Privacy
Information about personal data processing on good-hours.club. Last updated: 15 November 2026.
1. Controller
Jean-Maurice Cecilia-Menzel
Smaragdstraße 18
80995 München
Germany
Email: [email protected]
Telephone: +49 176 44252656
2. Website access and hosting
When you access this website, the hosting provider processes technically necessary connection data, in particular your IP address, request time and URL, HTTP status, transferred data volume and browser-supplied information about your browser, operating system and, where applicable, referring page.
This processing enables delivery, security and error analysis. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is providing a secure and reliably accessible website.
We use Cloudflare Pages, DNS and the content delivery network operated by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes traffic and connection data for delivery and security. Depending on the processing, Cloudflare acts as a processor or as a controller for purposes described in its privacy policy.
The global network may process data outside the European Economic Area, particularly in the United States. Cloudflare describes its use of the EU–US Data Privacy Framework and, where necessary, EU standard contractual clauses. See the Cloudflare privacy policy and Data Processing Addendum.
3. Cookies, fonts and images
This website does not embed advertising pixels, visitor analytics, remote font services, videos or social media feeds. Fonts, logos and images are served as local website files. The website itself does not set tracking cookies or use local storage to recognise visitors.
Where the hosting provider uses strictly necessary security functions involving access to your device, that access is based on section 25(2)(2) TDDDG. Subsequent security processing is based on Article 6(1)(f) GDPR.
4. Contact by email or telephone
When you contact us, we process the information you provide to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries, otherwise Article 6(1)(f) GDPR, reflecting our legitimate interest in responding. Authorised personnel and communications service providers receive access where necessary. Email links open your email application; the website does not itself send a message.
5. Sharing, calendar and external links
Only after you click the share button does it open your device’s share menu or copy the public website link and preset text to your clipboard. It does not itself send a message to a recipient. You choose the application and recipient.
A calendar download is available only for a confirmed date and is generated in your browser. No calendar data is transmitted to us.
Google Maps, the studio website and other external services are linked rather than embedded. Following a link opens the other provider’s website, where its privacy information applies. For Google Maps, see Google’s privacy policy.
6. Retention
Personal data is processed only for as long as necessary for the relevant purpose. Technical connection and security data is retained according to delivery, troubleshooting and abuse prevention requirements and the hosting provider’s deletion policies. Enquiries are deleted when handling is complete and there is no legitimate reason for continued retention. Statutory retention duties and records needed to establish or defend legal claims remain unaffected.
7. Your rights
Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability under Articles 15–20 GDPR. You may withdraw any consent with effect for the future.
Right to object: Under Article 21 GDPR, you may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation. For direct marketing, you may object at any time without giving reasons. Please use the contact details above.
Under Article 77 GDPR, you may lodge a complaint with a supervisory authority, particularly in your country of habitual residence, place of work or location of the alleged infringement. In Bavaria, the authority for private-sector providers is the Bavarian State Office for Data Protection Supervision.
8. Security and changes
The website is delivered over encrypted HTTPS. This website does not make automated decisions, including profiling, that have legal or similarly significant effects. We update this information if functions or processing activities change.