PRIVACY

1. Controller

The controller for data processing on this website is:

Further company details are set out in the imprint.

2. What happens on this site – and what does not

This website is an information page with a booking widget. You can use it without registering. There is no contact form, no newsletter, no reach or usage analytics, no advertising networks, no map or video services and no fonts loaded from external servers – the fonts used are stored on the same server as the site.

Personal data is processed in exactly three places: when the page is called up (clause 3), when your decision about the booking widget is stored (clause 4) and – only after your consent – when the booking widget is loaded (clause 5).

3. Hosting and server log files

This website is hosted by DomainFactory GmbH, c/o WeWork, Neuturmstraße 5, 80331 Munich, Germany. The hosting provider processes the data listed below on our behalf; a data processing agreement pursuant to Art. 28 GDPR is in place.

Each time the site is called up, data transmitted by your browser is automatically stored in server log files:

• IP address of the requesting device
• date and time of access
• name and size of the file requested
• notification of whether the request was successful
• previously visited page (referrer), where transmitted
• browser type and operating system

This processing is technically necessary to operate the site and serves its stability and security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely and without errors. The log files are deleted after seven days. This data is not combined with other data sources.

4. Cookies and storage in your browser

We do not set any cookies ourselves. Your decision about the booking widget is stored in your browser’s local storage (localStorage, entry locowo-anny-einwilligung) – together with the time and the version of the notice you agreed to. This entry does not leave your device; it serves solely to avoid asking you again on every visit and to enable us to demonstrate your consent.

The entry is valid for 182 days, after which we ask again. You can delete it at any time by clearing the website data in your browser or by clicking “Privacy settings” in the footer.

The legal basis for storing and reading this entry is § 25(2) no. 2 TDDDG (strictly necessary in order to provide the service you have requested – here: to respect your own decision) together with Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, as we must be able to demonstrate consent.

Cookies are only set on this site once you consent to the booking widget – see clause 5.

5. Booking widget (anny)

For the online booking of workspaces and rooms we embed the booking widget of our service provider anny GmbH, Cäcilienstraße 30, 50667 Cologne, Germany.

The widget is only loaded after you have given your consent. Before your consent, no data is transmitted to anny and no cookies are set; until then, a notice with the button “Buchung laden” (load booking) is shown in place of the widget.

When you click that button, a connection is established to servers of anny and other providers involved. Your IP address is transmitted in the process, without which a connection is technically impossible. The hosts contacted are cdn.anny.co, embed.anny.co and b.anny.co (anny), cdn.booking-buddy.de (room photos) and res.cdn.office.net (Microsoft).

On loading, anny sets six cookies on this website. All of them expire after 30 days:

a_embed_alvo

Recognition of your browser across several visits. The identifier is transmitted to anny together with advertising parameters (gclid, fbclid, ttclid, li_fat_id, utm_*) where these are contained in the address called up.

a_embed_oid

Identifier of the organisation the widget belongs to

a_embed_oat

Access token after you have signed in with anny

a_embed_cart_count,
a_embed_cart_total,
a_embed_cart_currency

State of your shopping cart during the booking process

The legal basis for loading the widget, setting the cookies and the transmission is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

Withdrawal: you may withdraw your consent at any time with effect for the future – via “Privacy settings” in the footer of every page or via “Einwilligung widerrufen” below the booking card. Withdrawal deletes the cookies listed above and reloads the page. The lawfulness of processing carried out up to the withdrawal remains unaffected.

A data processing agreement pursuant to Art. 28 GDPR is in place with anny. For data that anny processes beyond this as a controller in its own right, please refer to anny’s privacy policy.

6. Contacting us

If you contact us by email or telephone, we process your details solely in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in responding). We delete the data as soon as the enquiry has been dealt with and no statutory retention periods apply.

Our terms and conditions apply in addition to bookings; the booking data itself is processed in anny’s booking system (clause 5).

7. Recipients and transfers to third countries

We pass your data on only to the service providers named in this policy – the hosting provider (clause 3) and anny (clause 5) – and to bodies to which we are legally obliged to provide information. A transfer to countries outside the EU or the EEA is not intended; should one nevertheless occur through the services used, it takes place on the basis of the European Commission’s standard contractual clauses.

8. Your rights

You have the following rights regarding your personal data:

• access to the data processed (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on legitimate interests (Art. 21 GDPR)
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

An informal message to info@locowo-freiburg.de is sufficient.

Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority is the one at your place of residence or the authority responsible for us:

9. No automated decision-making

Automated decision-making, including profiling, within the meaning of Art. 22 GDPR does not take place.

10. Changes to this policy

We adapt this privacy policy whenever processing on this website changes – for example when a further service is embedded. The version published here applies in each case.

Last updated: September 2026