Privacy Policy
Last updated: January 2026
1. Controller
Gibelin Unternehmergesellschaft (haftungsbeschränkt)
Kottbusser Str. 21
10999 Berlin, Germany
Phone: +49 176 84874867
Email: info@gibelin.berlin
Managing Director: Dilyana Velichkova
2. General Information
We process personal data in accordance with the GDPR and this Privacy Policy. Personal data means any information that can identify you (e.g., name, email address, IP address).
3. Hosting & Server Log Files (superhosting.bg)
This website is hosted by SuperHosting.BG Ltd. (superhosting.bg). When you visit our website, the hosting provider automatically collects server log data, such as:
- IP address
- date/time of access
- accessed pages/files
- referrer URL
- browser/device/OS information
- technical log data
Purpose: secure and stable operation, security monitoring, error analysis. Legal basis: Art. 6(1)(f) GDPR (legitimate interest).
Where required, a Data Processing Agreement (DPA) is in place.
4. Cookies, Consent & Consent Management (CookieAdmin Pro)
We use cookies and similar technologies (e.g., pixels/tags). Some are essential, others are used for analytics or marketing.
We use CookieAdmin Pro (WordPress plugin) as our consent management platform (cookie banner) to store and manage your consent choices. A cookie may be stored to remember your preferences (e.g., cookieadmin_consent).
Cookie categories
- Necessary: essential website operation / consent storage
- Analytical: e.g., Google Analytics
- Marketing/Advertisement: e.g., Meta Pixel, social embeds/tracking
- Functional: convenience features / embedded content (depending on configuration)
Legal bases:
- Necessary cookies: Art. 6(1)(f) GDPR
- All others: Art. 6(1)(a) GDPR (consent)
You may change or withdraw consent at any time via Cookie Settings (footer link or re-consent icon).
5. Contact Form (WPForms) / Contact Requests
If you contact us via our contact form (WPForms) or email, we process your data to respond.
Data: name, email, message, optional phone number; technical metadata (timestamp; IP depending on settings). Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Data is deleted once no longer required unless legal retention applies.
6. Newsletter (Mailchimp)
We use Mailchimp (provider: Intuit Inc., USA) for newsletter distribution. Sign-ups use a double opt-in process.
Purpose: newsletters, updates, marketing communication. Legal basis: Art. 6(1)(a) GDPR (consent).
You can unsubscribe at any time using the link in each email.
Third-country transfer (USA): Personal data may be transferred to the US. Appropriate safeguards may be used (e.g., Standard Contractual Clauses).
7. Google Analytics 4 (GA4)
We use Google Analytics 4, provided by Google Ireland Limited (Ireland).
GA4 uses cookies and similar technologies to analyze website usage, potentially including:
- anonymized IP address (where enabled)
- device/browser data
- interaction data (page views, clicks, time spent)
- approximate location data
Purpose: analytics and website optimization. Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Cookies (examples): _ga, ga* (only after analytics consent).
Transfers outside the EU/EEA (e.g., the US) may occur with safeguards such as SCCs.
8. Meta Pixel (Facebook/Instagram)
We use the Meta Pixel (Meta Platforms Ireland Limited).
Purpose: conversion tracking, ad optimization, retargeting. Legal basis: Art. 6(1)(a) GDPR (consent).
Transfers to third countries (e.g., the US) may occur with safeguards.
9. YouTube embeds
We embed videos from YouTube (Google Ireland Limited). When loading or playing videos, data may be transmitted and cookies may be stored.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner for external content).
10. Facebook embeds
We may embed content from Facebook/Meta (posts/feeds). When loaded, data may be transferred to Meta.
Legal basis: Art. 6(1)(a) GDPR (consent).
11. The Events Calendar
We use The Events Calendar WordPress plugin to display events. Depending on configuration, personal data may be processed if registrations/contact features are enabled.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
12. Processors / Service Providers
We use service providers for hosting, newsletters, analytics and marketing. DPAs are in place where required.
13. Retention Period
We store data only as long as necessary for the purposes described or required by law. Data is then deleted or anonymized.
14. Your Rights
You have GDPR rights including access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent at any time.
15. Complaints
You may lodge a complaint with a supervisory authority. In Berlin: Berlin Commissioner for Data Protection and Freedom of Information.
16. Updates
Last updated: January 2026