This English version is provided for convenience only; the German version is legally binding.
1. Controller
The controller responsible for data processing on this website (kuwiku.com) within the meaning of the General Data Protection Regulation (GDPR) is:
Die Ausstellungsmacher
Owner: Christian Luger
Steinberg 11
82069 Hohenschäftlarn
Germany
Phone: +49 177 5004488
Email: info@dieausstellungsmacher.de
2. General information
Personal data is any information by which you can be personally identified, for example your name, email address or IP address. We process such data only insofar as this is necessary to operate this website, display our content or handle your enquiries, or where another legal basis applies. Below we explain which data we process, when, for what purpose and on what legal basis.
3. Hosting
This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. All data generated when you access the website or that you submit via the website is processed on STRATO servers in data centres in Germany.
We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR. Under this agreement, STRATO processes the data solely in accordance with our instructions. The legal basis is our legitimate interest in providing the website securely, reliably and efficiently (Art. 6(1)(f) GDPR).
4. Server log files
Each time this website is accessed, the server automatically records technical information transmitted by your browser. This includes in particular: IP address, date and time of access, page or file requested, amount of data transferred, status message, referrer URL (previously visited page), browser type and version, and operating system.
We need this data to deliver the website technically, to ensure its stability and security, and to detect errors or misuse. This data is not combined with other data sources. The legal basis is Art. 6(1)(f) GDPR. Full IP addresses are stored by the host for a maximum of seven days to detect and defend against attacks and are anonymised thereafter.
5. SSL/TLS encryption
For security reasons, this website uses SSL or TLS encryption, for example for enquiries you send via the contact form. You can recognise an encrypted connection by ‘https://’ in the address bar and the padlock symbol in your browser. When encryption is active, data you transmit cannot be read by third parties.
6. Cookies
For regular visitors, this website does not set any cookies for analytics or advertising purposes. The WordPress content management system sets technically necessary cookies only for logged-in users (editors/administrators) in order to keep them logged in.
These technically necessary cookies are permitted without consent under § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); any subsequent data processing is based on Art. 6(1)(f) GDPR. You can delete or block cookies at any time in your browser settings.
7. Contact form
If you write to us via the contact form, we process the data you enter (name, email address, subject, message) in order to respond to your enquiry. The form is provided by the WordPress plugin WPForms Lite, which runs on our own web server. Your details are sent to us by email and are not stored permanently in the website’s database.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract (e.g. an exhibition visit, a group booking or venue hire) or to steps prior to entering into one; otherwise, it is our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).
We delete your data six months after your enquiry has been fully dealt with, unless statutory retention obligations (such as commercial or tax law retention periods for business correspondence) require otherwise.
8. Contact by email or phone
If you contact us by email or phone, we process your details (e.g. name, email address, phone number, content of your enquiry) solely to deal with your request. The legal basis and storage period are the same as for the contact form (Art. 6(1)(b) or (f) GDPR). Your data will not be passed on to third parties without your consent.
9. Ticket sales via Fever and external links
We do not sell tickets for our exhibitions through this website ourselves, but via the ticketing provider Fever. Our pages merely contain links for this purpose; no Fever content is embedded, and no data is transferred to Fever when you simply visit our website. You only leave our website when you click on a ticket link. Fever is solely responsible for data processing on its platform; its own privacy policy applies.
The same applies to links to the websites of exhibition partners, organisers and other external providers. We have no influence over the data processing carried out by these providers.
10. Fonts
The fonts used on this website are loaded locally from our own server; they are part of the WordPress theme ‘Twenty Twenty-Five’. No connection is made to servers operated by Google or other font providers.
11. No analytics or tracking services
We do not use any analytics, tracking or marketing services – in particular, no Google Analytics.
12. Your rights
Within the scope of the applicable law, you have the following rights regarding your personal data at any time:
Access to the data stored about you (Art. 15 GDPR)
Rectification of inaccurate data (Art. 16 GDPR)
Erasure of your data (Art. 17 GDPR)
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection to processing (Art. 21 GDPR)
Right to object: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing or the processing serves the establishment, exercise or defence of legal claims.
You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). For all such requests, an informal message to info@dieausstellungsmacher.de is sufficient.
13. Right to lodge a complaint with a supervisory authority
Without prejudice to any other remedy, you may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA – Bavarian Data Protection Authority)
Promenade 18
91522 Ansbach
www.lda.bayern.de
14. Changes
We will update this privacy policy whenever the website, the services we use or the legal situation change. The version published here at any given time applies.
Last updated: October 2026
