Data protection

1. Controller

MEOW Messen und Events am Holzmarkt GmbH Holzmarktstr. 25 10243 Berlin, Germany event@holzmarkt.com

2. General Information on Data Processing

Personal data is only collected on this website where necessary for its operation, for contacting us, or in the context of event organization. Data will not be passed on to third parties unless legally required or necessary for the fulfillment of specific tasks. Service providers who process data on our behalf (hosting, web analytics) are bound by data processing agreements under Art. 28 GDPR.

Processing is carried out in accordance with Art. 6(1)(b) or (f) GDPR, as set out for each purpose below.

3. Hosting

This website is hosted by Hetzner Online GmbH, located in Gunzenhausen, Germany. All servers are located exclusively in Germany. A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider.

4. Access Data and Server Log Files

When visiting the website, the web server automatically records:

IP address (anonymized)
Date and time of the request
Page or file requested, the response status and the amount of data transferred
Referrer URL
Browser type and version, and operating system

This data is technically necessary and is processed solely to ensure the stability and security of the website (Art. 6(1)(f) GDPR). It is not used to analyse visitors. The data is deleted after a maximum of 7 days.

5. Cookies and Local Storage

This website does not set any cookies.

If you switch between the light and dark theme, your choice is saved in your browser's local storage so the site looks the same on your next visit. It stays on your device, is never sent to us, and you can delete it at any time in your browser settings. Storing it is necessary for the function you asked for (§ 25(2) no. 2 TDDDG).

As no tracking, advertising or marketing cookies are used, no cookie consent banner is required.

6. Web Analytics

To understand how this website is used, for example which pages are visited and how visitors find us, we use Pirsch Analytics, a service of Emvi Software GmbH, Nickelstraße 1b, 33378 Rheda-Wiedenbrück, Germany. Pirsch does not set cookies and stores nothing on your device.

When you open a page, Pirsch counts the visit. To count each visitor only once per day, it creates an anonymous ID from your IP address, your browser's user agent, the date and a value specific to this website. Your IP address is not stored, the ID changes every day, and it cannot be used to recognise you on other websites. Pirsch also records the page visited, the referring website, the browser, operating system, screen size and language, and the country and city derived from the IP address. It also counts certain actions, without anything you enter: downloads, clicks on email, phone and external links, and starting and sending the request form, with the type of event, the chosen locations and the number of guests in broad ranges. No personal profiles are created, and the data is stored on servers in Germany.

Purpose: Anonymous measurement of the website's reach, to improve its content
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is knowing how the website is used without identifying anyone
Processor: Emvi Software GmbH, under a data processing agreement in accordance with Art. 28 GDPR

You can object to this processing at any time (section 11). More information: Pirsch privacy policy.

7. Contacting Us and the Request Form

If you contact us by email or send a request through the form, we process the data you provide. The form asks for details of your event (type, number of guests, budget, venue, dates and times, description) and your contact details (name, email address, phone number, company or private name, and address). Fields marked as optional can be left empty; without the others we cannot prepare an offer.

The form sends your request by email to our office, and a confirmation to the email address you entered. The request itself is not stored on the web server. To protect the form against abuse, the server keeps your IP address in hashed form for one hour, to limit how many requests one address can send.

Purpose: To process your request and any follow-up communication
Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (answering general enquiries, protecting the form against abuse)
Retention period: Requests that do not lead to a booking are deleted once they have been dealt with. If a booking follows, commercial and tax law require us to keep the related business correspondence for six years and accounting records such as invoices for eight years (§ 257 HGB, § 147 AO)

The form is sent over an encrypted connection (TLS), and your data is processed internally only.

8. Events

MEOW organizes events on the Holzmarkt premises and maintains guest lists in this context:

Data collected: Name, and possibly email address (only for direct guest list management)
Purpose: Event organization and access control
Legal basis: Art. 6(1)(b) GDPR

Photo and video recordings may be taken at events, but only in coordination with the respective organizers. In the case of intended publication, responsibility lies with the organizers.

9. External Services

Apart from Pirsch (section 6), this website loads nothing from other providers:

No embedded YouTube or other video platforms: videos are served from our own server
No Google Web Fonts or other externally hosted fonts
No external booking or ticketing services
No social media plugins or like buttons

The link to our location opens Google Maps. Data is only sent to Google once you follow it, under Google's own privacy policy.

10. Data Security

The following measures are taken to protect your data:

SSL/TLS encryption during transmission
Access limited to authorized personnel
Password-protected systems
Encrypted data storage
Regular backups
Server location in Germany

These measures comply with the requirements of Art. 32 GDPR.

11. Rights of Data Subjects

You have the right to:

Request access to your stored personal data (Art. 15 GDPR)
Request correction of inaccurate data (Art. 16 GDPR)
Request deletion (Art. 17 GDPR) or restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object to data processing (Art. 21 GDPR)
Lodge a complaint with a supervisory authority (Art. 77 GDPR)

Where we process data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time for reasons arising from your particular situation. To exercise any of these rights, contact us at the address in section 1.

The supervisory authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59-61, 10555 Berlin, Germany: www.datenschutz-berlin.de.

12. Changes to This Privacy Policy

This policy is subject to change in the event of legal or technical adjustments. The version published on the website always applies. Last updated: November 2026.