Privacy Policy

Data privacy policy

for the convention center Studio Villa Bosch

With this privacy policy, we would like to inform you about how we process personal data and inform you about your rights. We are aware of the importance of the processing of personal data for you as a data subject and accordingly observe all relevant legal requirements. In doing so, the protection of your privacy is of utmost importance to us. The processing of your personal data by us is carried out in compliance with the General Data Protection Regulation, as well as the data protection regulations of the respective country.

Person responsible for data processing

Convention center Studio Villa Bosch
Schloss-Wolfsbrunnenweg 33
69118 Heidelberg


Commercial register and register court: Local court Mannheim

VAT identification number:DE3044446709

Contact details of the data protection officer: 


This privacy statement uses the terms of the General Data Protection Regulation (GDPR).

 "personal data" means any information relating to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

"Restriction of processing" means the marking of stored personal data with the aim of limiting their future processing.

 "Pseudonymization" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.

"File system" means any structured collection of personal data accessible according to specified criteria, whether such collection is maintained centrally, decentrally, or on a functional or geographical basis;

"controller' means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

"Recipient" means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law shall not be considered as recipients; the processing of such data by the aforementioned authorities shall be carried out in accordance with the applicable data protection rules, in accordance with the purposes of the processing.

"Third party" means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.

"Consent" means the freely given, informed and unambiguous indication of the data subject's wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.

Processing operations

We collect and process the following personal data about you:

  • Contact, address and sales information, if you have provided us with your contact information or registered on our site,
  • Online identifiers (e.g. your IP address, browser type and version, related operating system, referrer URL, IP address, file name, access status, amount of data transferred, date and time of server request),
  • Social media identifiers.

Purposes of data processing

We process your data for the following purposes:

  • For the contact you have requested,
  • For information about our offer
  • Contact, address and event information, if you have provided us with your contact information,
  • Online identifiers (e.g. your IP address, browser type and version, the operating system used, the referrer URL, the file name, the access status, the amount of data transmitted, the date and time of the server request, host name of the accessing computer),
  • Contract data (e.g. subject matter of the contract, contract term, contract category),
  • Performance of events,

Legal basis of data processing

The processing of your data is carried out on the following legal bases:

  • your consent according to Art. 6 para. 1 lit. a) GDPR,
  • for the execution of a contract with you according to Art. 6 para. 1 lit. b) GDPR,
  • to fulfill legal obligations according to Art. 6 para. 1 lit. c) GDPR or
  • for a legitimate interest according to Art. 6 para. 1 lit. f) GDPR.

If we base the processing of your personal data on legitimate interests within the meaning of. Art. 6 para. 1 lit. f) DS-GVO are such

  • the improvement of our offer,
  • the protection against misuse and
  • the management of our statistics.

Data sources

We obtain the data from you (including through the devices you use). If we do not collect the personal data directly from you, we will also tell you the source of the personal data and, if applicable, whether it comes from publicly available sources.

Transmission/data recipient

When processing your data, we work with the following service providers who have access to your data:

  • -Web analytics tool providers,
  •  Web hosting providers,
  • management service providers,
  • Video conferencing service providers,
  • payment service providers,
  • advertising agencies,
  • printing service providers,
  • kitchen service,

security service.There is a data transfer to third countries outside the European Union. This takes place on the basis of contractual regulations provided for by law, which are intended to ensure adequate protection of your data and which you can view on request.

In addition, we transmit your data to the respective parties involved in the sales campaign, in particular the dealers.

Processing duration

We store your personal data only as long as it is necessary to achieve the purpose of processing or the storage is subject to a statutory retention period.

We store your data,

  • if you have consented to the processing, at most until you revoke your consent,
  • if we need the data to perform a contract, at most for as long as the contractual relationship with you exists or legal retention periods run,

If we use the data on the basis of a legitimate interest, at most as long as your interest in deletion or anonymization does not prevail.

Your rights

You have - partly under certain conditions - the right,

  • To request information free of charge about the processing of your data and to receive a copy of your personal data. Among other things, you can request information about the purposes of processing, the categories of personal data that are processed, the recipients of the data (if a transfer takes place), the duration of storage or the criteria for determining the duration;
  • Rectify your data. If your personal data is incomplete, you have the right to complete the data, taking into account the purposes of processing;
  • To have your data erased or blocked. Reasons for the existence of a deletion/blocking claim can be, among others, the revocation of consent on which the processing is based, the data subject objects to the processing, the personal data were processed unlawfully;
  • Tto have the processing restricted;to object to the processing of your data;
  • Revoke your consent to the processing of your data for the future and
  • Complain to the competent supervisory authority about unlawful data processing.

Further information on data protection

Contact form
The contact form on our website is a simple way to quickly get in touch with us. To make it possible to contact us, some fields are marked as mandatory. If you fill in the fields and select "Send", you agree that your data will be transmitted to us by e-mail with the message. The data will not be stored on the web server.

E-mail newsletter

If you register for our newsletter, we will use the data required for this purpose or separately provided by you to send you our e-mail newsletter on a regular basis. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described above or via the unsubscribe link provided for this purpose in the newsletter.

Data backup

We have taken extensive technical and organizational measures to protect your data against possible dangers, such as unauthorized access, unauthorized disclosure, modification or distribution, as well as against loss, destruction or misuse.

In order to protect your personal data from unauthorized access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardized encryption method for online services, especially for the web.


Each time our Internet pages are accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records stored contain the following data: Domain from which the user accesses the website, date and time of access IP address of the accessing computer Website(s) visited by the user in the context of the offer, amount of data transmitted, browser type and version, operating system used, name of the Internet service provider, message as to whether the access was successful. These log file data records are evaluated in anonymous form in order to improve the offer and make it more user-friendly, to find and correct errors and to control the utilization of servers.


This website uses so-called cookies. A cookie is a text file with an identification number that is transmitted to the user's computer when the website is used, together with the other data actually requested, and stored there. The file is kept there for later access and serves to authenticate the user. Since cookies are only simple files and not executable programs, they do not pose any danger to the computer. Depending on the settings selected by the user, the Internet browser automatically accepts cookies. However, this setting can be changed and the storage of cookies can be deactivated or set in such a way that the user is informed as soon as a cookie is set. In the event that the use of cookies is deactivated, however, some functions of the website may not be available or may only be available to a limited extent. You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Already active cookies can be deleted at any time via an Internet browser or other software programs. We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we cooperate with aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.The following types of cookies are distinguished:

First-party cookies: First-party cookies are transferred from the platform you are currently visiting.

Third-party cookies (so-called third party cookies): Third-party cookies are cookies that are transmitted by a provider other than the platform visited by the user. When a user visits a platform and another entity transmits a cookie through that platform, it is a third-party cookie.

Essential cookies: These cookies are necessary for you to navigate the Platform and use its features, such as accessing secure areas of the Platform. Without them, certain services cannot be provided, such as the display of content customized for your computer or device.

Performance cookies: These cookies collect information about how visitors use the platform, such as which pages are accessed most frequently and whether they receive error messages from websites. However, these cookies do not collect information about the identity of the visitor. All information that these cookies collect is aggregated and therefore anonymous. They are used only to optimize the platform.

Functionality cookies: These cookies allow the Platform to remember choices you make (e.g., language preferences and your region) and provide you with enhanced, more personalized features. They can also be used to store your preferences regarding text size, font, and other customizable parts of the website. They may also be used to provide services you request, such as viewing a video or commenting on a blog. The information that these cookies collect can be anonymized. Your browsing activities cannot be tracked on other platforms.

Marketing / advertising cookies: These cookies are used to show you advertisements that may be relevant to you based on your interests. They are also used to limit the frequency with which you are shown a particular advertisement. We also use cookies to measure how effective an advertising campaign is. They are usually placed with our permission by advertising networks and record your visit to a platform. This information is shared with other organizations such as advertising providers. Often, marketing and advertising cookies are tied to platform features. Our advertising cookies also allow you to participate in customer surveys to provide us with your feedback so that we can improve your user experience with us.


We offer various conference rooms for rent. For these offers, we ask for registration in advance, in the course of which mandatory data are requested. This includes in particular name, title, e-mail, address, and data required for participation in and implementation of the event. You will find a detailed overview in the respective registration form. The data will be processed for the purpose of fulfilling the contractual obligations, among other things for billing and for the preparation of accompanying material for the event (Art. 6 para. 1 GDPR). In order to send you information about the relevant event and important changes, for example in the scope of the offer or due to technical requirements, we use the e-mail address provided during registration to contact you.

The data collected during registration will be stored by us until the purpose for data processing ceases to apply or they are no longer required for the purpose. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be limited to these purposes. The data is therefore blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law or whose storage is necessary for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural person or legal entity. If users request the deletion of their personal data, their data will be deleted subject to a legal obligation to retain it. This does not apply to data that has already been printed and distributed.

Payment services

We charge a fee for our conference room rentals. For more information, please refer to the respective event page. Within the scope of this contractual relationship, we offer the data subjects to pay the invoice by bank transfer. The data processed in this context includes data such as the name and address, bank data, in particular account numbers or credit card numbers, as well as the contract and total details. The information is required to carry out the respective transactions. The payment information you enter with your payment service provider, in particular the account data, is processed and stored there. We receive from your payment service bar your account-related information and the amount of the payment.

Status of this privacy policy

September 2021

We reserve the right to change this privacy policy at any time with effect for the future.