days. An email deleted from the active mailbox may therefore remain in a backup until that backup expires. Our separate IT service provider is Wolfram Sorg Consulting, operated by Wolfram Sorg. It processes personal data on behalf of VIBES UG (haftungsbeschränkt) where necessary for technical administration, maintenance and support. HostingTime provides the hosting and email infrastructure. The data processing arrangements cover processing for VIBES UG (haftungsbeschränkt).
Cookies and embedded content
Images, videos and scripts are loaded from our own web server. No external video players, analytics or advertising services are embedded. Scrolling effects and explanations of terms run in your browser. Opening the contact form establishes a technically necessary session to protect the enquiry. The “vibes_contact” session cookie contains a random identifier, cannot be read by scripts and is set as a session cookie. In particular, it helps protect against form requests initiated by third parties. It is not used for advertising or visitor profiling. Processing serves our legitimate interest in a secure contact channel (Article 6(1)(f) GDPR). Selected Google reviews are displayed as locally stored text. This does not establish a connection to Google. You only leave our website when you follow the link to Google. Storing and reading the security cookie is based on Section 25(2)(2) TDDDG, as it is necessary to provide the requested secure contact form.
Contacting us
In the contact form, we process your name, email address, phone number, selected topic and message to respond to your enquiry and call you if we have questions. Please do not submit sensitive information, such as health data, through the form. The message is forwarded to VIBES from the server via an encrypted SMTP connection; the message body is not additionally stored in a website database. For enquiries about trial training or a contract, Article 6(1)(b) GDPR is the basis for the necessary processing. For other enquiries, processing is based on our legitimate interest in responding to your message (Article 6(1)(f) GDPR). The required fields are necessary to process and respond to your enquiry. The form cannot be submitted without them. No automated decision-making or profiling takes place. HostingTime GmbH provides the hosting and email service. Contact enquiries are delivered to a dedicated mailbox used only for this purpose and are deleted no later than 90 days after receipt. This period applies to the contact mailbox. Provider backups and technical logs are described separately under “Hosting and retention”.
Protection against abusive enquiries
The form server limits sending attempts per connection. To do this, a verification value is calculated from the IP address transmitted for technical purposes using a secret key. This value and the times of sending attempts are stored, rather than the IP address in plain text or the message body. These entries are used for rate limiting for no more than one hour and are removed during subsequent sending attempts once they are outdated. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is in protecting the contact channel from spam and overload. Separately, technical server logs may be generated by the hosting service; information about these logs and their retention is provided under “Hosting and retention periods”.
Membership administration
Membership contracts are concluded in person at our premises. We use Lexoffice (Lexware Office), provided by Haufe Service Center GmbH, Munzinger Straße 9, 79111 Freiburg, as our central system for customer and membership administration. We store customer master data, invoices and contracts there. Profile photos are not currently created. No membership contracts are concluded through this website and no visitor or contact-form data is automatically transmitted to Lexware Office. We process this information to administer memberships, perform contracts and handle billing under Article 6(1)(b) GDPR. Processing required to comply with statutory accounting and retention obligations is based on Article 6(1)(c) GDPR. Data is retained for as long as necessary for the membership and settlement of the contractual relationship. Records subject to statutory retention obligations are retained for the applicable period and then deleted when no further lawful retention grounds remain. The 90-day deletion period for the contact mailbox does not apply to membership contracts or accounting records. The provider agreement identifies AWS Frankfurt as the hosting location for core accounting functions. Depending on the functions used, supplementary services such as email delivery and support may involve providers outside the EU/EEA. The agreement provides for an applicable adequacy decision or EU standard contractual clauses for such transfers. Information about the relevant safeguards can be requested from us. Lexware Office and its supplementary services are not embedded in this website. A data processing agreement applies to our VIBES account.
Your rights
Where the statutory conditions are met, you have rights including access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on legitimate interests, you may object under Article 21 GDPR on grounds relating to your particular situation. You may withdraw any consent at any time with effect for the future. You may lodge a complaint with a data protection supervisory authority, in particular in the place of your habitual residence, place of work or the alleged infringement. In Hesse, this is the Hessian Commissioner for Data Protection and Freedom of Information.
Last updated
1 October 2026.