kochwerk.berlin – Restaurant · Cooking school · Event venue
deen

Privacy policy

Last updated: September 2026

1. Controller

TCW Betriebsgesellschaft mbH
Managing director: Tom Boye
Roelckestraße 105, 13088 Berlin, Germany
Phone: +49 30 99271646
Email: info@kochwerk.berlin

We are not legally required to appoint a data protection officer and have not done so. For any data protection questions, please contact us at the address above.

2. Overview

We process personal data only to the extent necessary to provide this website, answer your enquiries and handle bookings, or where you have given your consent. We do not use any analytics, tracking or advertising services. Content from external providers (Instagram, Regiondo booking widget) is only loaded once you agree.

3. Hosting and server log files

This website is operated on servers in Germany. When you visit the website, technically necessary data automatically transmitted by your browser is processed:

  • IP address
  • date and time of access
  • page/file requested, amount of data transferred, HTTP status code
  • referrer URL
  • browser type, operating system

This data is required to deliver the website and ensure its security and stability (e.g. defending against attacks). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Server log files are deleted after 14 days at the latest unless they are needed longer to investigate a specific security incident.

Where we use IT service providers for technical operation, they are contractually bound as processors under Art. 28 GDPR and process the data exclusively in Germany.

Fonts are loaded locally from our server; no connection to Google servers is established.

4. Cookies and consent management

We do not use analytics or tracking cookies. Cookies are only set by the payment service Stripe, and only with your consent (see section 6). When you make a choice in the consent banner, we store that choice (category, timestamp, version) in your browser's local storage so the banner does not reappear on every page view. This storage is strictly necessary (Section 25(2) no. 2 TDDDG; Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).

External content (category "External media") is only loaded with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time with effect for the future via the "Cookie settings" link in the footer.

5. Contacting us

Contact form. If you write to us using the contact form, we process your name, email address, message and the time of your enquiry in order to respond. The data is transmitted via our server to the automation service Make (provider: Celonis Inc., One World Trade Center, 87th Floor, New York, NY 10007, USA), which processes the enquiry on servers in the EU and forwards it to us by email. Make is contractually bound as a processor (Art. 28 GDPR). As the provider is a US company, access from the USA cannot be entirely ruled out; Celonis Inc. is certified under the EU-US Data Privacy Framework (adequacy decision, Art. 45 GDPR), and EU Standard Contractual Clauses apply in addition.

Email and phone. If you contact us by email or phone, we process the data you provide in order to handle your request.

WhatsApp. Our website links to WhatsApp. WhatsApp is only opened when you click the link; from then on, the privacy policy of WhatsApp Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) applies. Please do not send us sensitive data via WhatsApp.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion of a contract (e.g. an event or venue hire), otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete your enquiry once it has been fully dealt with, unless statutory retention obligations apply (e.g. up to 10 years under commercial and tax law for contract-related correspondence).

6. Cooking class bookings via Regiondo

To book cooking classes, we embed the booking widget of Regiondo (Regiondo GmbH, Westendstraße 28, 60325 Frankfurt am Main, Germany). The widget is only loaded once you agree (category "External media" or by clicking "Load classes"). When it loads, your IP address is transmitted to Regiondo, and Regiondo may use cookies or similar technologies. The legal basis for loading is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

Together with the widget, Regiondo also loads the payment service Stripe (Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland). Stripe receives your IP address and device information and sets the cookies __stripe_mid (retention 1 year) and __stripe_sid (30 minutes) for fraud prevention. Data may be transferred to Stripe, Inc. in the USA; Stripe is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). If you withdraw your consent, we delete these cookies. Stripe's privacy policy: https://stripe.com/privacy

If you book a class, we and Regiondo on our behalf process the data required for the booking (e.g. name, email address, phone number and address where applicable, class booked, number of participants, payment information). The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Payments are processed by Stripe or the payment service providers shown during the booking process, some of which act as independent controllers. We retain booking and invoice data in accordance with statutory retention periods (Section 147 AO, Section 257 HGB: up to 10 years).

More information: https://pro.regiondo.com/de/datenschutz/

7. Instagram feed

On our website you can display posts from our Instagram profile. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland ("Meta"). The feed is only loaded when you click "Load Instagram" or have consented to the "External media" category. A connection to Meta's servers is then established, transmitting among other things your IP address, browser information and the page visited, and Meta may set cookies. If you are logged in to Instagram, Meta may associate the visit with your account. Data may be transferred to Meta Platforms, Inc. in the USA; Meta is certified under the EU-US Data Privacy Framework.

We are joint controllers with Meta for the collection and transmission of the data to Meta (Art. 26 GDPR); further processing is the sole responsibility of Meta. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
Meta's privacy policy: https://privacycenter.instagram.com/policy

8. External links

Links to Facebook, Instagram, firstvoucher (gift vouchers), intocities (360° tour) and WhatsApp are plain links. Data is only transmitted to the respective provider when you click the link; from then on, that provider's privacy policy applies.

9. Recipients

Within our company, your data is only accessible to those who need it to handle your request. External recipients are the service providers named above (IT/hosting service providers, Make, Regiondo, payment service providers (Stripe)) and, where applicable, tax advisors and authorities if we are legally obliged to disclose it. We do not pass on data for advertising purposes.

10. Your rights

You have the right to

  • access (Art. 15 GDPR),
  • rectification (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

To exercise your rights, simply send a message to info@kochwerk.berlin.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany, www.datenschutz-berlin.de.

11. Obligation to provide data, automated decisions

You are not legally or contractually obliged to provide your data. However, we cannot process your enquiry or booking without the information marked as required in the form or booking process. We do not use automated decision-making, including profiling.

12. SSL/TLS encryption

For security reasons, this website uses TLS encryption (recognisable by "https://" in the address bar).

13. Changes

We will update this privacy policy if our website or the legal situation changes. The version published here applies.

This English version is provided for convenience. In case of doubt, the German version shall prevail.